Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/353cc6c1-877f-302d-afac-26f81de730c5.roa
File:                     353cc6c1-877f-302d-afac-26f81de730c5.roa (raw, json)
Hash identifier:          J5OXWX+f4ycnxoMF6QiRrllElchAYetadRtHSXdtQ5Y=
Subject key identifier:   75:66:1D:BC:95:83:29:63:5F:1A:22:A7:F0:33:1F:F4:74:F4:16:2D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3E5F1BCA098BBC744E921800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/353cc6c1-877f-302d-afac-26f81de730c5.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        198.225.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:1b:ca:09:8b:bc:74:4e:92:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=a1dd0545-007e-4cd9-8f9d-00aa54dad1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:b4:a3:e9:95:5f:de:d4:5f:1e:0a:19:7f:
                    20:9c:7d:43:c5:fb:65:3c:44:d5:66:a3:10:b7:7d:
                    c5:b0:25:03:b7:24:67:64:b6:95:99:9d:11:e2:ba:
                    d9:50:84:c8:0d:54:cb:bf:25:d5:f8:22:97:55:ab:
                    a1:9a:4d:5a:78:9c:90:0d:f8:fc:36:86:4f:4e:19:
                    02:75:43:4a:d2:81:2d:a7:d8:de:2c:93:be:58:b5:
                    cb:4a:a1:6a:06:22:ae:42:fe:31:e8:b9:53:82:30:
                    c8:35:9f:7f:fe:04:f4:82:dd:f8:1e:b8:85:88:10:
                    fd:cf:d7:83:a5:f9:47:bd:b3:dc:8b:6a:7c:cd:c1:
                    a5:87:02:f2:57:62:3d:1b:1a:9f:02:c7:94:0a:2e:
                    a3:61:b1:c2:86:1b:07:31:2e:2b:b6:6b:9e:37:b8:
                    89:05:9e:75:7f:0d:f9:5f:5f:df:c5:b9:ed:06:48:
                    32:02:e7:6b:5b:34:b9:34:62:19:c4:74:56:bf:fb:
                    e6:fa:fc:10:7f:85:36:50:50:b0:e0:ed:f1:e5:fc:
                    4d:2c:16:9e:db:e8:2e:34:87:18:72:c1:f8:74:48:
                    52:9c:3c:d8:43:2d:15:a5:49:43:a9:1b:66:69:37:
                    9b:2a:5e:2e:fe:9f:3d:6e:7e:ea:2e:8b:f0:3b:69:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:66:1D:BC:95:83:29:63:5F:1A:22:A7:F0:33:1F:F4:74:F4:16:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/353cc6c1-877f-302d-afac-26f81de730c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.225.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2b:38:b8:dd:44:7e:04:96:18:fd:aa:ad:cc:36:7e:0a:c3:
         3d:cb:c1:42:3a:5e:32:e3:92:f8:e9:c6:e7:82:76:fc:e4:30:
         31:9f:db:c3:14:5a:0e:c0:ca:02:4f:01:42:4c:09:b8:64:27:
         56:af:99:a0:2b:56:48:ba:d1:6c:d7:dc:52:2c:e5:83:dd:99:
         7e:de:94:a4:22:5c:34:38:37:3b:85:8b:cf:64:ff:d7:66:92:
         c0:3e:00:0b:fc:85:29:de:75:dd:8d:01:75:70:39:74:6f:1d:
         1d:bd:ee:d4:70:25:2e:8a:42:56:60:ae:4c:8e:46:1f:22:e6:
         cc:66:21:87:f8:5e:27:de:b8:ac:0e:80:c9:22:4c:6d:bf:4c:
         37:d9:83:fb:69:ae:d7:8c:fc:d8:e5:ed:cf:e9:1b:d5:c4:02:
         d3:75:f4:b1:78:7c:67:93:50:cf:9b:4c:6e:2a:91:86:09:cd:
         34:31:c8:ba:17:2d:55:16:e4:01:42:e2:f7:9a:72:d2:2e:0f:
         16:02:4d:78:60:8f:84:df:aa:81:4f:da:8d:99:06:c3:ce:d3:
         e2:1d:29:fa:c8:0d:55:d9:2e:92:1a:10:e6:d9:ee:85:66:44:
         7b:4b:2a:58:94:48:67:b3:c5:5d:7a:a5:a2:f1:f9:70:33:aa:
         44:c1:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:18 2026 by rpki-client