Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08e7bbdc-48ad-30bc-a7fe-1d78a6097808.roa
File:                     08e7bbdc-48ad-30bc-a7fe-1d78a6097808.roa (raw, json)
Hash identifier:          CMI53hnhgMSz95/NvrSXk45uCQl7dcAdU4ssGNSSImU=
Subject key identifier:   4D:2B:FC:0C:B8:12:F8:81:F0:89:0F:22:F2:2E:85:BB:19:53:A5:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D00B29F7D7C7CD526C8FF0A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08e7bbdc-48ad-30bc-a7fe-1d78a6097808.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        174.255.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:9f:7d:7c:7c:d5:26:c8:ff:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=d1ec91e6-11e2-4f16-bd63-4b96f258b92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cb:3e:5d:1f:31:43:04:32:dd:96:f8:45:15:
                    a0:1b:2d:e7:4b:4a:d5:73:56:80:03:e4:47:2d:06:
                    ab:a3:38:53:ac:4d:3d:a3:4d:89:b4:1d:b4:f0:5d:
                    a3:f8:ec:2b:65:cc:42:11:d0:28:6e:c8:d0:e4:85:
                    d9:45:11:24:0b:c8:ca:3b:ea:72:80:ff:9c:e2:bf:
                    22:19:12:c7:32:0b:f5:85:41:44:67:7c:70:55:df:
                    92:2c:2c:d7:e4:9b:7f:01:47:1f:e6:34:a9:66:6e:
                    cf:f7:99:03:7f:91:c6:49:fb:e9:e6:3d:a5:cb:48:
                    81:e1:83:a2:f1:56:9a:9c:85:c6:c0:a5:f7:0a:bf:
                    ab:e5:a1:80:2f:46:8d:60:af:2e:fd:35:ed:6e:71:
                    7f:5b:06:c1:9f:35:aa:57:49:60:7b:3b:41:d7:55:
                    1e:13:71:21:10:c3:50:3a:d7:48:5f:b9:fa:82:4b:
                    a6:b1:81:22:3f:12:5a:88:de:58:cd:d5:ab:4e:c7:
                    ad:4e:bd:a8:f2:be:78:68:42:c6:79:75:da:a4:e3:
                    13:8a:fc:2a:6d:35:3f:cf:ae:c7:a3:0f:3e:c7:2d:
                    bb:3d:c7:cf:14:6a:10:2a:7f:18:df:1b:70:67:e7:
                    8b:0c:fe:f6:84:24:b8:e1:db:48:b7:b4:a7:62:c9:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2B:FC:0C:B8:12:F8:81:F0:89:0F:22:F2:2E:85:BB:19:53:A5:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08e7bbdc-48ad-30bc-a7fe-1d78a6097808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.255.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:02:d6:fa:14:86:b1:57:6a:d6:53:63:39:a6:28:86:0f:78:
         c3:22:be:09:e6:e3:04:c6:04:ec:65:fb:ed:97:8b:bd:ac:41:
         8f:8e:86:81:c8:cf:2a:eb:69:cb:33:a3:c6:8d:0d:44:d4:cb:
         22:fc:d9:c7:08:66:ae:10:94:ca:fc:c6:0e:7a:f3:d5:63:9c:
         04:94:41:c5:d7:f5:d2:a2:44:40:c6:7e:ee:f6:66:a7:ff:bf:
         bd:a3:6e:b0:8d:b5:87:6d:e3:b8:11:34:c1:0a:b9:d6:42:96:
         56:ff:c7:6f:89:84:61:4a:d0:ea:cd:6f:de:f4:23:a5:1a:ed:
         65:7a:f9:1a:34:0a:60:c4:22:78:cf:78:f2:fa:ef:45:7d:e1:
         97:1c:43:d0:1e:b0:61:da:cc:7b:c0:7b:81:8f:56:3f:ef:db:
         63:c0:ef:ac:20:2a:39:e5:61:2a:69:96:f1:96:f3:f1:25:13:
         02:bc:e7:7b:b4:f9:d6:55:c6:ab:b7:80:f9:26:5a:a6:73:65:
         12:49:a9:47:0f:c6:63:d1:e3:00:f0:0d:87:4b:f6:89:2d:06:
         06:10:df:c5:e2:e9:f3:71:94:8c:d6:15:fe:21:49:52:11:91:
         3e:8c:13:09:04:94:0b:42:60:22:80:0d:1a:03:03:ae:56:21:
         b1:02:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:04:38 2026 by rpki-client