Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b882c67-00ca-3766-96ec-1ce2c855ffb2.roa
File:                     1b882c67-00ca-3766-96ec-1ce2c855ffb2.roa (raw, json)
Hash identifier:          /v0l9mUYwfD0IdnVLqAQpNwjAt7kEFVp1xHb75RAzRQ=
Subject key identifier:   E3:30:DC:4D:A9:8D:7E:22:C3:C2:FB:AA:C1:C4:95:76:4F:5B:76:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D4D5A8192FC9A2AC4E69BF7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b882c67-00ca-3766-96ec-1ce2c855ffb2.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     22394
IP address blocks:        174.41.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:81:92:fc:9a:2a:c4:e6:9b:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=b1c01b07-9297-4495-875c-2dc28a045c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:97:b4:06:d1:0d:f3:d5:cd:81:23:d3:29:
                    98:8e:d7:b1:af:84:6f:a3:ea:80:5d:dd:ea:17:86:
                    12:17:ec:cd:c6:e5:89:80:52:0b:33:f7:62:f4:5e:
                    f3:26:eb:86:dd:56:bf:54:b1:51:0e:b6:4a:52:84:
                    51:3b:aa:30:b5:6b:db:2f:21:9b:ad:be:e3:d5:75:
                    66:98:a1:73:4c:79:43:3f:a0:15:58:29:20:08:9d:
                    46:32:a2:47:34:17:60:ef:44:0e:22:70:dc:46:13:
                    84:a0:dd:66:00:ed:8b:90:61:ea:9a:61:30:fd:12:
                    78:3f:84:63:c1:07:26:18:e8:95:f6:e7:a8:16:bc:
                    f8:57:25:9a:a7:ff:58:ed:43:45:cc:47:01:de:d8:
                    40:0c:d3:80:ff:5a:1a:bf:cd:8e:f5:d1:d0:bc:7f:
                    79:f4:80:9d:fa:2b:6d:ca:0a:79:01:6d:2f:c2:29:
                    8f:22:b5:21:5b:4e:1e:6d:62:2a:50:88:53:1a:e8:
                    45:b1:bd:e0:52:c2:f3:9b:0b:45:dd:4a:a9:8e:ce:
                    ab:23:02:61:50:55:4b:c8:6f:78:53:75:4e:0d:d6:
                    8a:58:07:b3:f7:c8:de:c7:1b:9c:89:14:bd:11:a4:
                    e5:fb:1c:a3:1f:57:fc:3c:70:13:f4:57:19:f2:5f:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:30:DC:4D:A9:8D:7E:22:C3:C2:FB:AA:C1:C4:95:76:4F:5B:76:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b882c67-00ca-3766-96ec-1ce2c855ffb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fe:67:35:38:28:b7:e6:7d:83:ea:49:a3:df:02:1f:bd:65:
         ca:0f:cb:07:5e:50:00:21:24:24:7e:13:45:ec:bb:85:34:f3:
         72:ec:20:8b:59:1f:91:a4:24:4c:ca:09:14:e1:7a:22:ca:79:
         d4:95:db:3d:34:1a:c1:cb:4e:c2:9e:aa:9a:5d:d2:6d:11:1a:
         30:54:75:be:2b:be:9e:ea:7c:ed:7c:71:a8:7f:0a:2a:53:c4:
         5f:f6:24:00:82:14:1a:db:d5:e6:4b:58:24:aa:62:8b:2d:79:
         39:92:b4:04:59:f8:0c:d0:ea:4f:96:36:07:b1:fe:60:f9:e0:
         39:e3:29:37:36:34:08:5e:6b:c7:51:95:77:57:42:3a:b5:1f:
         94:24:ed:65:db:db:bc:a8:20:c7:33:c3:94:0b:de:8a:ae:07:
         97:b7:6c:97:5e:97:46:ef:89:4a:98:40:e9:a9:9c:ce:03:75:
         f7:29:27:58:ef:1e:6c:0e:71:aa:58:e4:aa:cf:69:08:f9:e8:
         27:91:6d:e9:12:0b:ea:0e:3c:5d:da:4d:4e:31:43:4b:4a:78:
         4e:c0:48:99:32:bb:a9:d2:e0:5b:90:a5:b7:5d:02:cb:69:ef:
         c2:1f:bb:01:a9:64:41:c1:d4:ca:c2:0f:34:cf:d3:6f:97:87:
         a7:2e:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 18:24:34 2026 by rpki-client