Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/105829ba-3e1c-3cad-b3be-6dd57bb80967.roa
File:                     105829ba-3e1c-3cad-b3be-6dd57bb80967.roa (raw, json)
Hash identifier:          UsFoYTs8BEIBPzOHU1gpSz5f4NY8ANGlwxGp2RkDmX4=
Subject key identifier:   A5:AB:BE:3C:73:0D:0B:03:32:D9:31:2B:E0:04:1A:9B:A0:8C:8F:98
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B998310F1A427A682B978
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/105829ba-3e1c-3cad-b3be-6dd57bb80967.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.224.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:99:83:10:f1:a4:27:a6:82:b9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5034d6f3-5e6d-45f4-9263-c5cdd8af82d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cd:ee:5a:3c:ad:44:76:eb:45:1b:4d:b4:a4:
                    a0:75:e2:38:57:45:01:ee:bf:e4:f7:cc:01:ff:9a:
                    fc:28:96:12:81:8b:a1:6c:31:ca:2f:69:a9:d4:82:
                    dc:78:b8:f0:5d:ca:e9:ab:ed:a9:1f:12:70:7c:13:
                    b6:61:b8:df:45:f9:53:f1:7a:56:bb:f7:1f:2b:9d:
                    94:8a:b9:dd:df:99:df:7b:1d:c1:7d:6a:b9:eb:ce:
                    06:0e:d6:b7:77:f3:7e:dc:3b:5b:0d:39:c9:b7:5d:
                    6e:c3:82:28:9e:35:0c:ff:6a:a2:a9:4a:b6:ab:48:
                    bb:14:5d:50:8c:4b:15:ad:fc:50:a8:58:5c:44:26:
                    bf:1e:19:8c:91:a8:c5:b9:26:ba:46:7c:49:b0:f5:
                    35:23:2b:ef:15:3d:d9:42:ba:17:6d:e5:7d:7b:c1:
                    f2:72:14:ba:de:ef:e5:c8:f4:99:26:cd:1b:92:37:
                    65:91:84:e3:03:5c:72:20:06:dc:03:8b:8c:ce:93:
                    ae:3b:52:28:b8:dc:4b:96:f6:2e:9c:8e:f2:65:fd:
                    ed:fd:89:04:d8:e8:f0:0c:a5:b0:b7:f2:11:b4:e4:
                    39:d3:f7:74:99:d2:3e:2a:c7:41:18:aa:24:b6:45:
                    4b:bf:21:30:f3:ae:7f:96:72:e0:2e:45:79:d5:49:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AB:BE:3C:73:0D:0B:03:32:D9:31:2B:E0:04:1A:9B:A0:8C:8F:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/105829ba-3e1c-3cad-b3be-6dd57bb80967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:15:58:08:43:70:09:92:9a:cc:9d:a6:12:6c:bd:7b:aa:be:
         7e:dc:af:80:02:ee:3a:f2:66:ff:58:2e:7f:65:43:14:c0:c0:
         0f:48:e8:9e:8f:e3:37:c5:b8:92:c2:98:3a:2a:ed:14:6b:b2:
         c7:2d:8b:17:61:c7:c2:fe:57:6b:67:f9:e1:e9:57:f4:1e:51:
         b4:d2:15:63:43:0d:5a:cf:73:ea:5e:bc:00:3c:b3:21:b1:c5:
         01:b6:b8:0d:3e:e3:59:02:38:26:3f:a6:66:29:9f:e1:43:f4:
         da:36:ed:69:0c:4f:26:a5:ab:a6:8d:7c:56:13:64:ab:44:73:
         b6:f2:e5:fa:77:7a:32:72:d6:25:87:73:ab:9d:4b:18:db:8b:
         bb:db:90:7b:85:98:e9:13:d1:9b:a7:00:b1:3e:25:0d:ae:31:
         ac:dc:7e:43:51:db:13:3b:37:09:65:dc:7b:e7:e5:d6:52:06:
         76:de:64:dc:98:66:e7:c9:89:07:fa:af:d1:6a:1f:61:35:70:
         0c:b3:71:6f:03:c4:3f:2c:3f:c6:00:e1:69:31:75:d9:db:e1:
         46:ff:46:f2:d3:b9:e8:fd:08:33:4b:6d:83:31:37:2d:69:a7:
         92:14:af:f8:11:33:0d:65:0b:1f:26:92:a3:c2:e6:76:18:6f:
         2f:3d:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:16:13 2026 by rpki-client