Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa
File:                     f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa (raw, json)
Hash identifier:          52vnoyg9VRIef4McYIg8H1khLkV+VmvAhyHOilikZB0=
Subject key identifier:   E6:17:30:D3:54:6C:44:6D:70:29:29:F9:0E:60:15:3A:95:49:4F:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C502D2388D10E13CE80740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.249.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:02:d2:38:8d:10:e1:3c:e8:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=e1e986df-0b8f-4da6-82bb-0b86976d05b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:14:7c:c8:5c:3f:eb:9c:cd:4b:f5:4f:b4:
                    47:c1:10:e0:88:51:0a:b6:b3:34:d6:cd:ee:59:63:
                    44:7c:c5:ae:7e:e1:63:00:33:bb:cf:66:44:10:6e:
                    97:5e:ad:52:8c:fc:7a:95:39:dd:74:12:83:b3:21:
                    f5:f4:27:e8:84:ff:8c:12:50:26:1c:27:e9:ab:ca:
                    6f:4d:a4:17:97:98:d9:99:34:69:33:c6:51:17:ef:
                    be:72:bb:ad:f4:f2:20:9b:64:29:16:38:aa:51:94:
                    b9:f8:d5:c5:ef:4e:5a:6e:36:9d:da:9f:1f:06:98:
                    9e:19:b7:39:d6:59:b5:4c:ac:fa:a6:93:e7:e9:dc:
                    8b:da:14:36:89:ad:47:6b:1b:19:2c:6d:77:c3:b3:
                    19:05:89:f1:68:98:9f:4a:e8:32:6d:08:c3:dc:bf:
                    d0:02:64:fe:39:56:3a:47:a8:6f:04:ac:4d:c8:f0:
                    a9:a8:39:4c:a1:ab:5a:2e:ea:9b:ba:94:ec:7c:7a:
                    2b:71:af:6a:6e:27:dd:41:53:88:19:aa:63:f1:83:
                    2f:f9:39:24:93:7a:c4:c9:87:7e:5d:91:a8:df:cc:
                    e4:55:3a:c7:16:0d:8c:8a:87:ef:05:4b:26:4a:c8:
                    34:e8:82:ac:36:72:43:58:6e:ac:9e:00:ac:4a:5d:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:17:30:D3:54:6C:44:6D:70:29:29:F9:0E:60:15:3A:95:49:4F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:00:63:2f:dd:88:87:bb:97:6b:84:63:79:71:a6:f1:e5:3d:
         d2:56:15:71:11:d4:a8:22:77:68:ba:e3:a8:a4:b1:f3:cf:91:
         a1:92:f7:1a:17:f6:8e:b8:98:4b:e2:06:53:1d:ba:30:a7:e5:
         a6:c1:fe:79:dc:44:f8:f3:9c:c1:a3:41:4b:e2:b7:8e:03:2d:
         56:37:01:cb:3d:8a:f9:63:83:a3:7b:4d:c5:bb:0a:85:35:dd:
         b6:5a:72:cb:eb:0e:5a:f0:38:d5:75:6c:e6:29:e2:7f:6b:41:
         0f:ba:0b:ce:cf:36:ef:b9:20:35:91:51:c9:6a:a3:84:ec:ff:
         55:02:15:b5:6c:41:e4:94:8e:bf:df:58:2d:9d:21:1c:2c:6e:
         b5:a4:b0:9b:b7:85:eb:c6:40:96:31:2b:5a:99:95:3b:ba:0d:
         44:53:7f:88:ff:ed:39:35:9f:98:86:0b:b0:23:b1:6f:a4:35:
         31:78:d3:fa:06:b9:aa:84:3c:40:20:64:38:cc:42:80:f3:e5:
         bb:aa:08:d4:0c:8e:de:1d:9d:2e:25:e5:ee:77:72:ca:a7:21:
         ad:1b:aa:53:43:6f:f4:53:58:65:de:e7:61:62:df:1b:b8:1a:
         0f:72:c2:ec:9c:b7:ae:d9:ea:70:bb:17:1a:1d:b8:93:20:0a:
         91:33:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:34 2026 by rpki-client