Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eec6853-240c-3225-909a-b2c6a1b55a8d.roa
File:                     4eec6853-240c-3225-909a-b2c6a1b55a8d.roa (raw, json)
Hash identifier:          vVkLGLckenCIB7Rc43N7Gb531xk/ekf20v05zGQS8Jo=
Subject key identifier:   B9:AC:28:8D:9B:DA:EC:B3:5E:B4:B6:70:71:03:AD:F2:B7:BC:1D:FB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF6017AB7530B0A3A13140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eec6853-240c-3225-909a-b2c6a1b55a8d.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.210.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:60:17:ab:75:30:b0:a3:a1:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=d69b54e1-18ec-4eec-b18e-e912ded198c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:e0:e7:30:a7:db:24:0a:dc:1d:b7:5c:1c:
                    4c:b6:b4:08:b9:24:c4:f0:fa:4b:27:a2:de:4c:3b:
                    f3:99:69:44:6a:c8:a5:0b:07:b5:fc:ab:51:24:64:
                    97:0e:34:e1:11:70:40:e0:b5:9b:e7:4b:11:87:6d:
                    d1:9c:55:a6:bc:94:51:b4:84:8f:e2:20:ca:e7:e7:
                    0d:0e:ba:44:cb:4f:89:1d:3d:86:f2:6f:88:18:70:
                    87:4f:0b:73:53:73:c1:fd:b6:15:68:1b:9f:ea:3e:
                    75:22:42:39:28:87:b2:87:5e:c0:b5:ba:89:7f:84:
                    49:14:dd:e2:91:f3:a0:c7:85:0e:ed:2a:c7:33:3c:
                    61:36:ad:f8:5f:75:e9:bf:02:29:f4:7c:bc:fd:49:
                    41:81:a4:f6:f0:25:dc:8f:f8:91:74:fc:2c:39:06:
                    ec:34:d0:a4:3f:1d:22:c4:85:55:86:9d:a9:fb:43:
                    11:93:78:82:3c:30:e8:01:ea:29:16:02:dd:f5:8c:
                    3d:82:fa:bf:8b:b0:b7:51:ba:95:66:c7:79:a0:2a:
                    6b:e3:e3:67:77:c5:0c:d0:db:00:c1:b9:bd:9c:5d:
                    8f:1d:aa:58:20:81:8c:a3:bb:39:a6:a5:e6:a5:3d:
                    c2:de:1f:ec:55:10:60:b4:93:c7:6e:5d:57:bc:07:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AC:28:8D:9B:DA:EC:B3:5E:B4:B6:70:71:03:AD:F2:B7:BC:1D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4eec6853-240c-3225-909a-b2c6a1b55a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.210.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:76:11:9e:27:b3:6a:1d:32:86:55:4a:b1:37:27:e8:a7:ed:
         f8:71:85:f3:c5:05:f7:84:1a:ce:09:cd:2c:ef:8f:ee:a6:61:
         55:ae:09:8d:20:3e:5a:53:78:59:c9:d9:60:c2:60:4a:96:6e:
         c6:c3:c4:31:de:51:59:43:ba:23:39:66:20:fc:00:bc:c9:a2:
         6c:ad:51:98:c6:f6:21:1e:d3:0f:26:0c:53:9f:4c:0e:e3:c1:
         8d:01:8d:6b:ad:8c:bd:33:08:b0:da:d6:b1:53:3b:91:67:67:
         cb:a0:31:6c:c9:28:35:ca:bb:9f:f1:b3:07:af:fe:35:76:f3:
         03:87:0b:8e:d8:8b:cf:41:94:ae:bc:65:1b:6f:69:2b:f2:11:
         78:7f:f8:9b:00:13:8d:4e:cc:a3:7c:09:78:17:07:a9:ed:9d:
         b5:97:02:bd:f0:29:ba:cc:1a:3d:c5:63:d4:22:84:d7:93:69:
         76:ff:16:f7:44:4b:18:d6:03:fe:c2:45:4a:9f:ab:cd:b2:f4:
         6d:2e:b0:90:5c:67:de:3d:8b:58:f7:0b:db:85:c2:98:f2:65:
         bb:89:32:01:1e:85:b5:d9:a9:10:21:bf:c1:b0:18:e1:71:f8:
         89:7a:b3:e6:21:92:d6:94:5b:57:0a:e0:e3:a2:4a:42:eb:01:
         bf:a9:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:01 2026 by rpki-client