Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfba20cf-037e-34c2-aa42-6197010f8c12.roa
File:                     cfba20cf-037e-34c2-aa42-6197010f8c12.roa (raw, json)
Hash identifier:          e08EMf/U8Pkb++Nme9ARn7stxqZg9n4AL1IIdgiDT7k=
Subject key identifier:   5A:ED:36:AA:FE:A2:9E:3C:5B:6D:47:31:09:29:CF:47:4F:62:B2:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2809B6393FDAA858936CDC72
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfba20cf-037e-34c2-aa42-6197010f8c12.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.245.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:b6:39:3f:da:a8:58:93:6c:dc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=ddfa761a-3140-4b25-ba0b-4b199bc44a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:09:66:5a:9f:d9:71:b8:fa:82:47:0f:83:ce:
                    46:76:31:83:38:fd:e3:8c:87:66:09:b2:c4:3c:c7:
                    ac:55:20:5a:54:ad:a4:1f:d0:03:21:80:c4:23:d2:
                    3f:af:04:97:2b:09:55:5a:99:b5:9c:ca:5a:78:2c:
                    72:79:2a:56:bb:e1:98:74:ae:28:6a:f8:92:76:cf:
                    1b:89:20:68:3b:8f:fa:c3:ba:50:6f:c0:b9:4e:8d:
                    bd:58:43:9d:da:32:5c:25:de:71:c1:7a:c0:51:7f:
                    fb:0c:42:29:b0:45:3f:19:ff:c2:65:3e:8d:46:16:
                    be:8d:64:43:5e:80:0e:eb:65:34:11:c4:8a:3c:e2:
                    0c:17:3a:be:de:3f:cd:9b:b7:bd:c4:79:db:6c:fc:
                    f9:c9:ef:2f:56:6b:13:e4:bb:85:fd:56:0a:0d:44:
                    49:8d:dc:9f:c6:a2:98:79:da:af:3e:93:83:f7:bb:
                    c3:8d:b1:56:5f:c1:9c:e9:c1:e0:07:f4:bd:b5:68:
                    18:31:f3:13:cf:0d:c7:f9:59:44:a5:77:0c:e6:11:
                    d9:6a:7c:aa:06:78:27:9d:d4:4e:e5:e3:35:06:ba:
                    de:74:5e:83:8b:50:67:c9:88:93:b6:12:8b:15:1f:
                    92:f7:04:21:fe:c3:0d:30:fc:3c:1b:dd:72:47:f8:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:ED:36:AA:FE:A2:9E:3C:5B:6D:47:31:09:29:CF:47:4F:62:B2:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfba20cf-037e-34c2-aa42-6197010f8c12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.245.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:25:38:1f:3f:78:ec:84:2b:f9:67:7d:41:2a:0e:09:1d:48:
         fd:8d:d7:47:3c:69:8a:d6:f1:ca:df:36:a6:c4:f4:85:0e:a2:
         c1:a1:c4:5b:38:eb:8b:68:46:96:75:bd:40:b9:f4:04:67:ad:
         07:49:57:45:35:71:2c:e8:74:38:46:e3:72:35:f9:a1:87:a0:
         01:1d:ab:8e:cc:a5:21:e6:da:cb:85:d3:d2:90:ba:7e:a1:89:
         c3:c6:54:00:60:26:12:16:df:d6:0c:42:d0:3c:a2:b5:cc:2a:
         2a:e4:30:9e:b5:66:13:ea:02:49:ef:c7:a8:d1:f2:db:ce:11:
         dc:17:8e:81:55:87:61:f5:7c:c5:23:72:77:17:02:93:9f:d9:
         68:1b:e6:07:dc:49:26:ab:80:63:27:b7:0d:dd:5b:33:5d:2f:
         ef:4a:b4:87:d3:2d:29:3d:d5:53:22:af:90:6d:3b:3d:58:0e:
         fe:3c:51:0d:cb:29:05:8b:3f:e5:e3:f1:fd:cb:73:8c:db:97:
         8d:fb:cf:9d:e5:1f:87:97:67:07:2b:0e:22:28:05:04:29:92:
         ae:f9:ec:e7:8a:38:e3:2f:00:1d:ea:97:64:3b:55:77:a4:4b:
         d7:6d:90:92:5e:0f:93:ef:35:58:f9:c5:98:5d:ac:65:61:36:
         7e:5f:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:51:37 2026 by rpki-client