Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa
File:                     d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa (raw, json)
Hash identifier:          YkHBA5PqK9lTLmo3l/x7uiZ0a0eqF6Km7D4SMUea0o8=
Subject key identifier:   C9:74:66:B0:70:BA:23:E6:B8:53:33:C0:7E:4A:65:71:D6:C0:1B:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2D9F2FDBBE08FA4A6EF27080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     22394
IP address blocks:        174.41.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:2f:db:be:08:fa:4a:6e:f2:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=ab197889-950d-4fef-99d5-62639df08b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:b7:eb:34:ce:32:90:47:bc:35:8e:65:eb:
                    76:20:ec:02:18:1a:b7:fb:57:7c:ba:2c:f5:23:42:
                    1e:d0:68:42:25:7a:85:26:66:d2:d9:29:6a:8c:af:
                    2c:4e:3b:c9:01:32:87:7c:0c:a0:08:8d:6a:d3:b2:
                    51:4f:44:1e:26:7e:5f:ec:22:a2:94:fe:67:a0:ac:
                    36:a9:bb:6f:7a:05:2e:d5:d1:9f:c9:e3:e5:24:26:
                    ca:ee:ab:a3:43:da:bb:c7:6b:79:c9:cf:3d:f8:02:
                    a0:96:25:8d:df:1b:57:27:a4:a3:37:91:35:29:62:
                    4f:ab:db:ed:2d:f4:7f:24:5f:91:de:fd:ff:f2:24:
                    2b:3c:f1:1a:e2:c3:7a:a1:ec:ef:3c:0b:a6:56:9e:
                    da:37:e9:31:06:e3:0e:b7:44:5c:5e:48:92:8e:a6:
                    17:bf:cd:1b:45:8a:30:0c:8d:55:16:89:49:93:f9:
                    1b:87:0c:66:14:ae:db:76:73:f2:f4:5b:3d:32:56:
                    32:29:26:7c:75:d2:52:77:a8:33:82:32:a0:b9:28:
                    f2:a1:b8:c0:f3:01:1b:4d:6e:90:b4:85:4c:7a:3c:
                    04:d4:2a:58:28:92:7b:bf:bc:21:fe:c3:6b:ce:29:
                    ed:27:81:0b:d6:ef:cb:ce:4b:04:57:7f:5c:6f:8b:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:74:66:B0:70:BA:23:E6:B8:53:33:C0:7E:4A:65:71:D6:C0:1B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:27:f0:3f:d9:e3:de:0f:2f:77:5a:d9:a4:96:b1:af:8f:24:
         a3:63:16:61:f1:20:45:76:f1:63:45:de:d3:6d:4d:92:6c:55:
         6f:c9:75:22:69:d2:14:a8:87:1b:17:e6:bc:8f:62:19:08:18:
         4c:93:15:63:16:20:0c:e1:08:9b:bd:6f:fb:43:2f:3d:72:d3:
         99:0e:d6:7e:0d:f2:9b:52:1a:4c:ab:02:85:a6:e2:3f:65:93:
         35:35:a7:38:bf:33:f9:f8:8f:2b:58:c8:42:3f:e8:52:30:13:
         62:4c:a9:3e:2f:a0:fc:21:ed:14:eb:68:ad:20:15:e9:7d:52:
         d0:7e:a9:ba:a5:fe:06:c4:f8:c1:a0:5e:c0:66:c6:ac:71:f6:
         1b:dd:1a:0c:2a:73:57:24:b4:59:da:dd:5f:3f:84:f7:04:a0:
         ae:2f:c5:ad:1d:23:42:1d:58:48:5e:52:ea:ff:9a:b7:74:49:
         f0:b9:84:e8:63:05:1b:f9:68:3a:62:e2:70:9a:3c:c7:76:68:
         27:6e:f6:02:65:79:e5:4d:bd:31:d3:8e:79:04:f3:fe:d0:88:
         27:23:77:49:5e:b3:5b:63:be:9c:fc:b9:82:1f:8e:2c:4e:33:
         f3:d7:10:5c:be:17:ff:d3:81:04:c3:7d:73:38:08:70:31:9f:
         ba:4e:02:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 03:45:53 2026 by rpki-client