Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b795c597-7aed-3009-b1c2-708582f67d46.roa
File:                     b795c597-7aed-3009-b1c2-708582f67d46.roa (raw, json)
Hash identifier:          UDJB1W1Mcavu4lPk9oMq3PYdbQCNMz/sptVQuR+hv7Q=
Subject key identifier:   7D:65:79:A2:A5:87:B2:32:0C:D9:1A:AF:10:81:25:E2:B1:C0:95:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CED27BC376486BABE87552400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b795c597-7aed-3009-b1c2-708582f67d46.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        174.237.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:bc:37:64:86:ba:be:87:55:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=ceaa82b2-b292-4744-82e3-7265de3bc7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ed:49:b8:ae:75:af:06:ef:9e:86:c7:29:bc:
                    1f:dc:8a:f4:6b:bb:2c:ec:34:3e:73:a0:53:ef:f4:
                    1e:29:13:0a:78:9b:bb:d6:88:85:6e:a6:26:b0:7f:
                    d1:eb:f0:cf:ac:68:79:ea:9c:9a:7d:48:3a:42:95:
                    a6:a4:3f:3e:76:13:d7:76:c1:68:56:4e:e4:a5:06:
                    2a:25:2b:31:9c:79:a9:47:85:60:b1:c6:59:66:e4:
                    69:a7:69:b1:e3:67:47:22:f2:8f:2e:7a:49:f1:36:
                    78:86:15:b2:87:1d:34:43:24:8c:18:40:19:2f:a3:
                    40:04:1d:85:c4:78:1e:e7:20:da:36:d0:88:6d:e4:
                    34:f8:b6:2f:3e:b2:ff:26:17:3a:14:c3:7c:30:02:
                    2f:8b:38:1f:69:32:7a:66:d3:8a:91:80:1d:f1:d4:
                    a4:c0:34:22:2a:42:52:dc:55:92:47:ed:dd:9d:8f:
                    2f:40:66:b3:8c:19:a8:76:4b:ae:d1:d6:2e:05:9f:
                    24:97:99:2e:35:3c:30:8f:aa:34:3e:18:ac:22:7d:
                    c3:23:16:f8:6c:dd:b7:1c:54:73:8b:58:61:fb:c3:
                    5c:bf:11:d5:50:3d:b2:7a:73:71:2f:f3:72:e5:54:
                    4c:6f:62:53:78:5f:72:14:44:3f:2d:1f:b4:d8:c5:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:65:79:A2:A5:87:B2:32:0C:D9:1A:AF:10:81:25:E2:B1:C0:95:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b795c597-7aed-3009-b1c2-708582f67d46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.237.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:5a:b2:5e:59:a4:ba:24:ea:b3:36:a1:7b:cf:e7:72:4a:97:
         05:76:fc:0b:c8:87:0d:e8:db:5d:fd:2c:05:c0:2a:2c:7a:5c:
         c5:ec:67:cc:32:d1:1c:08:31:05:86:03:3c:8d:b7:aa:64:f9:
         f6:2e:30:90:b8:46:5c:dc:39:7e:f0:28:45:c6:a3:8b:c7:9a:
         fa:ca:db:7b:bf:79:2c:9b:d6:08:c0:11:ea:97:0d:68:da:84:
         8a:4a:e9:4a:d6:58:8f:94:71:0e:4d:66:e5:95:c9:f2:b4:91:
         e4:45:9e:05:08:41:fe:14:76:4f:1b:06:09:d6:38:8d:4a:f9:
         67:c9:74:29:6c:d6:81:84:f1:25:81:ca:0b:4c:e1:dd:bc:19:
         36:d3:d8:4f:17:1e:6b:f7:41:0b:fa:20:89:c9:ae:bd:91:b5:
         1f:82:46:7d:1c:4a:01:5c:40:a9:2e:87:78:93:0a:2f:c9:78:
         a3:d0:f8:9a:33:45:45:15:f6:a2:57:6b:50:02:8f:53:9f:ae:
         e6:19:b0:cd:8c:bf:3d:76:f1:f1:b2:59:c2:04:cc:72:dd:ae:
         a8:a0:8e:3f:90:9e:1f:f3:a3:2e:1c:11:74:7c:b1:2a:d1:4c:
         d1:4c:77:c0:09:1d:18:a9:fe:b6:bd:1d:ec:7a:32:73:d0:7e:
         27:88:fb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:17:13 2026 by rpki-client