Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/373e449b-5515-3af4-8cac-c6cd88e7ccb2.roa
File:                     373e449b-5515-3af4-8cac-c6cd88e7ccb2.roa (raw, json)
Hash identifier:          FjIGA8QWov2kE4iWr0jmY4iCZph6J4MLAyAlk/eJ6Ek=
Subject key identifier:   4C:4D:79:6C:BC:22:EE:DF:01:44:38:CF:55:62:2B:27:06:88:42:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5D2F9FF64ACB2A4F3B7807C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/373e449b-5515-3af4-8cac-c6cd88e7ccb2.roa
Signing time:             Wed 01 Apr 2026 17:07:43 +0000
ROA not before:           Wed 01 Apr 2026 17:07:43 +0000
ROA not after:            Tue 30 Jun 2026 17:07:43 +0000
asID:                     6167
IP address blocks:        174.245.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:2f:9f:f6:4a:cb:2a:4f:3b:78:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  1 17:07:43 2026 GMT
            Not After : Jun 30 17:07:43 2026 GMT
        Subject: CN=bb0b0129-414e-44a7-9dda-4dade2ce6e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:4d:cd:0e:03:4e:b0:84:2b:bb:b6:d1:6c:
                    d1:98:3b:64:c3:c4:78:2e:0f:a9:02:3e:6c:51:41:
                    36:5f:cc:c2:02:21:40:14:a9:29:4a:60:68:0e:54:
                    df:54:6f:e8:1e:44:12:cd:78:87:4f:dd:75:64:1d:
                    c9:df:2f:9f:8d:18:af:8a:f4:d4:b4:c0:e5:2b:d6:
                    21:3d:ec:c9:20:4f:04:e2:99:44:d6:69:c9:25:bc:
                    74:75:87:8f:1e:02:5d:47:5a:76:ef:e1:23:fd:45:
                    2b:99:e1:18:1b:5c:97:fc:a0:b8:0d:6b:ec:88:b9:
                    ea:80:5b:03:8c:f7:0f:7f:dc:e7:4b:8e:62:8b:2f:
                    73:b8:b1:0e:19:70:cf:ac:7a:86:ce:44:ad:18:87:
                    60:f2:06:ef:54:ea:8a:25:1a:27:01:62:23:d6:1f:
                    de:8e:74:a1:aa:46:df:e7:99:1b:c8:3a:75:0e:5f:
                    55:29:1b:87:37:e9:4b:07:0e:9a:db:a8:cc:15:95:
                    2a:b8:d8:96:53:d5:60:84:d8:fd:74:40:5e:f1:c8:
                    af:d3:2b:ae:0e:c0:9a:61:bc:a3:a5:da:ff:c9:ff:
                    e5:8e:f1:8a:da:26:d1:ed:76:88:5b:79:02:69:0a:
                    e2:19:1a:00:6b:b6:a2:82:54:f2:b3:64:fa:12:17:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4D:79:6C:BC:22:EE:DF:01:44:38:CF:55:62:2B:27:06:88:42:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/373e449b-5515-3af4-8cac-c6cd88e7ccb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.245.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0f:74:0c:ef:b7:3b:ae:7e:32:c3:a5:44:72:d9:5a:ce:c9:
         08:62:f2:c0:23:3d:d3:19:2e:db:fd:c1:57:64:37:3e:bb:6e:
         cd:78:64:ae:82:8d:36:45:c6:12:b2:de:b0:74:a8:24:b6:b3:
         2d:61:17:f3:6d:97:66:60:63:a1:ca:6e:77:67:97:af:c4:24:
         1c:32:5d:51:59:88:84:9a:76:90:a7:12:20:68:82:30:cb:15:
         af:cf:f7:ec:e7:7f:88:99:d1:9e:85:8a:9c:ff:bb:c6:2a:a2:
         5d:74:f3:a2:f9:1f:40:7a:83:79:05:db:f9:bd:78:ad:ae:f9:
         99:b6:05:8d:a4:67:e3:31:3b:d6:12:d8:4b:20:eb:8b:b1:46:
         91:e4:ce:c6:68:a5:af:d1:55:9b:3a:a5:82:09:df:e2:16:93:
         4d:49:06:89:41:bd:d3:5b:97:1e:8b:09:ab:5b:6e:3c:d6:e7:
         0f:73:01:1d:f0:a5:ad:c7:86:04:e3:74:81:c8:5e:3a:e0:95:
         38:48:2e:5b:e7:70:4a:e4:92:e2:71:48:97:af:af:06:16:a2:
         12:5b:6b:9d:08:a7:cf:4c:62:af:80:84:56:69:f7:08:f0:ae:
         10:8b:66:f2:6b:4d:55:af:75:97:91:45:22:8e:7e:3c:b4:e8:
         35:33:a2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:14:11 2026 by rpki-client