Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a6c8cdc-85a8-3acf-98c5-c9b9cd39a796.roa
File:                     0a6c8cdc-85a8-3acf-98c5-c9b9cd39a796.roa (raw, json)
Hash identifier:          OSdUndvhof8pD5GKswJ9iZRL4yLdwRE8GQKMJVZRZBE=
Subject key identifier:   10:D4:17:CE:B0:96:BA:FA:9B:B5:75:BA:F6:56:81:EC:2B:B4:00:5F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D4D5A836B2F301111B3F32F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a6c8cdc-85a8-3acf-98c5-c9b9cd39a796.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     6167
IP address blocks:        174.43.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:83:6b:2f:30:11:11:b3:f3:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=2a2876aa-3173-44f7-a39c-2c5b4b3909c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:69:d3:97:04:66:93:37:43:c3:aa:e3:a1:
                    ad:92:8f:be:98:0d:aa:25:38:cb:21:07:1b:6c:0c:
                    5e:b5:a2:ea:e1:34:13:03:c7:3a:51:91:6e:2f:bb:
                    b6:8b:cb:44:a5:9f:49:94:c7:e3:97:e2:23:ff:ed:
                    24:b5:e7:fd:00:68:ff:48:29:3b:2a:cc:ca:de:7a:
                    6f:ec:ca:b6:e4:80:e3:93:97:3b:fc:4f:6c:11:07:
                    7f:6a:27:57:3b:18:22:b4:25:b1:05:a8:16:fa:51:
                    40:37:e7:ac:be:7d:b9:04:bc:c9:59:e9:f0:9e:cc:
                    df:1f:b1:6e:86:84:f7:91:9f:1a:29:15:b5:89:7d:
                    c3:13:fb:5b:ea:4c:1f:65:45:f8:63:27:f2:05:9f:
                    f2:73:c3:b6:22:04:fc:a8:fa:4f:aa:38:01:ac:cd:
                    2b:78:23:8f:c1:f9:d2:05:43:cc:10:56:56:73:c5:
                    0a:7b:02:fa:48:5a:44:64:82:34:60:5b:d6:f6:50:
                    b8:60:f5:69:26:65:9f:73:fe:0c:4a:e0:9f:96:2a:
                    6a:b2:1b:18:13:8c:32:b7:0d:eb:7d:69:db:19:04:
                    3a:7c:49:c3:1f:1a:08:d6:98:04:be:6c:57:ee:6c:
                    77:23:f3:39:5c:d4:f4:d1:b1:a6:e1:cf:28:c1:af:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D4:17:CE:B0:96:BA:FA:9B:B5:75:BA:F6:56:81:EC:2B:B4:00:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a6c8cdc-85a8-3acf-98c5-c9b9cd39a796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.43.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8d:be:00:3b:01:5e:14:32:91:86:c2:db:1a:25:53:1e:00:
         57:bc:f3:86:51:43:44:4d:74:eb:ff:19:84:92:96:ca:97:84:
         4e:2d:56:94:5e:de:77:34:f4:03:80:66:e0:9d:f6:3f:f0:19:
         67:5c:58:a4:8d:ca:fb:a3:51:d0:a5:9b:b2:b6:26:cf:91:c8:
         61:d9:30:52:8d:35:6e:0f:99:32:58:d1:91:77:29:d4:75:f0:
         dc:ca:b3:3b:14:28:dd:2c:ea:22:81:fc:46:cf:07:b3:c2:e0:
         1d:4d:ec:6b:34:a4:54:3e:3e:a7:f2:ec:b9:26:76:6d:79:57:
         4c:bb:8a:4f:70:79:5a:43:d0:53:88:d8:f3:cc:70:74:03:3f:
         d2:dd:99:a6:d8:50:67:1f:10:7d:2d:bb:42:fe:34:b2:b8:1a:
         7c:82:6d:c2:d0:9f:80:79:03:aa:8b:31:b7:3c:b2:52:9d:8d:
         db:1a:02:21:fe:0b:bb:0c:c9:0d:dd:45:59:81:30:94:3c:62:
         9c:c4:26:f4:24:2c:38:bb:b2:d0:0d:61:fc:c2:ca:de:57:d9:
         3b:ff:07:87:26:b5:f5:32:02:47:6a:d1:02:12:82:23:6b:9e:
         89:3a:c7:be:27:43:1c:c2:17:59:26:aa:4b:a0:c1:08:c3:54:
         e6:01:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 18:24:17 2026 by rpki-client