Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3116a23-684d-3398-8524-0c9bd10f42b4.roa
File:                     c3116a23-684d-3398-8524-0c9bd10f42b4.roa (raw, json)
Hash identifier:          82RCSF9/w5PfkRDc15Q5levYWc+7CaFwsvyG8kpDmJE=
Subject key identifier:   65:78:F1:71:89:D9:E7:B7:55:69:F1:9E:CA:03:44:58:89:0E:C7:20
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D4D5A8E363A6DAB41B3F35100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3116a23-684d-3398-8524-0c9bd10f42b4.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     22394
IP address blocks:        174.41.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:8e:36:3a:6d:ab:41:b3:f3:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=ffa00674-feff-42a6-b11a-351b3a8b7cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:43:2f:ff:14:bb:1c:bf:78:a2:37:88:6f:
                    36:7c:4d:db:34:f8:f6:93:b2:65:d2:ce:62:96:0e:
                    08:ea:1c:64:9f:16:7b:c6:68:5e:c8:0a:76:75:07:
                    c3:7c:70:af:2a:82:43:cd:cb:32:78:bf:92:de:51:
                    9b:05:f3:a6:5c:50:c1:0a:a6:bc:ad:d4:1f:8b:f2:
                    16:02:79:64:0d:6a:a3:eb:d8:94:d8:64:c3:b2:11:
                    de:df:03:d2:34:a4:c8:e2:28:12:6e:0f:34:ad:8e:
                    f6:98:d8:fe:71:28:15:b1:de:8a:4d:33:c5:bf:2e:
                    d6:15:05:ab:fa:1c:50:20:d0:10:76:67:ad:bb:0a:
                    f1:4b:87:a3:f4:6b:94:b3:3a:2c:84:d7:d3:80:41:
                    c7:ed:32:e5:68:d1:74:aa:c6:e0:db:a9:eb:fe:b7:
                    1f:25:73:98:30:02:10:66:4b:15:d4:a8:22:32:73:
                    77:cd:a0:48:22:e3:12:46:d7:1e:35:20:27:af:2c:
                    e3:b7:50:7f:0d:da:98:84:11:2d:49:0a:23:f3:52:
                    c5:5f:d5:b2:a2:64:d9:20:41:bd:0b:df:80:e3:b5:
                    d3:a4:83:dc:d3:96:fe:b2:a9:44:c2:2f:34:df:d0:
                    96:4e:3e:6a:ea:22:dc:2a:a1:9f:b6:ba:6f:49:f0:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:78:F1:71:89:D9:E7:B7:55:69:F1:9E:CA:03:44:58:89:0E:C7:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3116a23-684d-3398-8524-0c9bd10f42b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:50:b4:3d:00:ee:42:aa:5c:b7:b3:33:a7:7d:ae:35:75:0a:
         80:71:89:ae:a5:d7:ff:00:2e:bb:dd:54:fe:c2:f2:70:36:c3:
         cc:b4:cd:04:80:65:99:17:22:e9:ff:a5:38:b3:2b:84:d2:31:
         c7:0b:45:b9:d4:0f:ba:f2:51:a5:8d:dd:8f:d3:b2:da:07:1d:
         8d:16:4c:54:10:60:6f:66:df:6b:80:6c:8d:21:16:70:ee:ae:
         0a:aa:7a:82:02:8d:bb:b4:a4:77:90:21:b2:20:36:48:4a:ed:
         54:be:ca:d3:79:88:b2:0b:67:2f:ed:f5:2e:9d:9c:73:c2:4b:
         67:dc:f6:ee:fe:e8:fd:82:97:80:d1:42:30:38:6d:69:ea:5b:
         5f:04:e9:27:bf:37:bf:fd:80:10:e0:c9:42:dc:6f:4a:8d:40:
         0a:d6:32:f8:ea:34:f9:35:e7:e5:10:1d:4e:18:03:59:51:88:
         db:95:b9:f1:90:b9:85:ec:74:82:9f:60:8d:77:49:2d:1a:e5:
         c9:ed:12:b2:7b:60:7f:21:20:3a:3f:95:59:08:16:31:dd:07:
         79:96:3d:08:88:a0:fd:d1:6d:9d:39:24:3b:0d:55:1f:52:c6:
         0e:82:47:1d:1e:42:82:36:d7:fd:0b:61:07:56:2f:1f:9e:12:
         ca:56:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:47 2026 by rpki-client