Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37ceafc9-30b9-3d97-95c5-6d7834e22689.roa
File:                     37ceafc9-30b9-3d97-95c5-6d7834e22689.roa (raw, json)
Hash identifier:          Tz/20r07EoXziopjsCYX0T+k3wpEAoTUuZeVq2I1kBU=
Subject key identifier:   3D:A8:C7:09:7B:D9:7D:86:88:84:6C:EA:EB:F3:D7:F4:18:9C:0B:DD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF699A471D8DAB95AFC900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37ceafc9-30b9-3d97-95c5-6d7834e22689.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.219.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:69:9a:47:1d:8d:ab:95:af:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=757c2c5f-d695-4932-8bac-4b52c2a75cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bc:95:26:9c:dc:49:2b:78:b3:f7:2f:be:c0:
                    72:90:dc:3f:1a:ae:7a:34:8f:88:4d:12:d4:78:13:
                    65:68:26:cf:6d:55:bc:b5:b4:04:e0:1e:15:9e:61:
                    d9:a6:fe:81:82:e1:05:84:85:9b:dc:c3:2b:2f:7d:
                    5a:f2:65:70:ac:ed:04:12:ce:7f:4f:52:7d:3a:65:
                    b9:37:24:f6:45:3e:a0:77:b8:57:b2:6b:44:1e:4c:
                    7c:b4:02:89:09:de:21:ed:9e:d1:46:fd:fc:ce:67:
                    95:3a:c8:95:6b:c9:3c:df:60:16:60:3c:54:6f:42:
                    c3:a3:42:07:70:5a:bc:08:5b:30:48:b7:25:a6:76:
                    78:2d:ba:dd:01:52:58:4d:93:2d:56:9e:54:18:74:
                    d5:53:67:0e:f6:24:fa:92:5e:c7:be:0c:72:f2:25:
                    c0:a7:c1:12:c6:b7:5a:50:b5:fb:a4:a6:6b:ac:4a:
                    ca:2d:e4:01:14:b2:65:14:72:66:5a:ec:5c:d2:76:
                    4d:3f:38:f2:a1:cd:47:55:af:14:a6:f3:9a:02:0b:
                    83:36:be:68:6d:08:a5:97:82:91:d5:43:1a:f6:d2:
                    5d:b7:55:f5:69:bb:1e:43:42:ae:84:26:f0:06:95:
                    68:83:20:2a:a7:80:8d:3f:b9:21:3f:ce:00:d2:86:
                    ab:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A8:C7:09:7B:D9:7D:86:88:84:6C:EA:EB:F3:D7:F4:18:9C:0B:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/37ceafc9-30b9-3d97-95c5-6d7834e22689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:42:14:c9:13:54:35:3d:10:09:96:0b:19:cd:9e:ab:92:
         3b:41:3d:b8:1f:d9:d9:fd:9a:68:f0:0b:ba:bb:d4:f3:cb:00:
         1e:7b:80:f2:9f:59:c5:76:5b:df:58:34:a0:8b:94:c3:f2:cd:
         47:a5:8e:c9:06:96:b0:8d:f4:3e:e1:06:bf:c6:b9:a5:63:a4:
         7d:bd:6d:1b:9d:93:1f:ea:ff:e4:02:37:88:09:dc:78:b6:6d:
         3f:b7:b8:23:68:89:49:f1:d1:e2:c8:8e:36:f3:23:92:67:48:
         dc:0c:dc:5d:c0:80:78:85:79:93:75:f4:7e:34:d0:b8:33:7a:
         fc:6d:90:c9:b0:71:04:4f:99:eb:22:d0:7d:c9:ca:a2:0b:fc:
         79:4b:cc:9e:37:8a:db:5d:5c:81:6a:d2:ce:b0:13:12:81:25:
         0d:ba:08:87:35:8e:f6:9c:19:3d:8b:05:31:3d:97:cf:fb:f3:
         92:b1:f4:bf:04:3d:1b:74:1e:ec:32:77:06:0e:cc:63:8a:2e:
         05:82:08:26:b9:38:a8:3b:07:0d:54:61:44:eb:86:96:4d:8a:
         e3:ad:7d:36:63:bc:5d:31:ee:f2:73:40:c4:35:48:c8:1b:7d:
         08:f2:05:0f:64:b9:59:5d:a3:c7:4c:ad:ca:6c:56:63:ec:1a:
         83:dc:80:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:21 2026 by rpki-client