Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa
File:                     c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa (raw, json)
Hash identifier:          k0fLm0nX+PoiaHjkEdoBfj1P/E/wQNIiNEdHQ5oTQd4=
Subject key identifier:   20:C8:C3:FC:E1:E3:AD:98:92:27:3A:DA:ED:9D:DE:B4:22:A4:0B:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E016B48A9AC9D2A2D8D4D6B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     6167
IP address blocks:        174.224.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:48:a9:ac:9d:2a:2d:8d:4d:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=2d22e838-7db7-4d0d-b5e6-58b4c187e016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:ae:af:03:22:b2:c9:1f:66:91:37:0e:f2:
                    b2:1a:e9:30:88:b6:d3:8d:a6:74:34:08:f7:c5:b3:
                    73:b9:6a:1a:89:fd:41:72:04:a7:13:ed:3b:a7:39:
                    93:39:40:79:3d:ab:a7:49:c6:1a:90:58:77:5e:84:
                    12:6b:29:3c:0d:89:c6:d9:b5:ec:4b:c0:c7:b1:ce:
                    e2:ed:2b:47:62:8f:6a:04:6b:0f:22:c7:59:dd:e5:
                    35:2c:9a:c7:96:d9:07:32:78:e3:67:7b:75:20:07:
                    6c:26:b8:5c:90:16:e3:35:bf:36:8f:6a:cc:87:00:
                    73:90:17:43:27:00:a8:3f:c0:93:70:c8:30:18:3f:
                    62:cf:08:ff:b4:94:f3:1e:1a:34:0a:43:43:e5:25:
                    6b:28:b3:59:f4:27:e8:3b:fb:b8:a2:94:22:5d:76:
                    21:69:0f:97:ae:ba:c0:ff:c0:fc:18:41:78:2a:b5:
                    86:b3:f9:a3:6c:24:fe:57:ba:29:67:ca:52:08:6f:
                    01:a4:a1:4f:27:00:18:64:1f:e2:cd:62:96:a6:2e:
                    91:b3:6b:f6:1f:ee:62:31:05:3a:f7:0a:9f:0b:e1:
                    9b:60:c6:48:38:3b:ee:40:a4:19:ce:27:05:54:67:
                    2f:84:83:cb:09:3c:a8:4f:b1:4c:41:93:0d:c6:06:
                    d1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C8:C3:FC:E1:E3:AD:98:92:27:3A:DA:ED:9D:DE:B4:22:A4:0B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4c:ba:b1:ed:e0:e1:b1:fb:bb:15:f4:d6:9b:af:0f:83:a9:
         39:4d:fa:b8:78:5a:14:c3:6f:c2:63:95:04:73:7a:e4:d5:ec:
         98:c6:65:04:ee:aa:d7:b2:c9:be:b8:0f:62:f5:a4:87:6f:9c:
         f2:a1:1c:49:54:12:2d:e8:71:f3:95:a7:01:8e:17:fc:cf:e4:
         4f:1f:13:44:48:c1:a4:0a:f6:57:1a:be:d4:86:80:a6:59:44:
         4d:51:86:c8:44:a8:2c:c4:93:3a:7e:9a:c4:57:1c:b5:39:b4:
         11:2e:01:a7:5e:d3:68:15:88:1b:3a:87:9a:c6:c6:75:ac:e4:
         38:25:d2:00:69:4c:92:69:4b:1b:04:06:ae:aa:5b:43:89:49:
         d1:0d:79:2f:60:26:31:d8:e8:ab:0c:dc:e4:32:e9:14:57:ac:
         d7:03:59:dd:8e:72:2e:d1:ee:78:e1:4c:1b:28:11:44:65:b9:
         21:1b:b2:36:54:70:74:c6:1a:d0:c1:e9:d8:96:28:42:96:77:
         28:4a:04:bd:91:d5:c0:40:f3:f0:ff:c0:88:7f:c7:b7:51:ec:
         9c:85:45:82:1d:73:0a:99:5e:d2:20:33:51:d3:d0:23:6d:d5:
         2c:ab:c4:e2:ee:97:43:b8:05:00:13:cc:d1:b2:b6:e7:29:a9:
         7c:f2:d7:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Ba0iprJ0qLY1Na4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk
MmQyMmU4MzgtN2RiNy00ZDBkLWI1ZTYtNThiNGMxODdlMDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4iurwMisskfZpE3DvKyGukwiLbTjaZ0NAj3
xbNzuWoaif1BcgSnE+07pzmTOUB5PaunScYakFh3XoQSayk8DYnG2bXsS8DHsc7i
7StHYo9qBGsPIsdZ3eU1LJrHltkHMnjjZ3t1IAdsJrhckBbjNb82j2rMhwBzkBdD
JwCoP8CTcMgwGD9izwj/tJTzHho0CkND5SVrKLNZ9CfoO/u4opQiXXYhaQ+XrrrA
/8D8GEF4KrWGs/mjbCT+V7opZ8pSCG8BpKFPJwAYZB/izWKWpi6Rs2v2H+5iMQU6
9wqfC+GbYMZIODvuQKQZzicFVGcvhIPLCTyoT7FMQZMNxgbRGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDIw/zh462Ykic62u2d3rQipAvQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRlMDI0NDUtMDZjYS0z
ZTRiLThmZjUtMTIyMmE4ODQ5ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9MurHt4OGx+7sV9Nabrw+DqTlN+rh4WhTDb8JjlQRzeuTV7JjGZQTu
qteyyb64D2L1pIdvnPKhHElUEi3ocfOVpwGOF/zP5E8fE0RIwaQK9lcavtSGgKZZ
RE1RhshEqCzEkzp+msRXHLU5tBEuAade02gViBs6h5rGxnWs5Dgl0gBpTJJpSxsE
Bq6qW0OJSdENeS9gJjHY6KsM3OQy6RRXrNcDWd2Oci7R7njhTBsoEURluSEbsjZU
cHTGGtDB6diWKEKWdyhKBL2R1cBA8/D/wIh/x7dR7JyFRYIdcwqZXtIgM1HT0CNt
1SyrxOLul0O4BQATzNGytucpqXzy160=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:04 2026 by rpki-client