Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/105829ba-3e1c-3cad-b3be-6dd57bb80967.roa
File:                     105829ba-3e1c-3cad-b3be-6dd57bb80967.roa (raw, json)
Hash identifier:          bviqsR+WISR288gnDiuTa+KRIiCBH4BeN+RemM88yfY=
Subject key identifier:   D4:76:32:71:3C:0A:7C:B4:F0:81:65:7C:CB:77:FE:20:95:81:A0:7D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF748DFAACCB48656744D4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/105829ba-3e1c-3cad-b3be-6dd57bb80967.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.224.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:74:8d:fa:ac:cb:48:65:67:44:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=886a9a90-65e4-42d2-928f-cf7a670358d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f8:7c:15:36:01:32:30:0f:84:ad:59:9a:b2:
                    a8:b3:cc:d7:06:d9:3b:c7:47:2c:93:35:9d:63:31:
                    96:34:ed:87:1d:8b:3c:a4:c4:91:35:79:05:06:a4:
                    99:8e:b2:cf:20:8c:86:c7:1b:22:e0:4c:8c:7b:c9:
                    de:38:d4:b8:39:98:bc:22:03:77:26:5b:c0:05:e7:
                    49:c4:e1:91:6c:9c:e9:7b:f1:04:fc:03:05:3c:c5:
                    eb:82:78:08:a0:e3:ef:a4:50:fb:24:1b:7d:2c:94:
                    bb:cb:4a:32:6f:38:44:0c:16:cf:4c:1e:e5:35:68:
                    57:40:0e:55:58:33:73:b3:44:87:91:3b:a8:8f:a0:
                    1c:1c:82:c0:8c:80:bf:02:59:fa:1f:5c:7c:88:7b:
                    ed:0d:9f:4e:75:63:a5:b2:20:8a:d0:f0:bd:20:c7:
                    88:4e:1c:b4:23:f4:22:c0:5a:54:14:87:1a:6f:5e:
                    77:e4:fd:f6:0b:a4:ab:b4:76:f9:39:5e:ce:42:39:
                    65:0f:cc:10:c9:76:0d:ed:d0:d7:29:1c:e4:16:ef:
                    b4:5a:ba:d0:3b:22:c0:c5:94:82:db:b7:4c:d2:94:
                    e8:dc:a7:22:84:3c:15:0f:7c:6f:2d:df:66:ba:07:
                    6a:b6:1f:bf:ff:93:84:1c:cd:51:77:bd:b4:7d:6b:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:76:32:71:3C:0A:7C:B4:F0:81:65:7C:CB:77:FE:20:95:81:A0:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/105829ba-3e1c-3cad-b3be-6dd57bb80967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:bf:f5:4d:31:8f:2e:c6:a3:ae:4c:d6:8f:91:16:e4:96:57:
         37:2d:94:c3:0a:e7:32:b8:68:27:17:9b:33:0d:a1:80:a7:a8:
         44:78:e1:8d:00:b6:2b:cb:89:b8:5e:d8:32:f7:a1:06:21:68:
         1a:52:97:7c:72:2c:ed:68:e7:44:de:9f:bd:f5:58:00:b5:04:
         05:d4:41:72:c5:17:09:22:9b:52:92:0e:4d:08:98:24:ef:b5:
         60:97:c6:7d:61:8d:72:95:1f:b7:85:6a:28:5b:09:dd:4f:de:
         fc:68:12:cd:da:07:3a:3b:8f:32:8c:9a:52:94:82:3f:f6:fb:
         22:a0:5b:36:71:70:b8:0c:15:61:7a:e8:e4:eb:1a:5a:b5:2e:
         3b:11:a2:1d:0d:ac:4f:57:7b:1a:26:8a:1c:49:69:83:08:1f:
         2d:21:ff:15:25:2c:79:5b:15:82:d5:b5:6d:d0:14:03:54:73:
         bf:de:e0:a0:db:66:81:0b:7c:68:5e:ee:e4:e2:33:b5:65:fc:
         e2:69:6b:6f:76:48:73:e7:5f:1c:8f:bd:25:93:56:9e:a1:66:
         01:bd:cb:c5:5d:b4:c5:98:87:35:c6:58:e8:7b:cc:82:19:a3:
         cb:0f:7b:ed:ff:cf:a2:64:cb:17:5b:35:60:ae:25:04:a4:71:
         c9:59:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:59 2026 by rpki-client