Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16f19349-1a25-313d-904d-1962c935bbb2.roa
File:                     16f19349-1a25-313d-904d-1962c935bbb2.roa (raw, json)
Hash identifier:          UztFAESkIlbnM9ci5JPb9QA1zeJXfQOlDuZOF3b7dIU=
Subject key identifier:   B6:19:0C:B8:E6:A3:05:3F:67:B8:12:65:7A:85:91:D2:A8:D8:FB:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4C549571088A7D00A890E100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16f19349-1a25-313d-904d-1962c935bbb2.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        74.111.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:95:71:08:8a:7d:00:a8:90:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=4c348300-cdf8-47ea-a396-4ece7b95869c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:5d:62:aa:a1:91:b5:7a:c2:b9:a8:b0:bd:
                    94:e3:dc:6e:f3:22:6c:f4:c3:a6:b7:50:34:ea:a8:
                    96:68:f5:78:0b:76:d0:c2:a5:2d:f2:d4:6c:52:2f:
                    d0:a0:b0:22:7a:cc:65:5f:0c:de:65:e3:17:a5:6a:
                    2d:fe:84:79:4b:55:3c:18:d6:88:5a:53:2b:a7:80:
                    ea:1e:ff:c5:3f:5b:a2:2c:c7:2e:04:1e:d4:57:6e:
                    2c:b9:66:69:af:8d:0f:ac:e7:a1:f0:62:7f:14:4e:
                    e4:bc:eb:08:e2:50:78:bc:3d:a0:73:05:ef:81:91:
                    9d:ca:11:8f:2f:49:75:0f:bb:83:23:49:a0:b4:dd:
                    62:43:2e:56:55:d4:a8:55:72:8c:d4:c5:17:1c:01:
                    eb:0b:4a:fc:23:13:a2:57:69:32:cf:a2:22:07:a8:
                    20:31:1e:7c:64:b1:71:f9:ae:bc:bb:b4:44:cf:bf:
                    23:8b:4c:27:9b:4b:cc:6c:58:c1:24:db:eb:07:22:
                    3f:16:31:8d:a4:f1:b7:52:a4:d6:45:cd:22:7e:23:
                    ae:c2:96:83:f6:73:29:30:be:05:96:5d:8a:55:88:
                    66:66:30:8d:c0:50:69:33:94:8d:e5:fc:60:0a:1e:
                    ef:c7:cf:39:68:6d:4e:3b:85:76:66:19:11:84:85:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:19:0C:B8:E6:A3:05:3F:67:B8:12:65:7A:85:91:D2:A8:D8:FB:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/16f19349-1a25-313d-904d-1962c935bbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.111.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d2:62:ad:e9:89:85:be:f0:80:1a:28:2d:08:13:ec:b3:4e:
         95:19:54:ee:ef:9e:57:10:b4:1f:24:15:24:94:ad:59:e3:56:
         aa:71:90:c8:aa:4e:48:fb:ff:2f:b3:4a:ed:6d:39:60:d2:02:
         1f:e3:ad:ac:fa:b5:47:36:70:2a:8e:79:76:ca:a1:f6:84:0d:
         b5:7e:2b:2b:2e:01:fe:3a:53:91:bd:61:92:05:0d:b2:af:9e:
         65:ba:a9:91:ef:d1:07:63:76:ec:3b:c9:d2:da:15:98:2f:79:
         67:18:50:0c:95:17:2c:37:a2:96:48:44:14:a3:f9:cc:11:eb:
         8a:7c:e4:2c:f9:1f:e5:a5:a4:c3:0e:14:a6:01:c5:fe:ae:cb:
         a2:19:1b:08:67:58:34:67:1c:7c:49:90:3a:e7:86:e6:4a:3a:
         a0:e2:3e:ff:3e:b6:d0:1d:4a:3e:36:e1:2e:c1:c2:d2:57:f2:
         6a:f8:9b:0a:28:ac:53:4f:7b:39:1a:7c:a8:f9:f6:fb:64:aa:
         8a:58:0e:e6:a7:74:05:4b:ee:cc:47:22:81:72:90:ce:c3:5f:
         54:7a:d7:1b:12:91:02:e9:c7:1a:33:c1:ee:08:68:8f:6c:68:
         6b:bc:9c:b3:a3:f6:47:13:77:3b:bb:89:23:77:1a:98:8f:9d:
         64:25:91:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:30:51 2026 by rpki-client