Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc2fd4a4-dcb0-3597-8835-4d4ea44c5f44.roa
File:                     fc2fd4a4-dcb0-3597-8835-4d4ea44c5f44.roa (raw, json)
Hash identifier:          GvHt8hv2tTEEKtLJiTHaUls5K96mTJ15+6x0NN0I8dw=
Subject key identifier:   F1:5D:04:69:25:6C:93:D4:02:4D:7B:F4:58:3A:B7:78:4D:02:92:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF6209579453CF5FEC5B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc2fd4a4-dcb0-3597-8835-4d4ea44c5f44.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.214.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:62:09:57:94:53:cf:5f:ec:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=4c3b3081-0092-4968-acd9-858f64a9375e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:a4:b9:b9:f4:e0:4c:b8:3c:1e:e3:f1:cf:
                    22:b2:ef:05:ff:a2:11:de:8a:42:b3:f3:54:b7:f7:
                    90:de:6c:15:c6:66:8d:d1:49:4a:b2:71:7e:08:dc:
                    6d:73:ec:cd:df:7a:f6:fd:40:da:d1:f9:45:68:3e:
                    b7:97:a9:df:30:58:55:88:85:44:f6:f7:fe:9b:fb:
                    0a:d3:f4:66:ef:c7:eb:d7:4b:1f:0d:e1:eb:13:36:
                    6f:1b:5b:05:01:e2:ae:ac:0a:e9:20:4b:8d:33:c9:
                    3b:37:66:73:de:ea:ac:8f:fa:57:13:26:80:3d:ed:
                    c5:13:d3:66:65:0a:7d:49:40:8e:e9:ed:cd:59:6a:
                    5f:71:b6:1f:3c:ae:15:cc:9e:f5:75:70:d1:48:90:
                    b1:a0:50:ee:19:53:1d:80:f2:e0:0f:1d:d6:26:b0:
                    9a:3b:20:b5:7f:d5:af:7c:13:7e:6d:4e:ca:68:31:
                    ba:f2:8d:dd:ac:93:31:86:50:da:ea:89:42:1a:88:
                    25:76:d1:55:84:7b:6c:9c:5d:91:bf:50:99:73:ad:
                    13:d7:4a:80:1b:17:88:26:06:58:d1:8f:23:71:da:
                    c9:6c:08:42:ec:92:57:b5:a6:06:f7:8e:c4:db:2d:
                    49:14:0d:3e:22:f9:56:07:4f:7e:17:78:eb:a5:ec:
                    80:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5D:04:69:25:6C:93:D4:02:4D:7B:F4:58:3A:B7:78:4D:02:92:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc2fd4a4-dcb0-3597-8835-4d4ea44c5f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.214.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:25:79:bd:6f:5f:2f:a2:00:7b:63:52:35:8c:ba:83:71:d9:
         98:80:a3:2e:12:eb:1a:70:19:2e:33:24:6b:7c:06:18:98:4a:
         96:52:6d:35:0a:bb:9b:1d:43:87:96:c4:97:83:d4:23:50:22:
         98:49:f1:ff:74:33:81:17:ec:bd:10:e3:0d:8f:38:68:74:ba:
         37:5c:83:6b:c0:72:ad:da:09:1a:6f:b8:da:b5:da:fa:79:87:
         e3:35:d4:6f:52:c5:9e:64:17:9c:0c:f1:92:d6:87:66:b8:28:
         35:85:a3:8b:f2:bf:57:36:06:47:c5:5c:7e:f7:ae:dd:0e:28:
         c4:bf:11:f3:2c:8d:20:e4:14:5d:0c:11:6e:7c:6f:3d:55:23:
         9a:18:af:1d:e0:b3:71:65:0b:e5:07:d3:72:a2:c6:29:96:b8:
         a2:68:4c:d1:99:11:11:50:64:da:2a:3f:50:c1:50:f4:58:ec:
         84:fa:37:cb:f1:38:24:cc:0c:f9:fa:60:27:75:39:26:b5:2c:
         aa:df:8b:b9:49:34:8a:89:20:5f:63:5d:f9:95:1c:47:63:17:
         50:75:42:5c:ce:fc:c4:d7:95:da:01:15:6c:ac:29:07:4a:32:
         36:78:46:a5:c3:b4:86:69:17:95:ce:8b:ef:78:14:9b:b6:36:
         ae:7f:da:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:20 2026 by rpki-client