Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a7a019e-36d0-3947-bf8c-317960f60a72.roa
File:                     0a7a019e-36d0-3947-bf8c-317960f60a72.roa (raw, json)
Hash identifier:          hpPP/OgwSLZv4CkEX03OnlIucrTyN5aYSOIpZ6Jak7A=
Subject key identifier:   B0:78:D0:81:D4:2A:66:4A:E7:3C:2C:E9:3C:C8:90:BF:5B:37:0A:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2809B0DDC4F1A178E1777880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a7a019e-36d0-3947-bf8c-317960f60a72.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.235.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:b0:dd:c4:f1:a1:78:e1:77:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=f9bfff30-be35-4913-85db-35561c05c977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:36:6c:e4:31:f4:17:e5:cd:33:57:22:4f:d0:
                    1d:19:0e:aa:85:cb:67:00:70:55:1b:01:06:18:fb:
                    39:3f:ed:41:5e:2f:85:26:5c:25:4f:b5:dd:fd:e0:
                    30:84:44:f5:03:06:38:5f:43:f7:b0:03:89:10:5f:
                    8a:92:b4:97:40:8f:cd:3a:be:a6:5a:ed:91:11:e9:
                    c0:8f:c3:ea:12:b6:c2:94:83:d8:71:95:e8:14:a9:
                    61:7a:34:45:a5:a3:c0:cc:53:d9:4f:3f:73:50:7b:
                    85:3b:83:33:97:b1:29:f0:6e:fa:ce:34:66:8b:c3:
                    45:fb:79:4e:e7:3e:3a:b4:90:39:57:9d:c3:88:f2:
                    e2:2e:8d:d8:af:06:89:2b:2d:f6:90:62:b6:39:fa:
                    0a:0f:88:ef:f5:e8:dc:9a:82:a9:22:65:06:e7:9a:
                    8d:d4:e6:61:9c:55:5e:d0:dd:9c:e3:9f:f9:25:d9:
                    88:9b:bb:7a:ed:36:c6:6f:55:4a:c4:19:66:0f:55:
                    75:86:b0:dc:f7:14:67:fe:ae:06:18:d9:8e:3a:16:
                    e3:6a:d0:31:dd:b2:c3:d6:f3:de:e8:c4:8c:50:89:
                    25:f4:5a:9b:4f:09:86:f6:17:0e:6d:04:ba:e8:da:
                    40:15:0c:b9:68:d3:ee:8e:ae:69:c2:c0:06:05:b5:
                    19:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:78:D0:81:D4:2A:66:4A:E7:3C:2C:E9:3C:C8:90:BF:5B:37:0A:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a7a019e-36d0-3947-bf8c-317960f60a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:1b:32:9d:24:5b:0f:47:77:67:a7:89:6f:a0:0c:00:56:de:
         df:b7:4c:05:cb:92:78:f0:da:1f:1d:cf:4d:be:f7:fd:37:2e:
         09:f4:b6:b9:b8:56:3f:bf:28:6e:0e:54:8e:e7:01:86:ef:27:
         3c:a6:08:1e:99:53:5a:da:3d:11:1c:8e:94:32:cc:dd:f7:6e:
         e1:ec:5a:d8:f3:95:91:13:7e:3d:93:35:c1:57:b0:c9:2a:70:
         1e:34:9c:47:cf:2e:a4:e1:a8:99:e2:15:55:33:6c:96:f2:92:
         6d:8c:82:52:dc:05:49:fb:0a:cf:68:e1:e2:64:a3:bb:97:1c:
         fb:df:50:ca:6d:d6:29:8e:f5:7d:14:cd:33:57:d4:da:00:37:
         46:80:0e:a5:63:d7:90:2a:cc:52:f9:21:b8:fd:76:53:27:92:
         1e:33:fe:76:e1:1d:d3:e7:e9:47:54:62:24:c9:89:8b:47:5d:
         10:a0:e6:13:c6:b1:f0:d1:72:0f:79:ca:74:ae:9a:d5:d3:23:
         e9:ef:00:1e:07:81:0d:01:2c:10:30:c3:a8:02:55:5d:48:b4:
         fc:99:94:54:a6:57:78:6c:3d:5c:f1:61:18:5f:9d:89:3f:eb:
         71:4b:c7:cc:cf:c0:1f:9e:5b:43:57:92:72:7d:01:3f:b0:ef:
         1b:42:d8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:43:11 2026 by rpki-client