Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aba6f58c-6459-31a0-9fff-1281ae7f9c64.roa
File:                     aba6f58c-6459-31a0-9fff-1281ae7f9c64.roa (raw, json)
Hash identifier:          XI74KjN915Vs1471wkZ4DuQ/sUiMdWeKo/E/c7JBCfw=
Subject key identifier:   A5:CD:39:F9:C2:09:FE:28:34:E1:AB:FF:C8:59:D6:A2:43:04:8D:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D4D5A8273F17453C8A0CA22A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aba6f58c-6459-31a0-9fff-1281ae7f9c64.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     22394
IP address blocks:        174.41.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:82:73:f1:74:53:c8:a0:ca:22:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=254e05c4-53b3-4698-a9ae-436894041b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:00:c5:e0:69:a1:da:d3:e5:07:5a:05:a6:
                    71:49:d2:c3:48:d3:28:23:b1:2c:8d:62:bb:13:da:
                    63:ac:17:3b:29:dc:6e:44:6c:01:5f:58:15:e8:c5:
                    3d:a9:27:3b:95:7f:de:91:29:7c:c2:74:8e:a7:17:
                    6f:ef:69:db:99:63:9d:a7:a9:31:cc:1a:ad:b3:f4:
                    fa:04:f0:6e:61:f9:9b:56:08:ef:12:0b:d1:d4:38:
                    12:d0:94:22:19:d8:b5:d6:75:59:d8:52:ab:6f:18:
                    aa:78:a1:60:7a:99:e4:41:db:7a:71:4e:97:3d:95:
                    2c:96:7e:26:ed:2c:1f:8c:52:24:8d:89:17:39:7e:
                    6e:88:70:f0:a8:89:1c:23:67:19:8a:5f:ad:1d:0b:
                    2d:00:93:f7:b6:7f:78:9a:31:7c:c0:b4:6d:3d:20:
                    88:7a:c6:7b:59:8a:1f:6f:55:27:84:06:d6:07:a9:
                    ce:cc:6e:49:56:28:4a:6a:fe:24:90:78:d0:3f:7a:
                    e2:6e:51:b1:55:07:1d:8b:88:8f:72:6f:41:58:3c:
                    8a:78:de:46:00:bd:f2:f8:14:df:47:16:7b:18:9a:
                    97:e9:ce:87:87:14:99:1f:58:f5:9f:ad:e6:d3:30:
                    ff:7f:2f:b6:38:1f:c7:cb:54:59:b3:16:b9:43:66:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CD:39:F9:C2:09:FE:28:34:E1:AB:FF:C8:59:D6:A2:43:04:8D:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aba6f58c-6459-31a0-9fff-1281ae7f9c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:0e:aa:c2:bc:54:8a:48:e2:d7:af:23:5e:14:82:cb:63:
         33:d5:3d:f5:7a:d2:f8:30:b4:78:20:25:e4:4c:cd:56:27:d9:
         d1:72:59:fc:f0:b3:d8:ab:0e:94:e0:83:60:27:21:1d:a8:15:
         eb:92:f4:0a:0e:f4:56:2e:6d:59:02:49:94:08:1f:9b:70:ea:
         29:bc:32:88:fd:78:23:4f:04:2e:29:d5:2d:62:ac:17:84:58:
         85:35:07:e5:4c:23:f6:a1:25:c6:53:ba:6b:ba:63:88:1d:40:
         03:a6:c0:ed:83:77:be:e4:cf:f4:d6:a2:a5:a7:90:63:01:c0:
         9e:f3:a5:9d:a1:3e:7f:57:6e:29:17:db:4c:2d:1e:34:fa:a0:
         57:23:2e:df:46:10:19:c7:14:00:c0:e9:2a:c5:f1:e2:14:33:
         6c:99:12:07:04:bc:9b:7c:52:10:ec:65:d9:9d:1d:38:83:68:
         f8:16:e7:46:95:f7:c9:ab:fd:1e:a4:75:02:e7:5a:2e:e3:ff:
         22:f8:62:01:cf:14:1b:63:bd:87:67:24:26:0a:cc:f0:b8:2f:
         9f:30:7d:88:4b:dd:39:1c:76:03:e4:ab:3f:b8:8e:22:f8:fd:
         92:18:86:a0:84:9b:19:26:8d:4f:8f:03:4b:8d:74:12:67:60:
         e4:4a:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:09 2026 by rpki-client