Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa
File:                     884000e2-fd1c-3bcf-8abc-d10f045ba796.roa (raw, json)
Hash identifier:          YeZXgCjLH0mTmt8HxcIkFpQhNE9125oZkWxbPOJxiNI=
Subject key identifier:   7B:1E:7B:BB:B3:A2:E6:A6:DA:95:C6:DD:3C:DC:9E:41:4C:E2:CC:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D4D5A841FACDF3D5CA9293EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     22394
IP address blocks:        174.41.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:84:1f:ac:df:3d:5c:a9:29:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=cb15531d-1e6a-48cf-b9ec-b557287c4624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:2e:85:fe:2d:04:fc:56:67:38:f3:8f:60:
                    37:4f:8b:cc:8b:9f:a9:86:23:29:62:25:3f:a2:82:
                    8f:36:4b:75:a0:c1:3d:cb:a5:3d:2d:da:9c:aa:7f:
                    e8:69:b3:9b:fc:0a:a9:0f:ab:01:f0:cc:12:18:96:
                    30:93:40:d8:55:3c:6c:d3:35:d8:3a:91:14:10:16:
                    c0:d8:4f:c8:b6:13:af:b7:78:e3:74:5b:15:67:cb:
                    9f:fb:a5:76:e3:bd:94:42:d3:77:48:23:f9:81:83:
                    95:56:d2:7e:3c:3d:b2:a0:03:2a:6f:ee:3f:c7:e2:
                    95:1f:52:eb:40:28:45:3a:59:7c:81:2c:e4:c9:f7:
                    46:f0:63:d2:bc:4a:f4:44:ea:9c:89:4d:59:d6:d7:
                    be:41:0c:35:ad:93:23:4b:11:fc:84:f7:5e:54:0e:
                    73:5a:cb:2f:4c:bb:72:ac:1d:be:41:8b:26:c1:b9:
                    fc:24:3a:01:5c:c1:c7:47:93:57:12:87:7a:f4:88:
                    9e:e9:05:11:09:af:b0:f3:38:18:4b:5b:5e:5f:46:
                    11:38:29:91:1c:3c:f1:8b:94:b0:8d:fc:1f:55:d1:
                    4f:dd:87:9c:5e:3a:a3:63:52:71:cd:bb:99:c8:5a:
                    e0:f7:a0:d6:a2:39:b8:a3:c6:58:26:c3:1e:35:9f:
                    fe:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1E:7B:BB:B3:A2:E6:A6:DA:95:C6:DD:3C:DC:9E:41:4C:E2:CC:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ed:9e:3d:0b:03:bf:a2:63:3c:45:12:eb:b2:97:b1:3a:b9:
         ef:26:cf:31:c6:d9:27:5d:16:70:c7:f6:60:d9:0b:d7:62:18:
         d8:c0:be:6b:a7:4c:31:93:74:75:9b:23:36:8e:4a:10:c5:c7:
         d8:31:60:f3:a2:72:ad:10:3f:59:2e:1c:dd:5e:7a:4c:7c:a9:
         ae:17:53:2e:ff:8a:f9:27:16:6c:4f:d1:21:12:fb:57:0d:06:
         05:59:b5:30:2e:a8:20:50:e5:84:b9:b0:d0:c0:5a:b2:14:f2:
         be:05:ea:83:af:5a:3b:62:45:30:1e:55:f9:1a:94:6e:35:6b:
         6a:2b:ec:24:d7:96:6c:79:56:ef:7c:98:01:98:52:cd:60:e2:
         94:c3:d7:66:4f:52:52:25:1a:89:18:88:3a:45:8e:c6:a3:9b:
         c5:89:ea:ff:4c:38:80:cd:88:38:d0:02:bb:4a:b4:f8:42:62:
         06:a0:a6:19:6c:b9:b4:f0:26:83:bf:be:20:02:d3:54:4a:f1:
         47:94:85:90:c9:bb:61:05:ee:57:af:ff:a9:61:7b:f7:b6:58:
         d4:53:c9:97:bc:ce:31:e1:96:32:e5:20:96:b3:62:35:ae:89:
         88:a2:d4:9a:bd:50:b6:ce:7f:58:59:74:ae:5e:7b:ba:34:ae:
         97:ac:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:44 2026 by rpki-client