Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa
File:                     98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa (raw, json)
Hash identifier:          aCS7L/h2VDMAKXC6s1eiz4FfVX/xIBCZ9rTLNiuFr40=
Subject key identifier:   0B:2E:39:06:02:E1:30:A3:55:C7:E9:A6:D5:F1:CC:0C:50:A0:AA:D1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2809B2B5F38A1576FF952F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.239.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:b2:b5:f3:8a:15:76:ff:95:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=5eb8ca7c-3955-4212-ae33-c1f9bbf6aa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8e:a1:ed:bf:d0:d7:17:a5:f0:04:6e:1b:30:
                    14:6b:e4:a4:76:e6:0e:83:94:f3:bd:65:8a:ff:71:
                    74:0b:1f:cf:97:16:78:70:9f:55:ad:b0:7c:ab:ec:
                    b9:e9:ed:83:8f:f1:3a:d3:2c:41:e0:7b:3a:0f:85:
                    52:8f:1a:c3:65:df:9e:d4:d1:cd:9a:e4:10:7e:8c:
                    5d:16:fc:83:7c:6b:68:19:30:86:d9:d6:5b:c4:6a:
                    44:68:77:78:1d:25:1a:0b:15:f4:a2:bf:c2:73:86:
                    cf:1b:70:24:31:76:aa:ff:9e:00:69:78:25:cc:09:
                    b8:e6:04:9f:ef:39:f6:98:bc:38:df:4f:ca:62:ee:
                    65:c0:62:c5:0a:0f:e8:eb:e3:1d:07:2b:07:e8:04:
                    0c:23:a0:0f:ae:5f:3a:a3:27:e2:15:da:ce:3e:09:
                    ab:02:e2:42:11:1d:6c:07:53:8e:52:3f:d7:37:67:
                    8e:42:86:0c:f6:71:a4:44:6b:c0:b6:da:a5:66:66:
                    2e:4e:d0:73:9b:4b:e5:87:2d:c9:a3:7c:bd:b0:99:
                    9b:08:3e:3e:85:0c:ae:d3:f2:e4:eb:02:99:db:56:
                    3d:94:74:30:4f:30:4c:95:5e:22:2a:2b:23:45:0a:
                    be:a4:14:9f:41:2e:da:d8:fe:32:14:3d:50:80:72:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2E:39:06:02:E1:30:A3:55:C7:E9:A6:D5:F1:CC:0C:50:A0:AA:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.239.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:75:4a:52:d8:3d:7c:99:5b:66:b9:27:18:ba:36:28:14:7b:
         1d:77:16:2e:0c:ee:50:50:5b:2c:8d:d1:23:2b:cf:2d:bd:e7:
         fb:8d:21:b5:3f:0d:f7:df:00:06:88:56:3a:c3:9a:ce:ce:ee:
         ba:83:cf:d1:3f:24:fa:4d:04:7a:39:66:bf:09:f1:fe:c1:a7:
         37:bf:53:3b:a9:de:ed:f7:0f:19:53:a5:dc:e9:a6:40:de:ba:
         fa:52:9c:49:27:e0:d1:3d:db:2f:23:6e:4f:cf:00:eb:ad:ce:
         35:9a:12:aa:03:12:51:2d:a9:45:f5:69:a0:57:67:d9:2b:9e:
         a9:ee:bb:bb:a6:ad:02:d3:ae:73:25:da:63:3c:e4:ec:33:53:
         ee:b3:e6:40:c9:d4:2d:29:38:7c:fa:cd:72:95:64:10:7e:21:
         21:89:d7:c8:16:3b:77:01:79:4a:57:30:1f:6d:d2:62:76:a7:
         a0:c5:38:50:22:a5:92:2f:72:af:f0:0f:ca:a5:93:2b:48:65:
         d6:25:bb:16:56:de:2f:61:a5:9e:6c:88:bc:38:47:3b:c7:05:
         eb:12:f0:fd:db:09:13:2e:35:03:ba:63:da:b9:93:f0:20:6c:
         33:8d:be:a8:d8:2c:a6:2c:0a:cf:6f:30:82:80:eb:c7:48:5e:
         b9:45:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:22 2026 by rpki-client