Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed83be18-0fc5-337d-9178-f4daca12ccc2.roa
File:                     ed83be18-0fc5-337d-9178-f4daca12ccc2.roa (raw, json)
Hash identifier:          28ANTPu1sjH0Gfs9xovShDawowGalida5effDdQTtBc=
Subject key identifier:   14:55:A1:84:E5:39:F8:CB:83:8C:61:96:C5:C5:CF:16:7F:F1:C1:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A875F8BE46D9DC4E76F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed83be18-0fc5-337d-9178-f4daca12ccc2.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     0
IP address blocks:        198.229.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:87:5f:8b:e4:6d:9d:c4:e7:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=8fe63e26-5234-4798-b8b2-97509a54578e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bf:cf:9d:a9:13:b3:2f:7b:37:fb:db:d9:e7:
                    6f:23:99:78:71:30:52:a9:67:b9:56:c5:59:4f:70:
                    ad:b3:44:fe:77:0e:75:9b:bf:f3:fb:42:df:c8:7f:
                    f2:70:a0:3b:d8:fd:20:34:95:79:dd:f4:5f:17:ae:
                    c0:52:94:1b:a1:69:70:ba:33:a6:1c:d9:14:d6:28:
                    f5:57:1d:f5:b5:8a:66:28:82:d3:7f:11:f8:cd:c7:
                    68:2b:5b:39:0a:cc:b2:3c:a4:70:b5:21:aa:5b:c9:
                    88:70:96:33:61:62:45:6b:c0:ba:a2:9c:92:3a:8c:
                    2a:64:ac:b0:f7:f7:95:d7:33:36:eb:7e:77:f6:c3:
                    4c:a7:bd:75:58:04:41:b3:8b:14:23:d4:71:5d:04:
                    d9:6e:f0:b1:7f:19:17:e8:28:bc:cf:f1:6e:30:40:
                    fb:3e:84:fa:5a:ba:83:54:43:25:1f:fe:4a:e9:cd:
                    36:ad:98:a2:68:04:58:17:a6:f0:9c:e5:0b:27:9e:
                    ba:1d:e8:57:e2:d8:b5:c1:3b:ff:ee:7f:ce:d5:c3:
                    4e:02:62:32:67:56:18:7f:84:2e:c6:0a:68:ac:e5:
                    e6:a6:65:87:a4:2d:c9:4d:cd:ee:46:70:c8:c3:1f:
                    58:8c:47:71:df:5c:7b:7e:c3:3e:65:e1:c7:35:26:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:55:A1:84:E5:39:F8:CB:83:8C:61:96:C5:C5:CF:16:7F:F1:C1:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed83be18-0fc5-337d-9178-f4daca12ccc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.229.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:87:2e:24:4f:0e:7f:28:b7:87:a2:e5:f0:82:0b:05:31:3e:
         28:05:7e:5b:c2:22:bf:e1:5c:36:39:4a:f8:4e:f2:8b:f8:dc:
         48:1a:5d:47:80:99:91:f4:5d:10:3c:01:18:90:9d:9e:1d:f6:
         fc:96:7e:17:e5:31:46:2c:3c:e0:49:51:93:dd:8b:f5:b0:62:
         00:35:b6:60:96:77:eb:af:03:5e:92:35:45:7a:90:01:1c:c6:
         db:01:29:12:03:1b:76:6b:b0:f7:72:75:fb:fc:6e:ab:ac:fc:
         4f:a2:ff:c7:bd:fc:8d:14:1c:7e:b9:54:ee:4d:a0:00:27:a9:
         eb:d4:a9:8f:ab:f9:55:36:cd:9e:56:eb:34:0f:61:64:b2:7c:
         97:c3:f7:9d:f9:8b:b4:7d:87:c6:a8:39:90:fd:ba:f9:5f:65:
         f9:32:b6:c7:f3:27:fe:6b:36:3c:0a:08:c5:b6:30:a7:11:8c:
         61:e8:e0:1a:c6:6b:d5:d9:09:2d:0a:5f:c6:30:4f:a0:c1:f0:
         d2:8e:33:5f:34:65:07:c2:5a:60:c6:ba:9a:d6:75:ec:f4:53:
         b8:a9:b2:39:05:84:f0:fd:89:0a:ca:bf:b1:3e:bb:3a:0b:54:
         7c:f2:ef:28:97:87:df:4f:8f:1d:16:d6:39:be:e5:e6:65:9d:
         ab:5e:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:20:12 2026 by rpki-client