Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe7da4da-4a6e-3a11-aa95-296db346a696.roa
File:                     fe7da4da-4a6e-3a11-aa95-296db346a696.roa (raw, json)
Hash identifier:          jKQep6SsOt1NlG/XkAibZkzyUFvhAcLzGJ8Kaak86ec=
Subject key identifier:   64:2E:1A:E7:FF:75:D3:2B:D8:DD:E6:8F:2C:75:3D:45:06:82:19:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF692F78A958EA2712D200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe7da4da-4a6e-3a11-aa95-296db346a696.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.219.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:69:2f:78:a9:58:ea:27:12:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=8ef1e9d0-f1bb-4e2c-9e60-a6b12962bf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:f7:b2:e3:5f:65:0d:5f:af:74:53:8a:a1:
                    06:a3:ea:1c:db:68:58:b8:9b:20:4f:c6:46:cb:4a:
                    8b:37:97:7b:fd:aa:49:89:7b:81:a2:c2:6b:e1:2f:
                    8d:ba:ca:41:88:8e:ff:16:98:b7:e2:47:7d:73:3d:
                    0e:9e:da:45:63:60:34:fc:57:ba:d2:ad:cf:47:ba:
                    0d:07:c7:df:89:79:3a:7f:df:18:3e:35:76:58:c5:
                    1f:e2:78:79:35:d3:30:cd:dc:94:a2:0c:20:2e:68:
                    2f:59:c2:f7:1e:a3:4f:e5:b2:de:b8:d2:4c:43:47:
                    b6:23:0d:2e:7e:77:9c:58:1b:90:fd:da:6d:09:95:
                    c8:43:ad:0d:44:b4:0b:a3:4f:c3:e5:93:0f:ed:f0:
                    57:fd:a7:09:3d:3a:ed:c8:69:fe:33:6f:b1:c3:16:
                    a3:49:45:bd:95:42:b6:bc:e0:80:c5:75:f7:c4:51:
                    e1:3d:a1:ce:f2:cf:5a:8b:c0:2f:9e:77:a3:18:a7:
                    1a:2f:93:60:08:10:41:0a:dc:45:c3:60:1e:e7:41:
                    5c:a1:76:26:ea:47:aa:bf:3f:d1:77:d0:e3:57:c6:
                    67:93:0c:6c:46:d9:3b:d6:69:d4:17:10:d2:e9:53:
                    a9:4c:7d:e4:f5:48:9e:15:38:44:46:2b:60:bc:51:
                    e9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:1A:E7:FF:75:D3:2B:D8:DD:E6:8F:2C:75:3D:45:06:82:19:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe7da4da-4a6e-3a11-aa95-296db346a696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0f:8a:ce:35:e1:99:d8:3d:39:38:b6:40:5a:81:cb:95:a3:
         bb:56:f9:71:0f:e5:3a:9a:ed:87:28:47:4b:24:e3:21:0e:7d:
         f3:26:0c:2f:83:9b:e6:30:a7:6b:cf:5c:8f:43:7a:c8:5d:78:
         91:11:4a:4f:f1:a1:7f:2b:0a:09:d3:7d:4f:65:63:e5:8b:83:
         77:30:37:34:51:0d:ba:9c:b6:48:14:61:f2:8d:c8:c9:fe:41:
         c5:74:b6:18:ff:7b:b5:a9:64:4c:c3:e7:0f:e5:d5:77:8e:06:
         3a:d2:a7:17:42:13:61:fd:b0:34:57:ba:b2:b3:69:f5:7b:e7:
         3c:3d:82:96:2f:b6:38:ed:27:19:03:23:c1:5b:27:4d:71:e5:
         10:39:ad:99:14:b2:f1:e0:cf:94:b0:8f:10:76:a5:2c:60:85:
         0d:fb:ed:4c:99:24:9e:90:f9:df:79:93:90:d5:9c:df:61:87:
         8e:44:77:d7:24:d1:08:9e:e5:6a:8a:93:a8:d5:1a:c0:3d:13:
         27:af:aa:ce:0a:fb:d4:4c:ec:5e:54:f5:d4:3b:5f:3b:a5:74:
         b3:60:ed:ac:07:cc:d0:51:0c:28:3e:3b:e1:cb:5b:8c:0e:21:
         35:17:e7:99:7a:24:5b:54:e7:62:b7:a7:a5:28:1d:21:47:96:
         d7:a0:1c:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr2kveKlY6icS0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
OGVmMWU5ZDAtZjFiYi00ZTJjLTllNjAtYTZiMTI5NjJiZjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAD3suNfZQ1fr3RTiqEGo+oc22hYuJsgT8ZG
y0qLN5d7/apJiXuBosJr4S+NuspBiI7/Fpi34kd9cz0OntpFY2A0/Fe60q3PR7oN
B8ffiXk6f98YPjV2WMUf4nh5NdMwzdyUogwgLmgvWcL3HqNP5bLeuNJMQ0e2Iw0u
fnecWBuQ/dptCZXIQ60NRLQLo0/D5ZMP7fBX/acJPTrtyGn+M2+xwxajSUW9lUK2
vOCAxXX3xFHhPaHO8s9ai8AvnnejGKcaL5NgCBBBCtxFw2Ae50FcoXYm6keqvz/R
d9DjV8ZnkwxsRtk71mnUFxDS6VOpTH3k9UieFThERitgvFHpZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQuGuf/ddMr2N3mjyx1PUUGghlgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmU3ZGE0ZGEtNGE2ZS0z
YTExLWFhOTUtMjk2ZGIzNDZhNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrttoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcPis414ZnYPTk4tkBagcuVo7tW+XEP5Tqa7YcoR0sk4yEOffMmDC+D
m+Ywp2vPXI9DeshdeJERSk/xoX8rCgnTfU9lY+WLg3cwNzRRDbqctkgUYfKNyMn+
QcV0thj/e7WpZEzD5w/l1XeOBjrSpxdCE2H9sDRXurKzafV75zw9gpYvtjjtJxkD
I8FbJ01x5RA5rZkUsvHgz5SwjxB2pSxghQ377UyZJJ6Q+d95k5DVnN9hh45Ed9ck
0Qie5WqKk6jVGsA9Eyevqs4K+9RM7F5U9dQ7XzuldLNg7awHzNBRDCg+O+HLW4wO
ITUX55l6JFtU52K3p6UoHSFHltegHBw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:10 2026 by rpki-client