Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec307a05-2a04-3496-9e8c-a7182009f08f.roa
File:                     ec307a05-2a04-3496-9e8c-a7182009f08f.roa (raw, json)
Hash identifier:          T2n5XbIwLHFG7QPD2vhGDIZ0QATcg/a5LyZXdfNsWmk=
Subject key identifier:   20:C2:5C:C8:ED:6D:5F:10:CB:8E:1E:35:9B:8F:BD:92:05:CE:92:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B7DC1C5DCD247681B7900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec307a05-2a04-3496-9e8c-a7182009f08f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.218.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:7d:c1:c5:dc:d2:47:68:1b:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0414f564-4eb2-4855-9cb6-a34229e3bc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:0c:bf:71:77:d0:8d:47:a1:2e:7a:7b:e0:
                    f1:50:04:60:7c:97:6c:49:97:c6:89:23:83:31:a4:
                    cd:4c:b7:e8:b3:4c:57:ec:04:44:bc:d0:2a:1b:74:
                    c7:a8:25:23:1b:8a:d0:8d:1c:e5:9c:01:ce:41:b7:
                    d2:18:d3:a1:fa:96:21:6c:f5:7b:a4:28:af:41:78:
                    bd:07:9e:59:bd:61:0d:d2:a5:c2:35:fd:29:53:3a:
                    b2:88:6b:1f:55:5d:96:8d:41:5b:6c:f3:dd:5b:c4:
                    48:42:0c:b9:aa:99:ad:19:ac:f2:95:f6:78:49:0e:
                    91:1e:34:7f:45:94:b2:9c:cd:9d:36:53:cf:89:7c:
                    54:c4:13:f2:ab:6c:48:33:37:8d:7c:20:31:6d:b4:
                    b0:86:24:e7:ca:21:cd:f2:24:d3:f0:93:dd:f0:54:
                    f1:bf:e7:f8:45:64:19:88:08:e7:47:a6:52:f5:5d:
                    83:bd:8a:8a:81:6e:b4:fd:54:16:e0:8a:da:97:b2:
                    37:07:d8:b9:2d:65:32:03:2c:9a:50:49:61:36:49:
                    d4:67:d5:f0:5f:e2:1c:5b:50:a7:0b:6d:4a:63:ab:
                    23:bc:28:a3:4e:be:75:9c:fe:56:4d:17:a3:1a:74:
                    d5:d1:c9:75:88:0c:54:05:1d:0a:06:33:12:96:3f:
                    cd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C2:5C:C8:ED:6D:5F:10:CB:8E:1E:35:9B:8F:BD:92:05:CE:92:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec307a05-2a04-3496-9e8c-a7182009f08f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4e:99:36:f1:ef:28:df:cf:bf:5c:b3:30:4b:34:1e:b6:fd:
         e4:cc:13:77:a3:58:92:3f:e4:cb:69:14:87:86:12:11:0f:df:
         e3:8b:86:a7:66:8f:7d:96:ac:e2:53:98:ba:69:88:85:d4:24:
         ea:29:89:e3:5d:12:9c:77:2a:15:f6:9e:f3:28:ed:63:76:b2:
         b2:94:3f:76:b4:4b:08:c8:7e:59:36:61:0c:50:37:8c:74:05:
         fc:07:30:5a:be:a5:89:25:3d:1a:a1:74:93:98:8d:bc:81:bc:
         f8:77:6e:18:8f:0e:62:b8:74:ce:59:33:29:dc:06:17:8a:bb:
         fa:5b:2a:a0:2b:ae:02:e1:36:45:04:5c:fe:04:24:e5:34:51:
         9a:7d:f0:40:0b:74:ab:d6:ac:6b:39:6b:a9:f4:33:b9:80:78:
         07:40:3c:3e:a4:1e:50:96:4a:2f:b9:3e:56:4b:1e:df:64:81:
         5d:b2:6b:08:66:34:a9:ff:ad:4a:34:f6:5c:7a:17:8c:5d:54:
         69:a3:a0:26:fd:d8:c2:19:a7:fe:e3:3c:99:e8:f6:ce:de:f8:
         23:3b:4a:ee:df:c3:45:bc:39:0d:ba:2f:f5:25:d6:92:3d:a5:
         94:81:29:12:55:01:61:22:53:7f:3b:e0:47:27:d5:3b:d7:0f:
         b4:3b:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:20:03 2026 by rpki-client