Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7017f1a-4ee9-3908-bc65-0bcca32162d4.roa
File:                     c7017f1a-4ee9-3908-bc65-0bcca32162d4.roa (raw, json)
Hash identifier:          ZAcgfcnddDfgty+hwR9hTwBgGz4ES4fDaBxUBpvoMt4=
Subject key identifier:   80:B2:24:B1:27:DE:03:52:9B:85:97:7C:68:D7:0B:74:91:02:38:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A575825F47E339DF776C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7017f1a-4ee9-3908-bc65-0bcca32162d4.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        198.225.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:57:58:25:f4:7e:33:9d:f7:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=3d522824-b816-4189-845e-326c1e8a1e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:92:74:ad:3f:81:c6:76:c9:26:ce:16:f8:
                    d0:6d:9b:d7:bb:21:64:13:54:92:83:69:55:09:7f:
                    88:b3:56:0f:af:0f:03:51:28:1e:d5:fe:77:50:59:
                    05:ec:a4:bb:62:a6:b6:2a:ce:ab:02:ce:b8:71:80:
                    ea:3a:35:d1:43:fd:55:18:6b:84:83:39:10:e2:ef:
                    47:d5:86:a8:be:55:c5:e1:d0:69:d3:65:f6:ad:05:
                    de:c6:24:ad:da:29:64:f2:21:eb:52:a2:30:83:49:
                    dc:b7:36:e0:8e:d3:a8:57:cc:9a:dc:1e:a7:ed:d7:
                    4c:f6:5c:33:80:58:cf:8c:31:22:9d:a0:aa:dd:91:
                    b5:95:52:19:b9:84:50:ed:66:f4:54:19:ed:74:9d:
                    40:a5:df:d9:75:a9:ee:6e:74:48:e2:b4:d8:55:0b:
                    43:0b:6d:3b:53:81:76:24:98:cf:45:88:84:6b:58:
                    14:de:bb:80:bf:e6:87:7e:e9:a2:92:6a:83:7f:b1:
                    29:00:c5:d8:36:d8:50:49:85:24:35:4f:75:7e:bb:
                    b6:9e:3a:8a:13:5d:c9:a0:8f:45:30:f3:af:f3:b5:
                    6f:25:2e:33:90:6c:dd:14:61:92:60:ae:90:db:74:
                    dd:a7:cd:92:06:5d:59:50:f4:68:b9:e4:de:7b:cd:
                    8a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B2:24:B1:27:DE:03:52:9B:85:97:7C:68:D7:0B:74:91:02:38:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7017f1a-4ee9-3908-bc65-0bcca32162d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.225.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3b:e8:c3:a6:20:6f:59:91:c8:d5:cb:c4:0e:35:9f:44:09:
         30:bd:99:ce:b7:da:02:00:c4:7e:16:f3:c9:b8:f4:c7:73:fc:
         e7:bc:1b:97:15:2b:90:ee:ee:4e:18:2c:79:84:72:65:dd:09:
         61:3b:96:38:d4:68:d9:a6:ae:5b:c3:71:9f:fb:2d:76:c6:55:
         46:85:b9:18:c8:fa:81:c9:b7:6c:3e:2d:57:41:4d:d7:69:ad:
         8d:e7:a5:f0:7f:85:46:82:76:48:04:f5:f6:3d:66:05:d9:71:
         b1:0b:fc:7a:4b:e4:bb:22:dc:1b:c6:1f:5f:37:33:65:c5:b2:
         6f:12:64:5e:64:48:b4:5c:3f:62:e2:de:d5:6b:d4:4f:fe:fd:
         10:d2:87:5d:24:cd:41:44:93:a4:23:aa:1b:78:dd:e6:e0:6f:
         b1:7e:34:d8:e3:05:69:d7:99:9f:f8:6d:96:c3:9f:50:c3:69:
         f5:1e:50:52:7e:4e:a5:9d:34:70:3f:fd:75:4d:47:ad:27:2c:
         cb:50:15:f4:ac:8e:fd:46:35:03:9e:e9:3c:eb:61:40:16:53:
         5a:c4:92:e6:8f:3d:53:4c:45:08:3b:20:06:33:69:11:b3:f9:
         7c:ac:e6:83:7e:67:0f:2b:c9:67:3b:07:4f:52:2d:0e:97:4e:
         5a:a2:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:18:19 2026 by rpki-client