Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d32a6d8a-9fb6-3a78-9c6f-b1bb7fc33152.roa
File:                     d32a6d8a-9fb6-3a78-9c6f-b1bb7fc33152.roa (raw, json)
Hash identifier:          dU4YrfSglHedXEmWXCUzftdlFYgBtfGZaXtuhVykGRA=
Subject key identifier:   C6:7C:67:64:59:A3:4A:26:68:3F:15:B0:8A:B0:0F:05:60:C7:60:F7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D773A81E3698D6804696D6580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d32a6d8a-9fb6-3a78-9c6f-b1bb7fc33152.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        174.200.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:81:e3:69:8d:68:04:69:6d:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=b2f76713-ad43-4ff3-92e3-b5f662d359d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:c4:82:d8:92:ed:44:56:95:aa:06:86:f2:
                    7f:56:09:84:0b:a2:34:f5:d7:d6:6e:41:ef:69:d9:
                    cf:92:46:0e:fa:48:71:4f:74:bb:55:b6:63:f5:9d:
                    ab:73:bf:33:86:92:67:b6:b0:f2:ed:72:09:99:21:
                    e5:3e:df:ca:7c:36:9b:84:df:77:be:b3:56:ff:1e:
                    b5:f3:29:72:33:fe:53:af:17:63:d8:85:22:bb:fc:
                    27:60:35:ba:d1:eb:06:bc:35:3f:e8:e0:7f:2a:c4:
                    08:b7:84:b8:f7:63:28:40:87:b3:12:cc:7f:39:b1:
                    37:36:18:29:8b:a0:1d:f0:22:cd:ab:a6:52:33:b9:
                    3b:22:c3:fb:5f:0f:26:a3:19:d8:cb:70:b8:ab:a4:
                    a7:41:f1:d5:7f:c4:40:52:ca:cd:97:1f:63:13:56:
                    44:fc:0f:3d:db:10:8d:c1:d7:7d:dd:55:98:be:29:
                    ed:d4:b6:26:5f:74:15:a1:73:04:21:92:d8:9b:dc:
                    cf:f1:22:d1:9f:84:c8:c3:04:64:bc:a4:4b:f9:1d:
                    9a:fc:b8:87:28:21:f4:af:a4:c8:64:13:47:9a:de:
                    0e:2d:f0:5a:6d:7f:9f:e3:76:a9:da:d1:39:5d:97:
                    d8:3f:00:24:93:dc:99:33:c6:96:6e:54:d8:3c:b7:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7C:67:64:59:A3:4A:26:68:3F:15:B0:8A:B0:0F:05:60:C7:60:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d32a6d8a-9fb6-3a78-9c6f-b1bb7fc33152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.200.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:05:c2:12:be:ae:3d:b6:4e:a9:60:09:9b:3d:e0:3d:3d:03:
         4d:69:8e:05:46:c6:a3:8a:9e:9f:d6:73:3a:96:36:ea:de:83:
         16:86:3a:a9:ea:6b:e6:19:8c:5a:47:83:4d:41:60:17:f0:84:
         c0:2c:66:a5:be:9e:fd:aa:2a:6f:4d:4c:91:3c:6e:8f:0c:75:
         bd:52:32:76:e6:a2:88:61:19:19:a8:26:6a:6f:f4:dd:33:e2:
         5a:86:d2:10:2c:29:04:4d:f1:93:38:06:bd:38:11:56:5f:05:
         a1:12:b7:f9:08:f1:02:8e:36:71:13:84:3c:a1:9e:c5:ca:3f:
         5e:61:e7:b0:09:c8:58:a8:62:84:4b:ff:bc:72:9e:8c:5e:b4:
         87:ab:fb:03:78:52:d9:63:6e:56:2c:de:f4:7a:67:e4:bb:51:
         0c:86:8f:6c:ec:7b:94:b8:dd:a4:1c:e7:40:83:34:b5:5e:56:
         b6:a4:5a:ae:e0:a9:dc:39:3c:de:44:5d:0a:2a:33:76:05:8a:
         44:f9:02:05:0d:75:5b:10:ce:65:17:ff:51:06:99:be:3c:19:
         fb:c8:44:4f:3b:24:1e:b5:24:02:b1:51:32:57:af:80:8e:07:
         76:bc:b5:51:86:e9:01:42:6e:7b:5a:e5:57:f6:33:5f:85:0e:
         81:65:e8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:14:24 2026 by rpki-client