Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf08f486-d545-3af7-8954-bbed4a161cdc.roa
File:                     cf08f486-d545-3af7-8954-bbed4a161cdc.roa (raw, json)
Hash identifier:          ojLwBfH5euw56tXzhHBqoaJyfUJt93lq03cz+hL1YyU=
Subject key identifier:   D2:22:2D:46:1A:01:FD:BF:A3:FE:9A:C8:7B:E6:21:A6:47:40:3D:2A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B961BEB3522474A08AF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf08f486-d545-3af7-8954-bbed4a161cdc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.213.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:96:1b:eb:35:22:47:4a:08:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6c993ba5-ec61-45fa-93e0-7edff61467a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:45:04:7e:89:ee:9e:d0:90:50:77:13:fe:
                    d6:c0:63:39:a9:ba:08:ba:e9:ca:c1:4e:28:66:d5:
                    0a:5f:f7:fd:f9:51:25:cb:89:3e:78:c8:25:5c:0a:
                    3f:ad:65:0d:17:04:36:8c:64:69:c5:b3:d6:27:97:
                    b4:e3:b7:4f:3e:88:83:d9:66:b4:8d:8a:97:52:a3:
                    f2:9f:ba:fd:9d:3f:17:7d:1e:6f:87:5b:1e:f9:0b:
                    da:9c:0c:ae:78:7a:f6:ec:b0:da:c0:91:95:f2:bf:
                    d6:ef:9e:ea:9a:b0:f4:d8:6b:95:95:a7:03:24:57:
                    5b:4b:93:39:fa:b8:79:9d:f5:a7:41:fa:37:87:05:
                    b3:d6:18:4c:85:f6:7a:37:70:a2:ec:e5:be:23:2b:
                    70:bb:64:a7:7e:82:04:bf:60:8a:65:de:58:20:91:
                    da:50:55:83:15:7d:8b:81:09:fb:71:ad:31:38:7d:
                    8f:e9:9c:da:75:31:c8:52:c1:b6:d9:e7:16:f2:0f:
                    aa:b7:3b:5f:dd:f4:60:20:3a:3b:f4:36:a3:90:ce:
                    92:6f:0f:d2:a3:1b:f6:2c:e3:17:be:8d:19:d3:8a:
                    94:c2:7c:45:d6:61:6d:99:bf:0a:c8:f4:69:0c:7b:
                    78:8b:35:95:ee:cb:e0:d8:69:47:6e:f8:af:df:d0:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:22:2D:46:1A:01:FD:BF:A3:FE:9A:C8:7B:E6:21:A6:47:40:3D:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf08f486-d545-3af7-8954-bbed4a161cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:13:01:5c:b1:c1:7c:74:81:e3:05:5a:fd:df:9c:08:98:79:
         79:15:26:3d:4e:df:2f:2b:e8:20:18:ba:02:a7:1b:3f:de:2e:
         ca:13:ff:03:cc:f2:45:2b:6e:03:3c:2e:6e:6d:b4:8c:f9:cf:
         a3:28:30:fa:ba:4a:c3:21:ff:31:ab:b1:f7:4e:96:f9:e6:e2:
         9c:55:bd:2c:1f:40:6b:81:44:66:a0:1c:2f:78:3a:32:02:f7:
         dd:23:e3:78:f3:43:6e:bc:94:aa:05:8d:2a:13:a8:e6:6b:d1:
         77:30:20:93:b1:d5:40:9a:1a:02:af:eb:5d:44:3d:d9:d3:46:
         8a:06:82:12:4e:99:7a:22:ad:5c:69:34:0c:c8:69:df:f9:6d:
         c6:a7:8d:63:1c:4c:ff:2d:78:9d:8c:0e:66:f7:b3:cb:96:74:
         e7:7d:c6:98:47:cb:74:b9:8c:4e:ef:e3:70:43:62:c6:a0:71:
         3e:03:73:07:67:f5:5d:e9:1e:55:bc:ea:e4:30:f2:ff:17:b1:
         ae:97:5f:73:e6:37:76:dc:4d:c4:4e:02:ac:9b:5d:52:67:a5:
         8f:e9:7a:8f:fe:2e:2e:1d:a3:06:a8:bc:43:c5:3f:3d:18:5c:
         10:63:4b:af:56:e5:68:6a:9c:bb:6c:8c:03:88:ab:93:00:c6:
         ea:c6:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:23:30 2026 by rpki-client