Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4f7e532-7003-31cb-b2f4-7a0415662bd0.roa
File:                     f4f7e532-7003-31cb-b2f4-7a0415662bd0.roa (raw, json)
Hash identifier:          AMTV9pLdpYwi+KR2lPWcU2ZabwBKVl2tE8GwD9rxs+Q=
Subject key identifier:   BC:92:4B:CE:D0:13:4C:7D:36:ED:76:F2:0C:E9:8A:4C:B7:46:89:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B7346ED1FDF27A43EF300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4f7e532-7003-31cb-b2f4-7a0415662bd0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.213.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:73:46:ed:1f:df:27:a4:3e:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c96aa584-40bf-4e4b-84bc-317c303b8429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:be:c9:8f:17:d4:1b:12:79:e0:fe:17:fb:
                    8c:79:38:ea:9a:ae:f0:0c:76:d0:0e:b1:5b:5f:34:
                    8a:01:c6:93:46:67:06:b4:f8:a7:5d:80:2a:9f:53:
                    87:b5:28:bd:73:4e:37:a1:58:d2:af:03:5b:35:20:
                    35:34:c9:49:01:b5:bc:28:0e:a2:38:48:ff:ea:95:
                    1e:11:6f:04:3b:3b:4a:6d:c3:95:46:1d:e6:58:04:
                    2e:21:ad:80:c1:f4:6c:c7:69:4d:e3:e7:69:ea:d1:
                    b2:c7:09:cf:a9:4b:e3:2d:0c:45:ad:43:92:26:43:
                    d8:d9:84:1a:02:f6:8a:ae:74:02:96:b4:b4:5f:48:
                    9e:14:0c:49:c7:26:fa:5f:cd:62:f2:7f:36:8f:fa:
                    15:17:f9:44:fe:06:6a:6f:de:f2:d3:41:30:f4:2d:
                    75:03:2d:e0:9a:98:4f:32:a9:56:38:d6:07:79:2a:
                    49:47:0f:0a:5e:a9:86:79:b8:b8:b9:a0:5c:fa:ac:
                    6b:1b:27:ae:df:37:10:1c:9e:8b:37:d5:35:93:7a:
                    d0:ca:a2:eb:6e:51:12:32:dd:4d:fb:ca:97:5b:47:
                    d0:7a:cb:18:12:b7:dc:09:78:ff:1c:a2:a5:7b:23:
                    be:35:cd:d1:92:3d:4a:3f:7c:2b:20:b5:b4:72:03:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:92:4B:CE:D0:13:4C:7D:36:ED:76:F2:0C:E9:8A:4C:B7:46:89:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4f7e532-7003-31cb-b2f4-7a0415662bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:58:8b:19:4f:4c:38:e7:26:b8:dc:31:9d:a4:5b:fd:94:a2:
         af:b6:35:50:1b:d2:ef:63:53:e6:a5:d4:61:40:dd:52:0b:c8:
         84:59:2b:f8:03:ef:c4:0c:b4:74:10:45:fa:74:d9:4e:37:42:
         fd:29:d3:85:03:81:2c:eb:35:43:25:bc:4b:e9:75:6c:93:e9:
         60:ea:7a:e5:c8:a8:0f:ce:0f:fd:8c:b9:31:51:17:c0:9f:fb:
         a6:c7:68:76:82:d7:96:ce:98:ec:0f:8a:98:97:8d:11:6e:ac:
         05:1c:5f:e6:85:43:fb:9b:ee:95:be:ab:23:5b:ef:32:69:b5:
         3f:10:1e:07:fb:eb:0d:42:43:52:d6:2a:d4:fd:1f:df:93:0b:
         3a:71:8f:f7:ab:16:75:33:55:04:e3:81:61:3b:fe:d7:b8:91:
         ba:a4:40:b3:f5:f5:42:61:f0:ad:97:25:6e:13:cd:ab:7a:f7:
         66:22:15:f6:8f:96:2d:7b:65:77:c0:00:bb:7f:8d:b3:f9:e2:
         0c:da:bf:89:ac:91:36:54:6d:55:ac:f6:88:e6:7a:b6:f7:dc:
         b6:fe:a5:97:44:45:75:da:e7:07:da:25:37:0b:2d:56:56:3b:
         a6:33:b0:88:f3:fd:b6:00:0e:a0:dc:b1:87:dd:7a:6c:e7:d9:
         db:3c:4d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:19:01 2026 by rpki-client