Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4df0f071-62a2-3a5b-bf23-da2dc6a83201.roa
File:                     4df0f071-62a2-3a5b-bf23-da2dc6a83201.roa (raw, json)
Hash identifier:          7bPA03BzdBPFAj4glv4pZu5znyMPabLovRM1XTQVeAY=
Subject key identifier:   02:AD:3A:9D:31:A7:F3:93:F8:B8:F4:8F:00:31:E9:8A:EB:46:CE:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D0F3E231D96DFC21D8AC79F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4df0f071-62a2-3a5b-bf23-da2dc6a83201.roa
Signing time:             Wed 04 Mar 2026 19:03:54 +0000
ROA not before:           Wed 04 Mar 2026 19:03:54 +0000
ROA not after:            Tue 02 Jun 2026 18:03:54 +0000
asID:                     6167
IP address blocks:        75.254.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0f:3e:23:1d:96:df:c2:1d:8a:c7:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 19:03:54 2026 GMT
            Not After : Jun  2 18:03:54 2026 GMT
        Subject: CN=f32824ec-eebe-44e3-b5cf-a65f24cec9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e2:ef:40:c4:0d:fb:0d:48:9b:d0:60:d7:6e:
                    08:d5:8a:42:5e:79:7d:c7:85:1d:03:6d:67:e0:cd:
                    d3:37:44:5b:12:d0:3f:cb:9d:32:53:86:28:78:33:
                    8f:25:d4:e3:63:f7:e8:3b:22:eb:67:a2:88:8a:16:
                    7d:83:ad:bf:ef:12:c2:d7:82:38:48:84:b8:a9:07:
                    79:28:9c:00:2a:b8:29:14:e5:20:28:05:e5:5f:b4:
                    98:e4:46:00:ba:6f:52:12:75:af:1e:0a:53:8f:e0:
                    35:cf:24:98:1f:ef:83:0e:0e:94:5e:7a:c6:7a:a2:
                    7b:44:29:1d:b2:ef:16:8d:e3:61:3b:1d:67:af:4a:
                    7d:9d:9b:23:b5:cd:cf:e9:aa:d3:a4:8b:81:ac:5f:
                    96:04:cf:cd:9f:44:5e:dc:99:7f:81:64:86:f8:95:
                    04:e1:30:4a:50:94:69:17:2c:e6:5f:99:8c:d7:fc:
                    13:2f:07:d4:06:f9:2d:7f:4a:9d:77:ce:d4:87:2f:
                    77:9d:b6:1c:1d:dd:84:83:f2:d5:8d:d3:42:21:96:
                    cf:4a:9d:6d:4e:89:92:77:da:f3:d7:d6:18:e8:34:
                    93:f3:90:f7:6b:a7:dd:b8:08:c3:9b:cd:7a:df:bc:
                    a6:bc:47:40:c4:91:d3:e4:35:74:b8:29:0d:8c:9c:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AD:3A:9D:31:A7:F3:93:F8:B8:F4:8F:00:31:E9:8A:EB:46:CE:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4df0f071-62a2-3a5b-bf23-da2dc6a83201.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.254.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c9:70:4e:a0:1a:89:a8:12:ec:b6:a8:2a:62:85:fa:ed:82:
         56:a5:51:4a:06:cc:96:d5:ff:4f:f4:f8:ba:57:ef:ff:cd:08:
         9c:74:fc:e8:65:43:20:8a:eb:d6:a1:81:41:f3:7a:cb:80:97:
         86:ca:2d:19:20:8b:54:8d:39:ad:88:e6:19:60:fb:e7:67:b1:
         c8:8b:ef:a4:4f:8e:65:82:b6:25:a3:eb:db:fe:4d:c5:98:56:
         cd:1a:26:26:e7:da:08:ba:1b:d8:25:0e:24:b4:fc:9a:44:eb:
         e7:d4:41:b1:ef:c2:fb:d0:5b:53:86:eb:77:2c:27:a1:dc:21:
         88:48:f7:49:48:21:4c:5d:36:36:78:4b:2c:55:5a:03:19:00:
         ca:8c:8b:29:3d:f3:3b:39:49:41:31:51:19:f4:69:11:93:e7:
         1f:84:0c:a8:23:e1:cd:77:5a:a0:e6:d4:81:76:d2:2d:de:77:
         b9:2c:c8:d0:01:f6:65:fc:76:37:e9:77:92:d0:8c:76:b1:da:
         9c:ed:47:cc:03:3d:b5:2f:4e:65:72:8d:4a:2a:cc:91:3a:1d:
         59:11:4b:c4:3e:0b:2e:77:22:d4:98:3a:74:47:ea:c1:e1:fd:
         8e:26:ba:51:10:cc:32:dc:69:15:0e:ab:1d:83:3e:80:4f:aa:
         98:1d:3a:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0PPiMdlt/CHYrHn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMwNDE5MDM1NFoXDTI2MDYwMjE4MDM1NFowLzEtMCsGA1UEAxMk
ZjMyODI0ZWMtZWViZS00NGUzLWI1Y2YtYTY1ZjI0Y2VjOWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOLvQMQN+w1Im9Bg124I1YpCXnl9x4UdA21n
4M3TN0RbEtA/y50yU4YoeDOPJdTjY/foOyLrZ6KIihZ9g62/7xLC14I4SIS4qQd5
KJwAKrgpFOUgKAXlX7SY5EYAum9SEnWvHgpTj+A1zySYH++DDg6UXnrGeqJ7RCkd
su8WjeNhOx1nr0p9nZsjtc3P6arTpIuBrF+WBM/Nn0Re3Jl/gWSG+JUE4TBKUJRp
FyzmX5mM1/wTLwfUBvktf0qdd87Uhy93nbYcHd2Eg/LVjdNCIZbPSp1tTomSd9rz
19YY6DST85D3a6fduAjDm81637ymvEdAxJHT5DV0uCkNjJyr1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKtOp0xp/OT+Lj0jwAx6YrrRs63MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGRmMGYwNzEtNjJhMi0z
YTViLWJmMjMtZGEyZGM2YTgzMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS/76MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3JcE6gGomoEuy2qCpihfrtglalUUoGzJbV/0/0+LpX7//NCJx0/Ohl
QyCK69ahgUHzesuAl4bKLRkgi1SNOa2I5hlg++dnsciL76RPjmWCtiWj69v+TcWY
Vs0aJibn2gi6G9glDiS0/JpE6+fUQbHvwvvQW1OG63csJ6HcIYhI90lIIUxdNjZ4
SyxVWgMZAMqMiyk98zs5SUExURn0aRGT5x+EDKgj4c13WqDm1IF20i3ed7ksyNAB
9mX8djfpd5LQjHax2pztR8wDPbUvTmVyjUoqzJE6HVkRS8Q+Cy53ItSYOnRH6sHh
/Y4mulEQzDLcaRUOqx2DPoBPqpgdOpQ=
-----END CERTIFICATE-----
Generated at Tue Mar 24 14:42:20 2026 by rpki-client