Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa
File:                     f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa (raw, json)
Hash identifier:          xIbYsmQa2IE3UJOfdpUfCsm4YjncIK4ZkkgraVNBcrc=
Subject key identifier:   A3:C0:9B:BB:91:CE:A0:1F:0A:20:5C:EC:EB:18:EB:0F:F4:81:42:87
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2809B8AB644C1A2C67F62DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.249.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:b8:ab:64:4c:1a:2c:67:f6:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=9bb501bf-e64a-483c-b51a-6bc226c8e76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:be:19:9f:40:89:32:19:b2:ad:e1:7c:9e:0a:
                    f8:1a:94:c9:76:68:9d:ae:d8:dc:a1:91:e3:b2:e9:
                    fd:a5:d3:2f:68:e7:85:bb:91:02:d3:b6:5d:b3:dc:
                    e0:fc:28:9c:ba:3f:e4:bc:8d:d9:2a:0f:65:d0:14:
                    0b:70:92:83:38:86:a0:92:ae:9e:d0:dc:0e:a6:c1:
                    04:94:c8:1b:ff:57:10:33:ca:1b:bc:4b:21:b4:8b:
                    e0:52:30:0f:e3:5a:ac:ea:56:79:e9:d7:d7:40:53:
                    67:54:48:ba:c7:ef:05:05:9f:63:16:af:3e:59:d7:
                    1a:56:d8:39:85:5c:52:26:48:00:f4:bc:80:3d:60:
                    f8:05:29:d4:bd:a4:e4:cd:43:cc:08:89:24:bf:0a:
                    70:53:56:e9:06:d8:ea:eb:29:ab:99:ce:be:4f:de:
                    98:9a:0c:37:16:d1:c4:15:3e:2c:92:f8:c6:8c:82:
                    5d:4d:7e:6e:5a:f8:57:dd:42:be:81:53:85:6e:37:
                    36:be:0e:c3:75:71:86:7f:3f:bd:80:c6:bb:e3:e6:
                    e8:f5:2e:f0:b4:7d:94:6a:e5:82:a6:9e:62:5e:c5:
                    b8:89:44:f6:15:11:30:2e:9a:5e:28:ec:80:35:47:
                    ae:e7:48:82:d0:ba:59:43:be:00:1d:08:5e:a1:24:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C0:9B:BB:91:CE:A0:1F:0A:20:5C:EC:EB:18:EB:0F:F4:81:42:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0fef4ec-a74a-3c04-ae88-a9a003c0e790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.249.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:26:d3:61:e3:df:ed:8c:15:ed:3b:d6:16:ef:1b:e3:1f:24:
         d5:9d:99:8c:df:8f:5c:15:27:77:c5:8f:01:a0:ea:c6:b9:dc:
         6e:de:bd:06:f4:bd:3e:ab:96:d2:42:3a:88:93:1a:3f:0f:14:
         be:34:54:a9:c7:fd:28:6e:ab:23:6e:a7:a2:be:cd:7f:e5:18:
         26:f7:a4:a8:4b:2d:cd:eb:e7:4d:9d:98:a8:20:61:9a:04:37:
         1e:f7:02:fc:08:2a:5a:77:02:d6:f1:af:e1:6f:ab:3c:80:3c:
         fc:a9:b0:80:cb:39:18:bf:be:42:0a:4a:57:02:ef:88:7a:f2:
         49:4b:da:a0:c4:4f:0a:2a:85:5a:10:f6:01:d5:61:a9:77:2d:
         16:10:6c:2d:4a:b4:8e:53:4f:78:68:c5:b3:92:ea:3a:de:9f:
         63:31:10:1d:b7:7a:34:73:1a:c6:f8:65:c0:fc:f6:16:30:dd:
         2a:2d:bc:ac:29:c7:4c:5e:9e:da:03:1a:6b:e8:4b:a9:37:f3:
         21:1a:0b:d7:ab:50:29:cb:3b:57:e4:2a:ee:e6:6b:b0:96:55:
         6b:35:98:e9:60:94:f3:28:47:63:c3:c9:cf:28:e3:18:42:de:
         74:55:08:c8:8d:1b:7b:6c:b3:58:b0:92:f4:a9:77:54:98:e9:
         fe:9c:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:00:27 2026 by rpki-client