Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a68b61e6-ecd0-30b8-8f2d-7581e805dc47.roa
File:                     a68b61e6-ecd0-30b8-8f2d-7581e805dc47.roa (raw, json)
Hash identifier:          C/FN70hN3c7KHiQrgtoVFI3ucGRyydI6mTT6msg+hzY=
Subject key identifier:   D5:5A:A7:2E:60:6B:A3:C6:87:9C:BE:18:41:9D:01:59:5A:4A:D4:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E016B44CCE3A2D9E8EB4F2C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a68b61e6-ecd0-30b8-8f2d-7581e805dc47.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     6167
IP address blocks:        174.196.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:44:cc:e3:a2:d9:e8:eb:4f:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=71829c87-a55e-4359-ba34-be89edfd1f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:69:f3:23:1a:72:cc:18:fc:06:25:de:9f:
                    c7:be:10:b9:e9:dd:75:2a:3f:82:fe:a8:a2:73:06:
                    2b:ef:79:42:f3:3e:43:e1:d4:57:b2:3c:1d:40:eb:
                    a2:fa:78:2e:b0:c7:5a:e0:31:6b:ee:c5:bf:39:ea:
                    07:eb:70:22:95:71:b6:79:09:04:c6:35:d5:0b:f4:
                    df:d8:0c:74:1f:13:f2:f3:d9:6b:c3:62:19:db:cb:
                    66:c7:a7:04:69:79:08:4c:6e:3a:68:f3:49:44:c0:
                    47:c0:61:da:e3:9b:58:3d:fa:47:f1:76:55:77:8e:
                    ce:ed:c1:1b:31:15:cb:16:b6:5a:9c:52:e6:5d:e0:
                    c0:d2:dd:e2:57:a6:4c:e6:61:93:aa:06:65:18:c6:
                    db:e7:70:bf:18:2f:12:5e:23:50:80:52:70:2e:27:
                    b4:b7:87:1f:36:e1:0a:39:44:3e:4e:34:1a:ba:3c:
                    b5:7d:a0:0a:ed:95:e5:43:98:bf:20:c9:d9:bf:74:
                    dc:68:61:90:97:20:d1:b6:5b:ac:57:2d:cf:25:03:
                    1b:8d:00:37:2f:46:21:0c:56:39:ed:5f:dd:9d:b8:
                    08:ee:b0:f9:04:7f:73:22:bf:49:b7:fb:6f:54:7d:
                    a9:73:ec:23:93:bd:d7:ce:c0:37:2d:46:6d:6f:3c:
                    6f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5A:A7:2E:60:6B:A3:C6:87:9C:BE:18:41:9D:01:59:5A:4A:D4:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a68b61e6-ecd0-30b8-8f2d-7581e805dc47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:6e:f0:6d:0a:51:35:ed:f4:4e:2b:12:22:0e:95:f8:52:a6:
         cd:f6:3e:c3:4b:a8:5e:96:98:00:6e:ea:14:78:25:0c:26:6a:
         68:1a:c5:6b:d6:62:93:80:31:8c:81:fa:b7:4e:1d:94:52:c8:
         66:e9:64:f2:8a:9b:fb:87:57:51:c8:bf:45:38:2b:a9:c6:b9:
         c5:3f:93:3a:85:cb:40:40:70:44:87:4f:e4:38:4b:4e:ab:3f:
         f9:f3:ee:dc:3d:a1:f4:9a:25:53:1b:37:f4:bb:ba:9d:40:fd:
         6d:0d:e0:f0:21:97:e0:2b:67:15:f7:54:9f:70:4f:30:06:87:
         64:6a:6e:2b:5a:05:8b:76:46:2b:e8:07:de:19:8b:fe:76:9c:
         74:b8:24:81:bd:31:1d:f4:e1:4f:84:ff:f3:99:d5:9c:cd:22:
         f2:28:d1:0b:e9:19:3e:8a:28:41:2b:61:c0:34:81:d9:3f:be:
         fe:ec:b5:e8:02:dc:d7:2a:86:29:90:eb:14:2e:52:c2:12:a6:
         30:7a:52:ea:80:3d:58:3f:ba:ec:dc:72:be:9f:6f:c4:70:e8:
         c0:6b:3e:23:b2:cc:fc:98:e2:d8:2f:a7:af:94:c9:fc:d8:a8:
         28:1f:5f:08:5d:3a:57:c5:11:67:77:a2:da:67:b4:d4:2f:3e:
         d2:d2:96:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Ba0TM46LZ6OtPLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk
NzE4MjljODctYTU1ZS00MzU5LWJhMzQtYmU4OWVkZmQxZjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9Fp8yMacswY/AYl3p/HvhC56d11Kj+C/qii
cwYr73lC8z5D4dRXsjwdQOui+ngusMda4DFr7sW/OeoH63AilXG2eQkExjXVC/Tf
2Ax0HxPy89lrw2IZ28tmx6cEaXkITG46aPNJRMBHwGHa45tYPfpH8XZVd47O7cEb
MRXLFrZanFLmXeDA0t3iV6ZM5mGTqgZlGMbb53C/GC8SXiNQgFJwLie0t4cfNuEK
OUQ+TjQaujy1faAK7ZXlQ5i/IMnZv3TcaGGQlyDRtlusVy3PJQMbjQA3L0YhDFY5
7V/dnbgI7rD5BH9zIr9Jt/tvVH2pc+wjk73XzsA3LUZtbzxvTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVapy5ga6PGh5y+GEGdAVlaStTJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTY4YjYxZTYtZWNkMC0z
MGI4LThmMmQtNzU4MWU4MDVkYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsR4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALNu8G0KUTXt9E4rEiIOlfhSps32PsNLqF6WmABu6hR4JQwmamgaxWvW
YpOAMYyB+rdOHZRSyGbpZPKKm/uHV1HIv0U4K6nGucU/kzqFy0BAcESHT+Q4S06r
P/nz7tw9ofSaJVMbN/S7up1A/W0N4PAhl+ArZxX3VJ9wTzAGh2RqbitaBYt2Rivo
B94Zi/52nHS4JIG9MR304U+E//OZ1ZzNIvIo0QvpGT6KKEErYcA0gdk/vv7stegC
3NcqhimQ6xQuUsISpjB6UuqAPVg/uuzccr6fb8Rw6MBrPiOyzPyY4tgvp6+UyfzY
qCgfXwhdOlfFEWd3otpntNQvPtLSlsU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:26 2026 by rpki-client