Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37b45a49-9b0c-3a83-b9aa-86c53327f256.roa
File:                     37b45a49-9b0c-3a83-b9aa-86c53327f256.roa (raw, json)
Hash identifier:          PDyMlOi5Gd+uON+BKwMyTSE1lpfDhpsYYkNbzOY6Cw0=
Subject key identifier:   08:A1:61:80:77:10:47:74:5F:EF:2C:A6:67:E5:D0:18:CD:3F:7E:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF6AF162B443D7D6F5DD70
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37b45a49-9b0c-3a83-b9aa-86c53327f256.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.224.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:6a:f1:62:b4:43:d7:d6:f5:dd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=64d7955a-a13b-4c06-807b-cb90e88988bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:2e:08:62:b2:4c:8f:f1:98:c2:f7:ac:53:
                    d3:8f:05:4c:70:71:2f:d6:eb:3c:30:b9:91:bf:63:
                    d9:3d:6c:3b:49:ac:08:bf:45:d9:5a:50:92:dd:7e:
                    15:11:06:4f:51:e9:ab:39:aa:fe:b1:c8:64:2f:5d:
                    b6:90:0e:fb:b4:ee:e1:13:ca:7f:68:4a:59:ae:cc:
                    a6:79:ac:0a:3a:ab:3b:e3:f1:32:25:37:27:b2:55:
                    61:55:c0:2b:5c:ca:6e:12:81:67:9b:43:20:77:96:
                    83:d7:b7:13:4b:8e:63:70:11:14:54:65:6a:de:4a:
                    25:57:b7:79:96:14:ec:6c:aa:ac:da:e1:73:44:e5:
                    ac:2e:57:03:23:f3:87:df:2a:4f:83:66:a4:71:17:
                    8e:70:05:06:37:06:8b:b0:bb:dd:f9:ea:80:72:2a:
                    12:ad:35:4a:c4:30:5e:70:0b:9b:3e:0d:f8:a3:40:
                    11:2b:8f:38:f7:d1:af:27:6b:f2:28:ce:ec:21:89:
                    64:c8:6a:77:88:a9:ea:c2:e1:38:65:ae:cd:80:c6:
                    46:31:52:c4:cd:0f:60:c4:76:b7:0d:49:ef:f6:ad:
                    a8:fd:df:90:db:cb:63:22:89:30:c1:20:41:83:c0:
                    ec:20:bc:df:07:a2:f3:ab:46:fb:9d:b7:e0:4b:9f:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A1:61:80:77:10:47:74:5F:EF:2C:A6:67:E5:D0:18:CD:3F:7E:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37b45a49-9b0c-3a83-b9aa-86c53327f256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:0f:b2:c2:a3:19:29:b3:80:17:7c:9d:1e:7a:54:16:d5:c3:
         64:19:a5:d4:60:9a:7e:a9:88:7c:9f:04:81:e8:a7:0b:58:f4:
         a5:53:18:9c:91:5a:76:54:db:b7:8c:de:bb:fa:d2:56:cf:fd:
         04:62:ed:e6:00:76:ea:a2:ec:84:c9:4d:74:8b:35:49:6c:1a:
         43:c2:95:84:ef:7b:17:a7:8a:e1:c4:2a:51:e2:46:82:7f:d7:
         6b:07:54:4b:0e:47:9f:62:1c:86:c0:f7:8a:ad:c1:d4:28:ad:
         d0:39:80:b7:bb:dc:45:c1:ea:a6:0e:67:01:12:f4:07:74:76:
         e2:a9:17:c8:ae:a8:5a:67:b1:6e:f1:0f:d8:5f:26:5f:15:6d:
         f3:0c:ca:7a:ca:76:9d:9a:85:c4:67:4b:ac:27:3c:22:2c:56:
         b3:98:62:34:73:74:5d:6c:de:f2:93:79:ee:56:f8:b9:6d:34:
         fa:d9:6b:cc:a9:11:e9:88:ca:9a:48:2e:f9:73:e8:8d:54:1b:
         53:83:22:b9:3c:ea:fb:13:d7:78:63:ee:d2:78:7e:a1:32:14:
         04:16:56:40:71:d4:eb:e4:6b:8d:0c:29:ce:c4:3c:23:2f:5c:
         01:4f:af:62:aa:39:42:96:2b:74:b3:f2:e3:d1:78:45:d7:53:
         78:9c:0b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:44 2026 by rpki-client