Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa
File:                     fd224140-4d0a-3a04-9b68-dad4b44ae470.roa (raw, json)
Hash identifier:          Osm/DcfT/PHDFHxMDsOvL/3zdhJgTo5meLQIVeTeuE4=
Subject key identifier:   94:04:B2:89:99:37:AB:94:B3:4D:72:59:75:84:E8:AC:D6:00:3A:65
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF597CD873FC94B79ADAA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.200.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:59:7c:d8:73:fc:94:b7:9a:da:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=788e52b7-d0f0-43d4-abf8-cc4f91f10b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ef:67:0e:a8:50:dc:2b:45:48:ad:5a:34:58:
                    42:02:c5:8a:da:33:bf:d5:2f:e2:ec:6f:7e:db:15:
                    1a:27:3c:87:2d:a3:09:be:3f:bb:92:34:8e:43:45:
                    89:c1:1b:24:f9:1e:51:e1:10:70:73:e6:2b:64:73:
                    cf:a4:89:f7:2e:11:a7:34:8a:c1:33:e4:c4:d0:98:
                    95:c2:6d:d0:1f:a8:93:8a:c3:d6:62:5a:03:fc:8b:
                    3b:c5:27:46:09:a2:7a:86:c6:dd:4e:15:9c:9a:95:
                    d4:1b:1f:6d:49:0b:eb:9d:56:83:ea:cf:97:62:af:
                    91:4d:a2:3a:cc:ec:74:28:41:e4:a7:eb:71:7e:2e:
                    98:f7:c4:94:46:f7:60:32:d4:69:f9:10:ae:bf:dd:
                    98:9c:e2:76:0a:14:8c:39:68:89:dd:eb:b6:5b:66:
                    f4:cb:16:e0:38:a4:20:d5:89:b6:0d:54:79:55:ab:
                    3e:b6:4a:d9:7c:9f:15:26:bb:10:ed:63:06:c5:3c:
                    fb:7e:14:f6:e4:d8:51:18:fb:aa:96:99:c4:87:14:
                    c5:ed:2e:b9:2b:f3:c1:da:65:9a:21:0a:b8:31:ef:
                    33:fe:9d:a1:80:b0:94:63:6c:ed:02:d1:64:59:fa:
                    f6:5d:13:ab:5e:7c:30:fb:91:e5:8f:22:c4:b2:63:
                    0d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:04:B2:89:99:37:AB:94:B3:4D:72:59:75:84:E8:AC:D6:00:3A:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.200.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:bd:97:2f:d7:68:34:fc:9d:d1:a9:94:47:16:9b:22:24:84:
         6b:28:77:ef:68:b1:57:b4:70:d6:ac:34:de:fd:6e:0b:c4:04:
         11:fe:bb:e0:b9:25:6a:3c:69:88:dd:e0:70:76:43:ed:9d:c3:
         68:cd:8a:aa:35:a5:99:1d:a5:e0:9a:28:7c:7b:96:40:bc:4d:
         b9:58:1f:5c:d2:9f:18:cb:fe:5c:5c:37:9c:dd:3f:42:33:e0:
         8a:92:34:96:99:ac:79:6b:d5:9c:bc:44:0a:cf:59:45:1e:1b:
         c6:dc:b1:41:20:34:3f:39:27:d7:0d:fe:ea:a8:38:e7:34:1b:
         94:0c:00:56:3d:50:1d:21:46:4f:38:f7:cb:71:4b:ff:13:c9:
         e1:9b:dd:d4:23:ed:9e:9f:bd:27:88:85:71:3e:6d:53:a7:9c:
         e6:71:b9:41:28:f2:e3:a2:41:ea:32:d6:31:d8:74:63:92:4f:
         1d:a2:ab:96:2d:48:45:bf:15:8b:6a:f8:e7:ff:e6:d9:d9:ef:
         d1:f9:b1:24:fd:2a:97:94:45:02:32:7c:29:cd:76:7c:ab:af:
         b3:c4:7c:0d:3c:dc:9e:ef:8b:7a:6b:82:a2:e6:02:1f:2a:f8:
         18:fe:7b:b3:09:57:70:04:30:e3:a1:ec:08:d6:a3:df:25:7e:
         70:e8:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:24:06 2026 by rpki-client