Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cbb878b-8b0a-3d9d-a99b-13309e40b1b7.roa
File:                     0cbb878b-8b0a-3d9d-a99b-13309e40b1b7.roa (raw, json)
Hash identifier:          3RfyObe56Hj5dJjjT3xdKYKAchPQQIA8siPr79U56WY=
Subject key identifier:   49:F1:2D:8D:B5:01:03:E6:9C:56:58:8F:5B:4E:31:01:F8:79:16:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C4FBEE4237A2FD52E8CB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cbb878b-8b0a-3d9d-a99b-13309e40b1b7.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.241.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:fb:ee:42:37:a2:fd:52:e8:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=0e37e0cf-ab2d-4591-a272-60e2275ccef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:3d:7e:18:1d:86:aa:87:90:01:ff:38:28:
                    2e:22:35:1a:43:f8:80:63:d9:fd:95:59:ef:11:1c:
                    f2:9c:4b:b1:c4:99:63:f2:10:0e:90:15:35:8d:bf:
                    9e:bc:53:be:1c:cd:dd:95:9c:50:02:58:a3:05:f8:
                    b6:ae:5a:b2:65:d4:a0:a7:e7:d4:a6:3b:89:4c:1b:
                    73:05:03:72:1c:8f:85:73:d2:b9:ca:ce:69:a2:fd:
                    14:1e:65:4f:c9:15:87:5d:64:b7:6d:ee:17:88:20:
                    f9:9a:2d:83:d3:4b:d4:46:6a:dd:46:26:ab:61:e4:
                    5a:ee:d4:14:8b:fb:79:11:a6:a7:71:9b:b4:a9:6d:
                    0b:31:01:be:68:08:15:1c:43:b7:50:0b:9c:c8:97:
                    ac:47:8e:c9:30:7c:f2:ad:62:45:07:6e:2b:0d:1c:
                    60:34:e3:b4:ac:39:90:b1:b7:c6:9e:d3:cc:cd:5a:
                    f5:b3:00:48:77:05:ed:a3:c8:92:b1:22:5c:cf:8e:
                    0c:57:48:56:19:a4:a2:a3:9c:55:6b:3f:65:66:6d:
                    1e:77:49:6e:bc:50:21:32:c3:33:59:dd:3c:18:2d:
                    fd:ba:ce:35:ce:1d:05:da:2a:49:29:e5:9f:15:b3:
                    0d:b5:21:4a:17:70:f1:36:f6:f3:ae:67:cd:8b:15:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:2D:8D:B5:01:03:E6:9C:56:58:8F:5B:4E:31:01:F8:79:16:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cbb878b-8b0a-3d9d-a99b-13309e40b1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.241.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5a:78:f1:78:37:77:58:6c:0d:66:b9:6d:85:51:91:45:9a:
         2d:cd:8b:6c:47:71:c0:96:c4:64:73:49:80:6f:d1:c0:b6:d3:
         fc:f7:00:7f:4c:ac:c9:81:5e:26:c8:95:40:9c:72:53:38:ba:
         a3:4d:22:c9:10:4f:0a:4c:bc:9d:15:de:bb:a9:1e:14:51:6f:
         ad:75:92:0c:66:55:a2:d9:23:47:e4:81:da:b1:ed:87:85:d9:
         18:dd:67:53:26:d2:54:96:2f:8c:e5:ac:f3:df:10:42:ed:1c:
         37:8b:d7:5a:7c:72:c6:ad:dd:ad:68:bf:25:4b:07:4f:e8:14:
         f1:72:94:ac:46:7d:e9:0c:fb:72:2c:78:11:c8:cf:11:b7:f1:
         c7:e9:44:ed:ea:a3:07:1b:cb:0f:3c:7b:9a:6b:03:57:dd:4f:
         82:6f:b2:e1:51:88:21:2f:94:83:55:fc:61:d7:c5:c0:94:a4:
         34:65:d3:3f:f7:cd:61:72:2d:90:bf:5b:57:06:32:22:94:66:
         6d:35:ec:71:8d:54:ab:12:9b:79:7a:b7:ca:5d:da:11:b4:c4:
         4d:a8:6e:c4:4e:da:c3:57:80:2b:68:2b:b9:c2:bf:5f:f7:77:
         41:64:ff:7b:ba:8f:7a:eb:74:1a:f2:32:b2:d2:e1:da:08:9a:
         6b:6d:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:56 2026 by rpki-client