Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc5de936-9bce-3531-adcd-7902117f38e1.roa
File:                     bc5de936-9bce-3531-adcd-7902117f38e1.roa (raw, json)
Hash identifier:          AA/t+GP35Jov2YwweK97Lx7RvbASlgbiNxsCrMP2j0k=
Subject key identifier:   A9:EF:F5:9C:32:DB:41:7F:7E:25:EC:8D:16:33:DF:6F:E1:85:AD:32
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2809AA9F1B1D6D9E78481680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc5de936-9bce-3531-adcd-7902117f38e1.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.250.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:aa:9f:1b:1d:6d:9e:78:48:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=51503e68-880e-4363-bd90-40e67aa21fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:be:5a:78:e4:05:e7:69:c0:70:dd:6a:23:41:
                    52:aa:8d:ea:18:68:e2:c0:b9:a9:39:ed:0e:1b:df:
                    c4:04:0b:d5:b6:2b:be:08:52:bf:d5:e3:ca:be:f4:
                    3e:d9:e2:72:c3:f7:a9:78:5b:3a:f0:1b:9c:0b:cd:
                    ef:df:16:2c:60:09:64:0e:99:d4:8a:44:aa:1d:30:
                    0b:2d:e2:5f:fd:ad:eb:e2:9f:6c:af:75:58:9c:35:
                    22:bd:09:27:1c:4a:0e:22:2c:89:0d:14:68:88:2a:
                    83:bb:0f:7d:a5:ab:45:bb:5a:68:e2:e2:c4:64:ca:
                    40:ee:39:76:dd:d1:96:02:1d:77:b0:25:85:4a:e1:
                    bc:c5:0b:be:a3:c2:54:72:70:f2:e3:29:4a:1f:3f:
                    4a:3e:f8:93:bf:21:ef:58:75:07:96:96:d0:07:b0:
                    1d:f2:cb:b5:09:0e:29:76:f2:39:cd:3f:5c:b0:38:
                    d9:37:7f:80:b6:80:02:2d:db:41:34:ec:2b:b8:da:
                    bd:ca:d7:c3:4d:69:70:14:b3:e4:ee:42:8d:bc:d3:
                    dd:a2:e6:64:cf:d6:f0:06:e1:8f:0f:b7:ee:8b:6c:
                    15:10:e9:79:6f:8a:23:f7:b0:8f:ee:3f:ab:3f:2c:
                    0f:14:91:32:75:89:e3:0e:00:51:18:0d:02:cb:96:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EF:F5:9C:32:DB:41:7F:7E:25:EC:8D:16:33:DF:6F:E1:85:AD:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bc5de936-9bce-3531-adcd-7902117f38e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:93:5a:3d:fc:d2:76:d8:c1:21:9f:84:08:12:f7:4a:e0:a5:
         78:8a:09:89:5c:9b:dc:6e:9a:17:32:0d:45:75:01:2f:26:70:
         85:f8:51:f3:2b:39:c3:28:17:ca:76:fd:44:e6:68:9c:85:93:
         e0:80:d3:7b:fd:a7:50:75:f9:f1:14:62:86:ee:df:5b:5e:d7:
         e0:f0:8f:02:0f:1f:55:8e:5c:54:c5:0d:47:f2:6c:1c:de:96:
         bb:cd:15:35:05:43:99:80:90:26:17:86:b4:1d:58:7e:60:a5:
         d6:a0:04:e2:68:0c:fd:d0:5a:08:39:d2:51:3b:a8:ba:9b:ad:
         4d:21:0a:2d:90:d3:90:d0:eb:cd:aa:e7:ad:01:59:97:5c:90:
         03:1f:16:8f:58:51:eb:06:5b:7d:39:2b:0c:cc:03:6a:3e:27:
         9b:8f:1b:f3:a9:94:51:1e:e4:58:7c:16:5c:7e:67:43:7b:da:
         dd:23:dc:0a:f7:12:5a:fc:23:95:c3:83:de:33:8e:53:0d:b8:
         eb:22:74:ff:fa:f4:81:26:7d:b5:55:aa:78:77:77:fd:81:64:
         e4:75:b4:6e:81:14:49:64:e6:9b:e4:20:a4:d5:56:b7:26:f3:
         23:f7:e5:11:0b:a9:66:8c:a7:77:33:d9:d6:9f:8f:36:ea:98:
         27:b9:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:13:43 2026 by rpki-client