Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ab8d270-0c72-3198-8425-52e59a633f3c.roa
File:                     9ab8d270-0c72-3198-8425-52e59a633f3c.roa (raw, json)
Hash identifier:          tZTInYB/C8cIQ2V30EUuhIpg57AHVEz+qM4Ysv/+ZP0=
Subject key identifier:   A6:F2:87:38:B7:B9:17:6D:09:57:3F:FD:22:9E:1E:62:1F:00:E0:76
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B83D9F2905DABEA41FB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ab8d270-0c72-3198-8425-52e59a633f3c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.219.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:83:d9:f2:90:5d:ab:ea:41:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=abbcbf4a-98ea-47bf-8ce9-ee2bfcd1778b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:12:ed:97:33:2f:e6:73:cd:28:69:a7:01:
                    9a:e8:f5:72:7b:1c:bf:1a:be:64:58:1f:43:61:b1:
                    75:3f:08:19:33:55:52:74:7f:e6:ad:e2:bd:4f:ce:
                    37:f2:cc:a9:b8:5d:9d:65:90:86:c0:55:06:b7:cd:
                    c8:86:3c:e9:dd:d0:f4:6b:0b:72:a7:e3:1a:a3:36:
                    9a:24:52:a3:e0:36:6a:f8:6a:5f:99:cf:b3:66:bd:
                    d7:e4:f9:35:48:4e:7b:8c:c6:79:55:94:9e:18:94:
                    62:10:2c:e1:d9:d4:9b:cc:77:96:f7:9d:be:5a:3e:
                    82:13:e6:24:60:de:2c:cb:1a:a6:b5:e7:ac:44:f3:
                    c4:51:6e:86:ec:00:2c:46:6b:75:8b:86:56:25:f7:
                    84:55:f9:52:d7:a3:8e:35:a1:b5:07:61:08:20:8c:
                    ae:40:cd:70:7e:28:47:af:4a:e2:95:da:c7:6e:b0:
                    50:a7:26:5f:59:d1:ef:b1:d2:18:9c:72:1e:83:7c:
                    39:4f:ed:c4:52:22:b5:ff:c1:dc:0a:f3:dc:5d:8e:
                    cd:9b:3b:7c:35:1a:32:6f:79:a1:39:50:33:ac:ea:
                    0f:05:6a:36:2c:91:67:da:bd:9e:32:53:c1:ee:34:
                    dd:15:0a:50:71:7d:ff:46:d9:f6:c7:2b:b1:2b:41:
                    46:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F2:87:38:B7:B9:17:6D:09:57:3F:FD:22:9E:1E:62:1F:00:E0:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ab8d270-0c72-3198-8425-52e59a633f3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1f:35:80:d0:a2:47:0f:5f:b0:dc:29:84:96:42:7a:1a:81:
         bb:83:a6:6c:e3:59:11:ca:69:6c:31:d3:41:6a:06:52:55:e5:
         23:10:bd:4e:48:4b:ac:84:2f:97:02:f1:dd:7a:64:f7:0e:6f:
         07:72:9e:b4:dd:82:b5:ec:bc:43:6d:44:e2:15:57:19:be:01:
         55:1d:65:65:06:27:dd:94:01:e7:54:e2:8b:05:a0:76:c3:5c:
         5a:e4:7d:2c:85:71:e3:34:1f:12:9f:df:cb:a9:e8:19:5a:ce:
         3e:04:c5:82:2b:dd:85:d4:4a:b6:77:8f:12:5e:1a:eb:29:98:
         aa:a4:9b:68:a9:53:05:d0:cb:4f:43:5f:a0:12:00:ed:06:50:
         62:b4:d4:6b:34:e0:c0:88:12:81:4b:61:0a:9d:ca:91:fe:fe:
         64:9a:38:fb:9c:3e:18:ac:3b:24:e6:0a:73:fa:e7:9a:71:7d:
         ec:0b:d2:92:4c:d3:75:da:14:eb:d8:13:c2:a4:dc:57:25:5c:
         44:ef:18:88:61:30:d0:53:7d:78:89:da:15:0b:e2:f5:09:f5:
         3e:57:dd:20:66:45:2e:68:f9:d9:98:47:6d:b2:7a:97:4e:9d:
         fa:d5:9b:88:a1:e5:bd:42:58:d2:d9:6c:6e:13:fe:f0:06:10:
         3e:63:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:53:09 2026 by rpki-client