Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/deda92b0-b22c-325b-a980-baa424f999d1.roa
File:                     deda92b0-b22c-325b-a980-baa424f999d1.roa (raw, json)
Hash identifier:          wDtVfdfo/sIpde29rn8MZ5QHko/hs+4s8VwWbkMvFrw=
Subject key identifier:   A8:2B:B5:41:4C:5F:91:87:22:41:F6:C4:5A:23:F5:1A:B7:4E:27:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E016B3DADC3F3C6C6830BF180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/deda92b0-b22c-325b-a980-baa424f999d1.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     6167
IP address blocks:        174.218.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:3d:ad:c3:f3:c6:c6:83:0b:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=123371cc-4f01-4bc9-8b21-59b5a11d8180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:33:d3:e9:2f:a6:22:6c:71:60:ff:98:8c:
                    6a:95:cb:9c:ea:ec:54:d8:51:cf:3d:db:5c:3d:75:
                    e4:93:e6:8e:72:8c:e2:a1:8a:d9:13:25:85:cc:b5:
                    ae:ee:ad:d1:ea:49:2c:19:b6:7e:7b:3f:51:6b:ae:
                    8f:cc:ae:da:6d:29:14:16:c9:33:b7:8e:79:e5:c7:
                    43:92:04:dd:86:22:b4:11:49:2c:cc:e2:89:b9:27:
                    29:ae:27:cf:1d:6c:3e:a6:64:de:82:d8:5e:46:d9:
                    ec:67:27:f0:55:54:a2:c6:dd:86:40:68:e9:b7:f7:
                    d8:72:36:d9:40:01:cb:63:48:70:ff:20:ba:40:0d:
                    11:65:8a:4b:ff:f2:f8:d2:0b:7d:19:ec:9d:47:4c:
                    f8:5e:e0:46:68:a7:a3:3b:52:ff:c1:4e:c5:8c:72:
                    8a:1b:c4:66:30:b6:a8:9f:19:c7:55:15:ad:b6:04:
                    57:e5:dc:34:04:05:4f:d1:4b:f9:bb:e1:f5:23:68:
                    8d:6a:e8:7d:30:d5:82:aa:ad:cb:80:de:0c:87:fc:
                    cb:32:72:00:45:0e:4b:c3:ba:01:29:d7:8a:45:10:
                    de:59:b0:d4:f0:1b:47:05:f2:bc:36:20:3a:2e:e9:
                    cc:3e:50:46:6e:88:02:18:45:02:f6:70:32:cd:39:
                    5b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2B:B5:41:4C:5F:91:87:22:41:F6:C4:5A:23:F5:1A:B7:4E:27:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/deda92b0-b22c-325b-a980-baa424f999d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:6c:58:d3:7d:2b:68:79:7a:5e:63:af:ba:3e:95:0d:f0:15:
         94:c0:f8:54:fd:99:d5:2c:8e:23:f8:c2:1e:0a:8e:44:5f:1f:
         a9:9f:49:9e:f5:e0:69:b9:13:bd:a3:be:85:34:f3:c5:cf:81:
         e8:bc:35:b1:3f:27:8d:44:fc:a3:8c:5b:5b:86:09:bd:b1:10:
         75:d5:66:12:04:d6:35:f3:01:17:44:c0:17:12:ce:2c:30:63:
         2c:69:c1:bd:2f:85:b2:ae:b6:46:4c:b6:80:f5:7e:01:19:fc:
         b0:b3:fe:69:74:9d:63:55:30:4d:18:79:ef:86:c4:a0:da:dd:
         8b:e0:f8:f6:00:d0:d6:38:0f:dd:bb:41:90:8a:11:7b:30:2e:
         d8:9d:63:44:8e:28:27:24:11:8d:07:8e:1f:86:02:a4:49:b9:
         d6:a0:d8:e5:5e:98:64:04:50:bc:ef:2e:7a:50:0c:c6:1b:d9:
         7c:cb:9b:a5:80:62:d4:fa:ec:d5:c7:60:bd:a0:83:a3:67:d6:
         36:cc:69:55:cc:23:9d:83:81:80:67:68:18:76:9a:07:28:6e:
         54:7d:d2:88:6c:9a:b2:53:af:a9:f8:16:f9:07:03:a2:3c:96:
         93:b2:f3:54:b6:5b:c9:20:b7:b0:f2:3a:e5:f2:ff:01:68:05:
         43:ec:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:35:57 2026 by rpki-client