Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fdabb50-ff35-31e7-a8c9-c6bc10827c3c.roa
File:                     9fdabb50-ff35-31e7-a8c9-c6bc10827c3c.roa (raw, json)
Hash identifier:          XG1AsznXgnGGr0hj37sI2a6vb36NBhMMVpN4i66zKFo=
Subject key identifier:   25:D3:EF:D9:CC:27:F7:87:4E:9A:F7:A4:BC:E2:27:0E:0B:22:75:7D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E016B3B91DB48D1D1175DF580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fdabb50-ff35-31e7-a8c9-c6bc10827c3c.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     6167
IP address blocks:        174.215.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:3b:91:db:48:d1:d1:17:5d:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=16fcfb53-07b4-47b4-833f-b342fcee87f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:a0:a5:c8:b8:c2:88:9e:cc:c0:49:6b:2e:
                    11:9d:97:5a:b3:5f:3d:26:10:08:d2:57:1c:58:0b:
                    ef:0f:50:f5:78:15:fc:fc:50:7e:6c:93:a8:6b:dd:
                    9c:6e:bd:5c:23:ec:6f:d2:a8:b7:68:25:be:66:ff:
                    79:e6:85:d9:5c:4b:2e:df:15:34:4b:2c:36:c3:fb:
                    91:c4:e9:0b:d3:ff:54:d1:c6:81:3a:27:66:49:13:
                    39:66:59:48:49:ea:53:fb:58:fa:af:eb:44:40:72:
                    c0:2b:99:ba:9f:3c:de:45:67:75:34:1f:31:4d:43:
                    b8:3f:cb:3c:8a:25:f2:fc:5e:61:b5:9f:84:dc:b3:
                    45:4c:ed:65:1e:b2:13:e5:c3:4c:24:27:e0:bc:78:
                    d9:70:d9:d7:e8:64:e7:41:51:3e:a2:b9:a7:01:2c:
                    7a:40:4e:0f:46:eb:58:3a:21:f2:51:9a:c2:d4:0e:
                    a1:00:50:71:5c:90:36:b2:8a:e2:e6:08:a6:9c:8b:
                    c1:bc:b6:f2:fe:b1:fe:69:03:e5:6e:72:57:94:2a:
                    0f:7f:27:99:ca:7c:ed:d7:a2:99:2f:31:d2:c0:be:
                    aa:65:43:91:5f:a1:32:d2:8a:da:22:1e:f0:78:e0:
                    01:8b:fe:02:40:d4:aa:a8:1e:71:2d:0f:9b:2c:68:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:EF:D9:CC:27:F7:87:4E:9A:F7:A4:BC:E2:27:0E:0B:22:75:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9fdabb50-ff35-31e7-a8c9-c6bc10827c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.215.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d6:c5:7b:0a:7d:f6:33:54:b4:d6:79:b7:6f:3d:e3:d7:41:
         3c:e3:20:fa:25:f8:db:a4:7e:67:96:cf:e1:bb:86:bd:14:b8:
         e1:ee:0c:86:75:65:f9:0d:f3:d5:d2:74:da:5e:bc:d6:78:5c:
         57:08:a3:34:76:93:0c:30:8f:b4:5e:0f:60:04:02:f7:b2:c3:
         7b:c1:f6:a4:55:37:9b:5e:97:dc:9f:44:c8:36:12:f1:a7:3d:
         52:26:31:74:fe:3c:e7:9e:d9:c2:7b:e3:9a:d8:98:af:01:66:
         04:fe:20:9f:5e:7f:90:54:93:c2:91:db:02:69:95:00:67:51:
         30:9d:7a:90:74:c2:7c:3c:93:63:43:16:ba:5b:c2:b6:38:1b:
         47:b9:3a:0f:26:92:04:94:6f:d0:a4:4a:52:d7:fa:24:3f:4b:
         58:c8:cd:5a:5c:ff:a4:b7:3c:c3:0a:15:ae:f4:00:3f:82:33:
         47:cb:d9:99:4f:7c:2d:4e:71:71:f9:8e:5e:89:ec:00:63:fe:
         d3:1b:ad:9e:25:5e:df:e7:1a:46:97:d3:ba:d3:7e:eb:db:99:
         63:4d:5a:8c:18:b5:3d:61:bc:1c:80:95:41:19:ce:1b:53:59:
         a1:6d:76:74:81:05:7f:83:41:f8:f8:ad:d2:cf:1b:05:95:61:
         58:32:51:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:43 2026 by rpki-client