Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af757b13-5952-3d7e-81b8-4bb05176dc4e.roa
File:                     af757b13-5952-3d7e-81b8-4bb05176dc4e.roa (raw, json)
Hash identifier:          SpSa4Bqh8NeDVyB5k34DzbeGtt2vLmwVzJmK4t+06E4=
Subject key identifier:   75:98:C0:BD:0E:CE:C1:B8:39:45:F8:FC:7C:20:D8:65:4B:42:FB:D9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E016B4545BBAA414345F19000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af757b13-5952-3d7e-81b8-4bb05176dc4e.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     6167
IP address blocks:        174.198.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:45:45:bb:aa:41:43:45:f1:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=f38341c8-00ff-416a-ac0a-26874f3de8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:aa:47:bd:3b:db:88:95:9c:35:d2:46:9f:
                    bd:49:3f:18:76:c7:be:26:36:de:6c:33:e2:01:2c:
                    ea:22:f4:e6:f8:0b:df:34:5b:56:a6:ec:6e:95:ba:
                    e9:ca:12:ab:ac:53:a4:ef:0f:e5:aa:e1:e2:4b:93:
                    da:f1:f4:1a:fc:8e:42:84:87:57:22:29:cd:8c:4f:
                    b6:51:4a:77:ad:a7:7e:09:2e:c8:cd:74:96:9a:63:
                    71:14:a9:37:97:81:ab:40:7b:82:00:50:1d:43:b8:
                    5b:7e:44:44:61:7a:43:fc:dc:a5:e7:37:15:38:f0:
                    29:0a:9a:7a:72:52:72:c0:f9:6a:bd:54:c3:7e:35:
                    5d:6b:d1:91:94:79:bc:fb:57:0c:8a:19:99:8e:37:
                    4d:88:87:a7:05:62:aa:5a:8a:f6:97:d5:43:bb:94:
                    41:04:53:69:96:7f:a3:4d:2d:96:b8:3d:5d:a9:e3:
                    06:22:1c:49:6d:28:9f:59:17:d5:62:19:f7:0a:d3:
                    d6:3c:a9:0e:e5:24:a0:43:3c:76:00:25:91:2f:e4:
                    28:eb:69:3b:48:f1:2f:52:57:5d:fb:d5:d9:78:8e:
                    95:ee:f3:2c:3d:8c:a8:f4:6c:08:35:e2:1a:cf:18:
                    40:15:df:90:9c:da:d1:b6:ce:95:d9:9a:f9:30:a5:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:98:C0:BD:0E:CE:C1:B8:39:45:F8:FC:7C:20:D8:65:4B:42:FB:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af757b13-5952-3d7e-81b8-4bb05176dc4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.198.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:5f:03:7b:89:91:41:02:5b:ea:68:4b:d9:c3:53:7e:66:
         ab:6d:63:4d:2c:7e:6a:59:f5:bf:67:f6:1b:1b:45:d7:1c:1c:
         79:1f:bb:05:f9:50:b3:a3:e7:29:74:ee:9a:93:aa:53:9f:e3:
         41:f8:de:16:86:f4:1d:31:ab:9a:1a:18:f3:ea:77:35:fc:a3:
         1c:77:fe:8e:66:ec:73:db:54:8f:48:11:2d:96:e9:d9:a5:14:
         c6:d4:d1:88:23:f8:b4:81:a6:22:ec:14:fd:7e:c7:06:1b:6c:
         72:c4:6e:cd:23:0f:5f:a9:ad:02:5a:0e:6b:34:31:b0:8b:2a:
         23:6c:a4:d3:22:1a:2b:f4:22:6d:97:ba:a0:83:5f:93:85:f8:
         24:91:8a:9b:b1:86:7a:f9:c3:6e:6f:6a:e7:68:5b:57:03:70:
         58:45:67:ba:da:f8:36:77:78:2e:40:e9:89:d0:2c:f9:19:33:
         57:5a:0a:a2:1d:05:ec:46:7a:07:48:79:c3:ca:cc:6e:12:c8:
         5f:50:89:d2:82:f8:dd:39:b9:62:93:1a:45:c7:96:80:7b:47:
         f2:12:22:55:4f:f5:18:b2:b5:09:7b:02:3a:e7:8f:39:10:cc:
         7a:a3:cf:6e:63:c9:6a:aa:2e:5c:d8:3a:4a:ac:4b:3e:5b:4b:
         07:5c:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:42 2026 by rpki-client