Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228e6ca5-5dd6-3155-a3ad-622bc524b69b.roa
File:                     228e6ca5-5dd6-3155-a3ad-622bc524b69b.roa (raw, json)
Hash identifier:          Zh+swRwU3jPE/F7xG1nAPTVcpRMMdtgxXqzrGL3jgzk=
Subject key identifier:   48:E8:99:FE:E6:77:19:06:F3:CA:A7:93:D3:E1:47:F5:2E:8D:3D:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DB4A5B39F183C4ABD1053EAA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228e6ca5-5dd6-3155-a3ad-622bc524b69b.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        174.217.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:b3:9f:18:3c:4a:bd:10:53:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=79b905c0-3c50-49d2-8139-660e2292896b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:6a:b5:04:da:96:5d:0e:27:ef:3c:09:f7:
                    d8:b5:01:9f:71:9a:ea:db:5f:ab:8e:c3:0c:fe:10:
                    00:2d:a9:dd:aa:85:a8:6e:5f:44:2f:97:35:60:b1:
                    19:2e:34:97:ba:04:c2:d2:5d:74:93:12:8f:28:0c:
                    83:69:67:eb:0d:ec:5a:1c:20:df:6e:61:58:4e:c3:
                    e7:58:39:97:b9:d9:9c:0c:4f:b2:bf:2e:d7:bf:2f:
                    80:86:04:6b:1b:dd:3a:a1:f8:2e:90:db:7a:07:ea:
                    70:7b:ca:7c:a3:7a:aa:65:f8:26:31:08:fa:00:a0:
                    52:1b:f8:4a:24:fa:49:c1:55:07:4c:cc:28:4e:4b:
                    10:61:68:83:0f:a7:bd:9b:3f:fa:09:65:7f:08:4e:
                    3d:6c:f2:d3:dc:bd:db:bb:ea:36:73:2f:45:a4:b0:
                    20:57:61:f0:d6:b8:7a:53:73:51:8a:43:51:87:97:
                    e1:58:55:20:48:9d:c6:48:c7:bc:e7:86:1b:4e:1a:
                    0d:3c:ea:cc:47:88:a4:cc:b0:e6:78:13:7e:5c:6e:
                    fe:1c:de:96:31:ad:7b:2b:3e:5c:17:55:49:bc:59:
                    00:7c:7f:d0:6d:a2:c1:11:f3:f5:19:09:ca:c4:14:
                    4c:36:02:ba:b8:34:03:56:d3:ee:12:e2:ea:5c:62:
                    3b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E8:99:FE:E6:77:19:06:F3:CA:A7:93:D3:E1:47:F5:2E:8D:3D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228e6ca5-5dd6-3155-a3ad-622bc524b69b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.217.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:06:b1:3e:02:8a:e1:5a:4e:13:d8:6c:1d:29:d6:08:b5:66:
         02:cf:e1:e1:ab:e1:d4:44:0a:12:92:11:78:b3:a5:54:22:69:
         81:ca:f1:c7:1b:e1:be:89:0f:90:74:62:f8:7a:42:8a:9e:62:
         f6:2e:d6:ab:7d:bc:8f:1a:01:9a:a2:32:37:98:64:a2:6c:f7:
         aa:09:d8:93:9e:a9:dc:62:77:60:69:3b:2d:48:ae:c7:85:4a:
         b1:ab:63:7c:fd:ee:6e:4f:e0:a8:c5:f6:aa:5d:54:92:0f:44:
         fc:1e:2f:4a:9d:f5:9b:3a:b2:79:df:e3:b3:7d:25:a1:63:ac:
         3d:1c:49:20:e2:7a:1d:ef:2d:08:12:00:b6:10:a3:54:f7:b7:
         39:58:ef:6d:d1:e4:8e:73:32:ac:bc:f8:e9:eb:8f:44:48:e6:
         b0:a8:47:f6:98:fb:20:65:29:77:5a:31:71:1f:93:37:9c:7d:
         2a:85:2c:5b:0c:aa:99:80:1f:8b:34:1f:63:cc:08:a3:77:28:
         b1:bf:f1:5c:46:a7:e6:37:8b:4e:80:8d:05:a7:97:c0:85:c6:
         02:12:cc:f1:68:5d:16:be:02:da:69:aa:b6:10:4d:31:f0:a5:
         fe:63:de:e1:79:87:91:8b:8c:97:41:77:fd:e8:dc:5b:5e:87:
         d3:8d:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:05:36 2026 by rpki-client