Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd8d559e-76b0-360f-a19d-b95fa1e9a86f.roa
File:                     dd8d559e-76b0-360f-a19d-b95fa1e9a86f.roa (raw, json)
Hash identifier:          zpA6bn6sjCGub7yfzNl5HsIajLy+wzV3AXJe5kIPR84=
Subject key identifier:   48:90:FC:A4:74:00:A8:55:DB:AA:DD:37:10:29:95:17:9A:D6:56:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E016B43FD39703BF02B4864A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd8d559e-76b0-360f-a19d-b95fa1e9a86f.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     6167
IP address blocks:        174.195.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:43:fd:39:70:3b:f0:2b:48:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=3f80ce4f-9396-4cfc-a77a-54f030a5d946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:69:52:83:3d:a0:1e:51:58:3a:e3:25:6d:58:
                    d4:50:36:44:ba:61:bc:d3:e5:5e:c2:b4:0c:43:70:
                    53:4a:32:6f:d4:69:d7:03:79:c9:ac:77:4b:13:73:
                    77:0e:03:ce:8c:3a:3c:a3:7e:fa:d6:be:67:b9:2e:
                    35:33:f0:ed:e9:b2:10:7b:d4:f4:4e:69:10:8c:15:
                    e0:1d:74:22:21:dc:d9:2d:e9:f2:d6:96:a9:41:24:
                    ed:fc:a0:2b:75:31:8c:b7:8e:6e:7e:48:92:cf:b4:
                    86:74:76:7c:64:e4:14:95:e5:d1:c2:28:f4:fb:db:
                    79:4b:a0:46:1a:8e:69:be:67:6c:fd:5e:5a:c0:8f:
                    cb:7f:5a:73:e6:dd:70:89:c1:a2:8a:bd:3f:1e:4b:
                    22:e7:ae:0b:94:a4:62:48:d6:ba:10:51:bb:15:59:
                    4d:20:44:58:a0:72:97:22:b9:70:ca:d5:91:03:f2:
                    39:3d:e6:64:76:b1:ce:ea:1f:79:94:54:45:d4:a8:
                    e1:bf:34:65:79:9e:e1:b6:c1:74:61:61:5f:25:a7:
                    f0:ce:af:98:7c:c7:0e:8c:db:98:fb:7e:eb:9c:1f:
                    18:70:33:44:d2:ba:87:70:77:81:d4:4e:25:b5:15:
                    84:e0:57:4e:6c:33:8b:b7:b9:fe:9b:fb:d6:b0:16:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:90:FC:A4:74:00:A8:55:DB:AA:DD:37:10:29:95:17:9A:D6:56:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd8d559e-76b0-360f-a19d-b95fa1e9a86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.195.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:55:aa:0d:a2:65:e3:99:b3:3c:26:b7:2d:86:ed:7d:f5:2c:
         5b:f1:df:c0:ba:9d:71:4d:2e:bf:ca:46:52:04:ef:4b:8c:79:
         bb:a7:cc:73:ad:07:a1:0d:ad:26:11:80:a1:74:d6:42:55:26:
         71:65:de:15:25:1f:32:b7:59:1c:ee:7c:f4:22:ab:f1:1c:dd:
         ce:54:69:92:37:bc:76:88:ec:f7:0c:08:fe:0d:e7:41:56:49:
         57:43:0d:42:b3:58:92:5c:2a:9c:d6:56:4a:c1:97:9a:67:af:
         a7:38:1e:83:50:b5:22:e4:55:e5:28:c5:3b:fa:58:08:8a:98:
         e7:8c:2d:10:1f:5a:72:27:df:8e:9f:ef:2b:77:c0:37:90:1a:
         d4:71:80:6e:ed:c6:ca:90:a6:4e:c2:e1:b6:33:c4:35:23:6e:
         33:2f:fa:fa:77:70:3a:5f:34:1e:2e:2b:73:21:3f:59:3f:67:
         6f:b2:28:d7:13:a1:58:f3:fb:6e:43:c1:b1:6b:d4:9e:be:41:
         7d:77:e1:8f:52:27:e9:02:a8:6f:0a:5e:45:12:4a:6d:0e:8b:
         c9:e1:35:4d:f2:d9:4d:d9:2e:32:63:cf:1f:b1:c7:3e:39:ff:
         45:3f:c5:27:e8:23:e7:19:51:3d:ec:bb:e7:c8:23:be:d6:67:
         04:95:b8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:27:17 2026 by rpki-client