Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd564d0c-cad3-38ec-b744-2d7756c19340.roa
File:                     fd564d0c-cad3-38ec-b744-2d7756c19340.roa (raw, json)
Hash identifier:          ueDT6C45DsPWiBSmut383Sp8OUTU+pyS4Li/pcgZy9c=
Subject key identifier:   86:6D:3A:84:63:36:27:89:DE:20:60:96:39:1E:09:03:A7:12:CA:D3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C50314E7C913AEEEF47AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd564d0c-cad3-38ec-b744-2d7756c19340.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.249.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:03:14:e7:c9:13:ae:ee:f4:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=4b669336-5354-472c-9468-248b431c1283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:03:9b:53:bd:64:f1:8f:2e:56:0e:71:3f:
                    0a:da:af:c7:df:79:92:e5:c1:5b:0d:ca:30:72:76:
                    f3:3e:15:af:c1:af:b3:46:7b:15:34:49:b0:aa:c3:
                    9f:54:d6:82:82:a8:73:69:4a:ed:ad:60:ea:7a:ce:
                    e8:5a:6d:9e:14:14:00:10:84:96:3a:35:cb:e8:12:
                    30:a0:9a:28:9b:93:30:75:93:0c:d8:5c:83:f5:1a:
                    84:b9:2d:17:83:55:01:6b:82:6c:c1:c9:63:0a:cd:
                    e3:7d:9d:6a:ae:a8:40:3b:df:b0:95:b7:9f:69:eb:
                    bf:e0:07:0a:f4:33:d7:05:50:80:b3:ba:ee:12:1d:
                    54:88:e1:6a:d1:c7:ce:d3:61:6c:83:ab:38:ac:5d:
                    1a:1f:c7:7c:bf:6e:fc:56:a8:91:42:ba:72:7a:ec:
                    2c:94:52:77:fe:01:f8:12:48:3d:bc:2e:d2:48:40:
                    3b:2d:be:c1:31:75:9c:2c:68:7b:42:58:b6:a7:1e:
                    98:d9:5e:b4:b0:95:a6:29:00:9e:0a:7d:8e:bb:14:
                    fc:c8:08:cb:35:c1:35:5c:26:9f:e7:2b:f5:8b:a3:
                    9f:d8:3a:95:c1:49:d0:ee:b1:f6:1d:2b:8c:3d:9b:
                    f6:6c:1d:c9:a0:ff:b0:bc:90:72:c1:d1:23:21:cd:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6D:3A:84:63:36:27:89:DE:20:60:96:39:1E:09:03:A7:12:CA:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd564d0c-cad3-38ec-b744-2d7756c19340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ff:db:02:9f:92:c9:8b:28:cc:11:3d:7e:9f:46:21:5d:09:
         2b:b7:95:7d:da:ee:23:0f:52:d2:67:c0:04:03:85:fd:37:f7:
         4c:9b:10:42:f0:67:e0:65:ff:07:dd:90:8d:b7:eb:ab:bf:f8:
         ce:4f:48:1a:ba:5c:f1:17:25:0c:bd:bc:0a:f4:8d:2e:5f:2e:
         9b:90:51:80:a6:f3:5b:0f:df:38:86:fa:df:74:96:b9:2f:46:
         58:1d:75:36:62:42:3a:29:d5:1f:cd:fc:ea:ca:e9:fb:aa:a5:
         c4:e7:65:24:ff:77:fc:9a:6a:7b:c2:70:3f:47:eb:79:41:13:
         6d:93:3e:b3:c2:5b:62:2b:87:fb:83:f4:91:48:cf:79:85:20:
         65:a7:d4:63:e7:94:d6:ba:83:cf:f4:42:c8:55:25:b7:0c:1f:
         e7:12:d0:bb:c8:1d:ae:17:34:61:e1:fa:cc:94:ab:aa:e3:73:
         04:33:aa:09:3d:65:41:6c:bd:0e:bb:1a:64:10:b5:56:d0:06:
         a3:d0:1e:27:f0:12:79:cc:62:d1:cf:d5:f4:52:7b:24:cf:c3:
         73:21:1b:3d:98:6e:a5:e3:45:c5:5e:ac:0f:57:d2:da:5b:79:
         25:87:33:4b:4a:61:e8:a4:07:e3:0d:6f:bf:04:26:15:3d:6e:
         29:01:19:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:06 2026 by rpki-client