Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8078fbc6-d1f5-3c1b-b588-a0aab19550fb.roa
File:                     8078fbc6-d1f5-3c1b-b588-a0aab19550fb.roa (raw, json)
Hash identifier:          ouFYxJkAo4R5jThCwch9crvkeUsHWrdB0S4YU6bL9HI=
Subject key identifier:   BA:D6:63:1A:4E:97:FB:9E:E8:8C:E6:8A:65:F7:17:04:8E:44:4C:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA791F572530BDDF31FFC5B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8078fbc6-d1f5-3c1b-b588-a0aab19550fb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.221.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:f5:72:53:0b:dd:f3:1f:fc:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f425a58c-539c-4a05-9770-9aa5289a3322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:41:50:7d:8b:f0:9a:47:21:bf:01:2b:c2:
                    80:d0:bc:d0:0b:10:45:db:35:95:59:bb:aa:72:68:
                    0d:ec:a8:96:4b:0c:7c:e7:04:12:d3:d9:bd:5c:ad:
                    81:2e:68:4e:0b:c9:87:d4:ef:2e:bc:69:61:c3:ef:
                    c3:de:85:45:8e:7a:23:8e:6b:0b:1e:0a:c8:7d:14:
                    27:77:18:1f:99:3d:fd:70:65:d7:e7:29:cd:59:10:
                    fd:61:23:71:ab:59:92:b9:6b:55:bb:3d:5f:5f:9c:
                    24:3d:93:c1:9a:46:da:32:79:f9:9e:52:d8:52:22:
                    e1:de:df:13:18:40:01:d5:33:19:01:65:73:ad:00:
                    22:e7:e5:07:b0:71:49:d2:c8:23:5f:94:95:cd:9c:
                    88:b8:fe:aa:ec:c8:91:81:c7:bc:9c:8a:d6:e0:a0:
                    51:da:50:02:d9:b4:94:77:f7:5d:d4:ad:dd:61:66:
                    8a:4d:ee:c4:a8:21:c6:a0:dc:93:45:71:95:d0:42:
                    6c:4f:7a:f2:bf:34:95:c3:00:29:dc:a1:80:8f:a8:
                    2c:f4:76:9d:a0:a3:9c:78:02:97:31:55:51:84:3d:
                    74:dd:2c:cd:fe:69:17:6d:ba:8b:a9:b6:31:f2:5d:
                    63:bf:7b:f1:84:b4:82:0e:04:a5:13:3a:04:21:40:
                    28:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D6:63:1A:4E:97:FB:9E:E8:8C:E6:8A:65:F7:17:04:8E:44:4C:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8078fbc6-d1f5-3c1b-b588-a0aab19550fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.221.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:a5:a5:d4:d4:e8:71:0b:df:d6:99:bc:74:3e:98:d6:d7:
         ff:0b:d9:98:92:bd:8d:70:2c:f4:63:9b:68:a8:77:19:51:fb:
         87:4b:04:fb:a0:59:ba:3d:bf:f9:4a:99:a3:d8:73:21:22:99:
         43:9f:e2:57:e0:c1:e8:13:3e:a1:c8:c6:da:ce:1d:e4:43:20:
         83:37:cd:f1:39:ab:39:3d:35:79:1e:39:62:20:ec:d4:3c:3a:
         de:9d:34:95:7a:52:08:ef:eb:2e:a3:9a:12:cf:1e:91:18:c9:
         1f:36:c3:22:a1:2a:2c:ac:e8:a9:85:4a:4c:84:8c:56:55:61:
         33:59:08:20:12:75:19:d6:a2:9f:ec:df:82:a6:1a:05:b5:a6:
         65:2a:15:7b:ba:9f:0c:b1:aa:0f:a6:33:d8:ad:df:59:3b:72:
         44:5c:4f:92:c5:e2:2f:40:89:8e:c7:5a:b0:7d:a2:0c:8c:d4:
         7e:8c:4e:b8:e6:51:74:5b:e7:f2:7f:13:13:3a:7c:de:c6:69:
         97:1a:3b:88:87:96:5b:77:7c:de:ce:20:25:d0:e9:27:be:74:
         57:c9:bc:f6:1a:a1:05:ca:8b:35:a2:46:5c:31:8e:07:22:b1:
         8d:fa:ef:5b:57:b1:de:e4:a4:9e:9d:fd:57:20:ad:8b:bf:13:
         c4:df:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:00:22 2026 by rpki-client