Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6d9fcad-2401-33f4-85fc-ab67b3fc5520.roa
File:                     e6d9fcad-2401-33f4-85fc-ab67b3fc5520.roa (raw, json)
Hash identifier:          N1w86w2q5HW8FfX40EJX/+MOIB47ltkQA8u9Foz+jJ0=
Subject key identifier:   9E:0A:4A:F7:AB:40:98:94:DE:9C:3F:28:44:43:38:05:76:F1:36:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C50382F280D7F6840E95C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6d9fcad-2401-33f4-85fc-ab67b3fc5520.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.249.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:03:82:f2:80:d7:f6:84:0e:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=a4ccc7f2-e4e3-4b3c-a8b5-19675e4a9967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:8e:97:f8:12:41:a4:ce:ab:b6:e1:78:7b:
                    0d:5a:66:00:67:17:8f:6f:01:3c:2b:9d:28:d9:c9:
                    08:94:0f:40:43:24:59:43:35:61:2a:dd:44:86:cb:
                    e7:6f:02:dd:bc:c3:9f:0b:13:0f:1b:e3:cb:8c:ae:
                    8e:79:26:30:06:63:18:b7:54:08:b7:73:4c:49:8a:
                    35:0f:17:60:f0:d7:e6:18:8b:40:e7:d3:bc:e4:e1:
                    ac:9b:09:c4:b2:52:1a:1e:68:29:ba:7a:b5:d5:27:
                    68:81:a8:51:6d:4c:10:3b:05:2a:a4:ce:34:f5:f3:
                    c8:0c:54:b4:cf:ab:48:61:49:de:00:f9:60:df:6d:
                    03:70:1c:bf:6d:c0:8e:da:1d:5b:36:38:69:d7:84:
                    19:5f:a5:06:12:7c:56:8a:16:8b:54:85:36:80:d6:
                    61:5e:21:1a:63:00:e3:60:9f:e2:35:f5:13:5a:b2:
                    d5:5c:13:40:90:09:c6:93:37:68:a8:b9:31:55:28:
                    f9:ca:31:2a:64:f7:e0:17:e1:92:2c:a6:46:d3:14:
                    91:f8:ce:27:d7:42:98:6d:94:52:dd:00:ad:c4:49:
                    3f:de:12:8b:17:8e:61:a6:c6:38:ba:0e:54:b6:d3:
                    fd:ff:5a:75:49:11:34:47:33:c9:44:89:31:80:3e:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0A:4A:F7:AB:40:98:94:DE:9C:3F:28:44:43:38:05:76:F1:36:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6d9fcad-2401-33f4-85fc-ab67b3fc5520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:7c:11:0c:dc:27:e5:18:79:d1:a8:16:98:63:21:5b:75:
         a4:bd:29:b8:41:b9:87:8e:db:5a:c7:50:c0:d1:5f:e4:55:6b:
         32:0f:d9:dd:40:2a:36:ce:c6:02:4e:4a:d8:34:b2:75:0d:31:
         e4:6b:29:d6:e6:75:ad:05:ec:23:6b:c2:54:0c:04:79:31:c7:
         86:b5:09:f4:e9:94:6c:d7:d9:ba:a1:3c:64:a6:e2:0c:3f:b1:
         9b:b8:26:60:4b:8f:d6:2e:4c:b7:ed:04:4c:bc:8d:eb:1d:19:
         d6:4d:cd:bf:de:3d:b4:c0:b2:4f:05:8d:9e:f1:77:2b:49:b9:
         8d:e4:48:25:0f:dc:54:b2:33:ef:2d:2b:99:70:6c:f2:e4:c7:
         25:aa:a3:f2:7b:bb:30:ec:24:ef:48:d4:11:9d:20:a2:d1:92:
         6a:f4:e1:93:dd:6e:d5:82:ab:62:f8:de:c1:28:27:25:81:3c:
         e4:9b:09:eb:da:ba:97:1f:46:80:38:f3:f8:d2:34:52:3c:9a:
         ea:54:47:68:c0:8f:01:cb:ce:f7:5d:b9:ef:d5:3d:a2:1b:29:
         93:25:74:e2:0a:e7:f5:78:dc:6a:81:c6:c7:76:e4:fc:7e:77:
         72:ba:e0:bc:6d:84:da:6b:03:94:c6:9f:13:dc:82:14:03:94:
         bc:22:c3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:53 2026 by rpki-client