Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa
File:                     3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa (raw, json)
Hash identifier:          Ffyy7ijQjBUARLO3L8x6O/aLyv7wfJZBkuL/Pt5rX7o=
Subject key identifier:   8D:1A:BA:37:6D:6E:EB:4C:DA:83:BC:E1:7C:A7:05:E1:99:DC:BB:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF6E8728F36D5592E12AB0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.194.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:6e:87:28:f3:6d:55:92:e1:2a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=0e6b6514-74c6-480d-bf6e-0a1dc4c27a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:db:ae:a7:9a:02:e1:c4:df:6d:a5:f2:29:f7:
                    a4:8d:bb:78:81:77:8b:dd:62:a6:db:d1:d0:23:1e:
                    02:67:93:ac:b6:cb:ba:fd:60:b3:b1:5a:02:fa:03:
                    50:0c:57:3b:58:d3:51:43:7c:5a:52:93:a9:92:03:
                    ea:29:21:da:d7:11:40:2f:66:9f:ea:e8:81:1f:ed:
                    cd:ec:5f:31:8a:78:58:ff:e7:e1:33:45:c7:ad:ae:
                    1a:db:25:0f:47:56:fb:6e:c5:a8:99:4b:49:59:ee:
                    cb:14:41:e7:1f:4b:4d:5e:be:40:ca:d8:66:10:6a:
                    b9:2d:42:45:07:54:a5:3b:65:bb:33:31:96:94:ff:
                    8c:c1:8d:e9:c9:9e:20:93:55:39:c2:5c:e2:62:bc:
                    84:57:bd:40:d5:31:d3:bd:b1:b5:77:23:c9:a7:e3:
                    83:57:d2:5a:a6:6f:29:fe:74:bd:58:1c:9a:9f:22:
                    89:cc:dc:fa:25:9f:ee:20:57:40:27:01:da:82:50:
                    1c:b7:2f:bd:c7:52:16:da:af:06:50:42:61:fd:ae:
                    40:88:1c:81:6b:b6:40:9f:ac:bc:e1:2b:2d:ae:7d:
                    a1:73:65:49:f4:bd:24:9a:b4:46:9d:08:18:77:f9:
                    5e:65:5d:3e:4b:0f:a6:23:63:2c:7a:19:ab:e8:46:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1A:BA:37:6D:6E:EB:4C:DA:83:BC:E1:7C:A7:05:E1:99:DC:BB:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3931d7b8-3008-3bc7-87be-aa511aaa4cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.194.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:82:45:2b:95:ba:b2:51:13:57:b3:79:36:62:b3:65:48:e5:
         a5:ef:7b:fd:f7:f7:0b:1d:54:9a:09:96:af:81:f3:f9:36:59:
         6f:08:70:13:dd:81:02:93:f9:ad:49:92:6e:14:ea:e0:87:31:
         e2:84:d7:ac:c2:67:80:21:e1:12:65:dc:bd:f7:c4:e7:3f:c9:
         f0:2d:c3:a6:8d:56:b2:d9:99:6e:88:e7:c6:ad:0e:f3:3e:b3:
         cc:0a:64:8c:6a:96:c4:ca:ca:0d:c4:c6:93:24:9e:c5:f5:85:
         b8:16:bf:27:7f:5e:e8:27:f1:fc:d3:94:20:b5:14:7f:5c:ea:
         96:af:da:82:ee:0a:8d:40:da:04:6b:61:d8:1b:e3:62:1d:0d:
         6d:b5:09:bc:c6:c2:83:0f:9e:b2:8d:12:66:26:22:ab:9a:bc:
         a8:fa:19:aa:6e:a4:1c:55:9d:37:a2:ed:47:d7:fc:1c:86:2f:
         75:d7:08:6b:5b:a1:bd:59:f4:83:b7:f5:80:bc:e4:65:87:fa:
         1b:de:1b:0b:68:de:4c:a3:49:54:21:c4:53:55:b5:3d:cb:84:
         1f:c1:ba:86:06:95:b2:9f:70:7d:88:e7:66:b2:c2:5b:e3:1e:
         7d:ea:af:4e:00:2c:8c:33:01:8e:87:d0:8b:91:56:f6:65:c0:
         5b:35:f8:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr26HKPNtVZLhKrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
MGU2YjY1MTQtNzRjNi00ODBkLWJmNmUtMGExZGM0YzI3YTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tuup5oC4cTfbaXyKfekjbt4gXeL3WKm29HQ
Ix4CZ5Ostsu6/WCzsVoC+gNQDFc7WNNRQ3xaUpOpkgPqKSHa1xFAL2af6uiBH+3N
7F8xinhY/+fhM0XHra4a2yUPR1b7bsWomUtJWe7LFEHnH0tNXr5AythmEGq5LUJF
B1SlO2W7MzGWlP+MwY3pyZ4gk1U5wlziYryEV71A1THTvbG1dyPJp+ODV9Japm8p
/nS9WByanyKJzNz6JZ/uIFdAJwHaglActy+9x1IW2q8GUEJh/a5AiByBa7ZAn6y8
4Sstrn2hc2VJ9L0kmrRGnQgYd/leZV0+Sw+mI2Msehmr6EYsiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0aujdtbutM2oO84XynBeGZ3LuWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzkzMWQ3YjgtMzAwOC0z
YmM3LTg3YmUtYWE1MTFhYWE0Y2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrsJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6CRSuVurJRE1ezeTZis2VI5aXve/339wsdVJoJlq+B8/k2WW8IcBPd
gQKT+a1Jkm4U6uCHMeKE16zCZ4Ah4RJl3L33xOc/yfAtw6aNVrLZmW6I58atDvM+
s8wKZIxqlsTKyg3ExpMknsX1hbgWvyd/Xugn8fzTlCC1FH9c6pav2oLuCo1A2gRr
Ydgb42IdDW21CbzGwoMPnrKNEmYmIquavKj6GapupBxVnTei7UfX/ByGL3XXCGtb
ob1Z9IO39YC85GWH+hveGwto3kyjSVQhxFNVtT3LhB/BuoYGlbKfcH2I52aywlvj
Hn3qr04ALIwzAY6H0IuRVvZlwFs1+P8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:57:59 2026 by rpki-client