Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aed9292e-f43e-379b-ad5c-38c9fe7dc2be.roa
File:                     aed9292e-f43e-379b-ad5c-38c9fe7dc2be.roa (raw, json)
Hash identifier:          ksD2EJ4+5Kr0oMJYeCpOcPbsmMN8XHVfrMedMLggLLc=
Subject key identifier:   DF:48:D8:10:D8:87:F1:F7:78:6C:D9:9F:8E:F9:B0:E2:D3:C8:E2:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F71EDAC8AE4A9933016D56780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aed9292e-f43e-379b-ad5c-38c9fe7dc2be.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     22394
IP address blocks:        174.41.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:ac:8a:e4:a9:93:30:16:d5:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=14c29bc6-aca0-4fc1-878b-727259708973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:df:88:ab:f7:36:1d:5a:96:78:92:ec:b1:
                    d6:99:7a:60:37:7a:99:65:31:60:99:17:aa:4b:2b:
                    60:fd:c7:ca:8e:76:e8:c8:a6:e3:ab:8b:ae:5a:0f:
                    85:52:ee:26:27:25:90:45:4d:ce:e8:78:7c:0a:eb:
                    56:bc:4e:b4:15:15:79:a5:a2:69:1b:3c:77:e9:91:
                    ae:88:bf:b2:4c:ac:2d:e5:64:9c:c5:29:11:63:a3:
                    47:9a:78:cd:5f:18:b4:6b:cb:74:b6:8f:cf:c6:40:
                    db:84:59:4b:2e:50:c2:1f:15:46:8e:d2:93:5f:c4:
                    5e:fb:25:f7:be:dc:49:89:f5:cb:e0:c7:25:6a:8c:
                    f3:99:cd:38:aa:59:05:a9:b6:e8:48:5a:33:85:cb:
                    1a:fa:b7:16:e3:86:75:94:a6:c0:23:70:58:7e:8c:
                    ad:2c:b7:c8:02:07:e4:4b:7f:50:75:0c:8b:78:eb:
                    e0:98:7b:f2:80:00:b5:91:17:9d:61:bd:fe:68:b8:
                    7e:f5:e3:63:0a:ed:6d:36:d2:1f:54:d1:98:40:a2:
                    03:54:14:39:e6:31:c1:9a:5e:26:ae:92:b2:38:29:
                    cb:61:f4:2b:b0:36:98:27:50:35:86:82:42:b5:8c:
                    59:83:f2:1b:2e:0f:c4:21:6e:98:83:c4:88:a9:5c:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:48:D8:10:D8:87:F1:F7:78:6C:D9:9F:8E:F9:B0:E2:D3:C8:E2:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aed9292e-f43e-379b-ad5c-38c9fe7dc2be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a1:0a:2e:a9:6a:3b:8b:23:bc:1f:71:ec:3d:c1:0c:32:d8:
         9e:65:ab:fe:02:ef:ca:13:5c:ac:18:59:80:0a:76:da:81:95:
         dc:35:d9:3f:f6:9b:48:bc:a6:b6:0a:ca:47:ff:3d:54:f6:61:
         80:0c:9b:56:04:91:48:8e:45:55:79:6c:1a:fa:c2:01:ee:8b:
         a0:99:1c:cb:55:4b:f3:0a:1c:a3:36:d8:30:1e:a7:1a:da:3d:
         1c:e6:02:63:74:74:5c:62:93:87:4b:4e:98:29:e7:23:40:54:
         61:bc:9d:96:ee:69:41:f5:98:f4:02:99:2a:5f:72:b2:9f:6f:
         09:35:90:14:0f:d3:b4:6c:58:85:47:e8:92:0e:e0:80:5c:56:
         45:e7:74:f8:57:fa:82:cc:55:02:68:11:bb:ac:f9:8a:1b:35:
         dd:12:fc:54:a3:a8:d7:74:65:6f:d3:3a:42:a4:52:8f:09:c7:
         c4:8e:f0:d7:89:3b:45:91:fb:68:01:40:30:43:e3:30:54:bc:
         95:8d:82:c7:4b:99:9e:a7:ca:63:0d:14:e1:73:5b:f8:92:42:
         00:25:d6:f3:99:6e:43:6b:b9:28:fb:63:89:5d:24:9d:ec:20:
         98:60:f0:76:73:00:c2:7f:bf:2e:ab:8d:0d:02:06:5d:8b:a1:
         cc:14:70:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ayK5KmTMBbVZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
MTRjMjliYzYtYWNhMC00ZmMxLTg3OGItNzI3MjU5NzA4OTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgffiKv3Nh1alniS7LHWmXpgN3qZZTFgmReq
Sytg/cfKjnboyKbjq4uuWg+FUu4mJyWQRU3O6Hh8CutWvE60FRV5paJpGzx36ZGu
iL+yTKwt5WScxSkRY6NHmnjNXxi0a8t0to/PxkDbhFlLLlDCHxVGjtKTX8Re+yX3
vtxJifXL4Mclaozzmc04qlkFqbboSFozhcsa+rcW44Z1lKbAI3BYfoytLLfIAgfk
S39QdQyLeOvgmHvygAC1kRedYb3+aLh+9eNjCu1tNtIfVNGYQKIDVBQ55jHBml4m
rpKyOCnLYfQrsDaYJ1A1hoJCtYxZg/IbLg/EIW6Yg8SIqVyBzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN9I2BDYh/H3eGzZn475sOLTyOKjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWVkOTI5MmUtZjQzZS0z
NzliLWFkNWMtMzhjOWZlN2RjMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrin2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOhCi6pajuLI7wfcew9wQwy2J5lq/4C78oTXKwYWYAKdtqBldw12T/2
m0i8prYKykf/PVT2YYAMm1YEkUiORVV5bBr6wgHui6CZHMtVS/MKHKM22DAepxra
PRzmAmN0dFxik4dLTpgp5yNAVGG8nZbuaUH1mPQCmSpfcrKfbwk1kBQP07RsWIVH
6JIO4IBcVkXndPhX+oLMVQJoEbus+YobNd0S/FSjqNd0ZW/TOkKkUo8Jx8SO8NeJ
O0WR+2gBQDBD4zBUvJWNgsdLmZ6nymMNFOFzW/iSQgAl1vOZbkNruSj7Y4ldJJ3s
IJhg8HZzAMJ/vy6rjQ0CBl2LocwUcK4=
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:07:04 2026 by rpki-client