Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f7d9540-e74b-3c52-ab49-dc55908c1441.roa
File:                     7f7d9540-e74b-3c52-ab49-dc55908c1441.roa (raw, json)
Hash identifier:          QtewDZEG0ivoJEuDTKsZ5HjWWarTD52NyF6viw+1ZE0=
Subject key identifier:   17:F1:E2:7B:8C:58:EE:2E:71:7A:1C:29:66:A7:50:2F:68:00:2C:E5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D59EA5EFD0DC7215D36D49130
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f7d9540-e74b-3c52-ab49-dc55908c1441.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        174.254.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:5e:fd:0d:c7:21:5d:36:d4:91:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=3be54397-ec79-43ca-8c31-ba220ba777f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:e2:ea:77:80:cb:11:0a:1e:ac:02:a4:2a:
                    69:99:57:63:94:b1:16:21:86:2e:bf:8f:bb:08:ca:
                    e9:28:c0:06:e3:83:82:4b:b3:43:6a:6b:45:33:46:
                    02:91:24:6e:0a:55:b0:de:f5:e4:d6:e3:4e:ee:28:
                    5f:cb:43:94:ac:d1:b2:22:4f:4c:7f:9f:1a:7f:36:
                    7b:2e:a5:38:e2:4d:f1:83:43:5c:13:9e:e9:33:1e:
                    24:b0:0f:64:e5:01:ba:9e:c6:c4:ee:29:f8:1f:33:
                    b4:d3:78:53:7a:3f:e0:12:e1:c8:ed:f0:1a:43:09:
                    1b:96:d1:62:c0:17:66:b1:10:7f:0a:52:11:38:1c:
                    ef:d5:17:8b:25:57:4d:96:28:b2:27:23:2d:66:88:
                    63:ea:17:33:c6:ad:ce:e6:7c:ee:7c:c1:fc:43:8c:
                    26:49:9f:e6:bc:5a:44:00:75:ae:e8:d5:c4:9c:b0:
                    50:47:a8:e5:26:3d:0e:69:45:eb:f3:3f:2e:b8:82:
                    00:dd:0b:51:eb:05:24:5b:69:a4:09:77:79:51:0b:
                    d3:e7:5c:cd:0a:4f:6d:91:b7:c7:dc:fc:b0:d4:f1:
                    c0:cf:bc:bf:08:47:11:c8:86:d0:15:a9:3b:db:9a:
                    ce:50:22:b6:0f:bb:9a:4e:d9:21:1a:84:2f:af:5d:
                    ae:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F1:E2:7B:8C:58:EE:2E:71:7A:1C:29:66:A7:50:2F:68:00:2C:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f7d9540-e74b-3c52-ab49-dc55908c1441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.254.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ad:2f:a6:e4:e2:85:c6:b2:60:41:6c:cc:a0:c6:ac:ee:61:
         2e:40:0a:d1:62:ea:2e:48:ab:56:06:11:48:41:2e:27:f9:51:
         a0:ab:52:8a:a1:cd:c9:43:66:77:a8:e3:86:22:53:b8:d4:8b:
         88:73:ed:ad:69:a9:73:52:f3:03:f2:be:2d:3f:28:2c:b6:2f:
         d8:50:f8:f3:29:78:d9:f2:20:fc:d4:33:a3:99:c5:a4:51:9c:
         5f:13:4d:b2:ab:58:24:21:7f:a7:37:af:46:62:72:1a:5b:12:
         28:69:3b:e6:48:b1:a0:4d:a7:a7:cc:99:10:86:01:7b:8b:99:
         cf:dd:fb:3b:86:94:02:79:29:44:2c:0e:97:90:15:8c:df:00:
         bc:d6:00:52:d4:52:62:07:d3:bc:a2:56:e7:18:56:44:38:77:
         5a:dc:6c:b7:7a:28:6d:42:29:8f:e5:26:e0:f9:f7:46:ce:5f:
         18:13:63:b6:57:a6:96:28:e4:ba:32:0b:d1:9a:cb:df:54:5e:
         d3:59:84:ac:22:c9:91:cd:24:80:48:9f:fc:cf:59:49:c1:cb:
         0d:58:98:c6:3e:2c:f8:6a:33:06:66:37:2c:fa:aa:98:11:e6:
         7a:b6:0a:dd:69:94:8c:d4:79:f2:e2:81:21:d4:85:0f:b0:03:
         db:27:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:18:34 2026 by rpki-client