untrusted comment: verify with openbsd-73-base.pub
RWQS90bYzZ4XFvgRe0GZosgD3QrwAFhav0T9arbUw7iVlcavyYZ2MJlcmeQF3ZZfWVHRvPm8+/e92wsZ8LE5FUBAHspR8OH4PQw=

OpenBSD 7.3 errata 003, May 26, 2023:

IP address inheritance was handled incorrectly in rpki-client(8).

Apply by doing:
   signify -Vep /etc/signify/openbsd-73-base.pub -x 003_rpki.patch.sig \
       -m - | (cd /usr/src && patch -p0)

And then rebuild rpki-client(8):
   cd /usr/src/usr.sbin/rpki-client
   make obj
   make
   make install

Index: usr.sbin/rpki-client/validate.c
===================================================================
RCS file: /cvs/src/usr.sbin/rpki-client/validate.c,v
diff -u -p -r1.55 validate.c
--- usr.sbin/rpki-client/validate.c     6 Mar 2023 16:04:52 -0000       1.55
+++ usr.sbin/rpki-client/validate.c     15 May 2023 04:47:22 -0000
@@ -145,6 +145,8 @@ valid_cert(const char *fn, struct auth *
       }

       for (i = 0; i < cert->ipsz; i++) {
+               if (cert->ips[i].type == CERT_IP_INHERIT)
+                       continue;
               if (valid_ip(a, cert->ips[i].afi, cert->ips[i].min,
                   cert->ips[i].max))
                       continue;