Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5df01ada-92df-3645-b1bd-26c1f6d55e00.roa
File:                     5df01ada-92df-3645-b1bd-26c1f6d55e00.roa (raw, json)
Hash identifier:          noLmzsy6CAYmuJV+1FE8ptmL64YOYScEouT5RhUnSGA=
Subject key identifier:   51:0C:DD:26:5A:4F:9D:2C:52:55:F1:2E:C2:C2:90:FE:A1:5B:68:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF65F7786E0E8E6BA6C6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5df01ada-92df-3645-b1bd-26c1f6d55e00.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.218.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:65:f7:78:6e:0e:8e:6b:a6:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=9ac8c0d1-3800-4c63-bc90-9df6f1e14b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a2:d9:5a:78:93:88:54:f8:ab:2c:96:5e:85:
                    b4:34:05:74:c4:b8:c0:42:3e:87:18:82:6a:30:98:
                    94:1b:a5:8c:00:86:c4:91:77:13:4e:92:4e:a5:9a:
                    7b:7f:65:78:c3:7e:f4:c7:5a:b2:50:f7:48:b9:31:
                    e2:5b:4e:ea:3c:e5:f5:d2:c5:43:fd:77:98:8c:87:
                    43:ea:b4:47:6a:f7:5a:f2:63:58:56:ea:bd:f3:58:
                    8e:3f:09:ab:34:a5:6a:bb:23:03:ec:0a:08:26:03:
                    db:6b:c2:f7:73:af:fc:41:4b:c4:83:9b:cf:42:69:
                    0f:3f:9a:d0:27:e6:a1:69:e0:5a:34:48:ed:ba:6c:
                    9e:85:56:3c:86:4e:f8:ae:a0:2a:60:61:cb:5b:6f:
                    a5:21:b5:c2:41:3d:4a:06:69:72:f0:06:f8:b9:07:
                    0b:d5:77:83:48:fc:fc:5b:8f:15:97:59:fd:dd:9e:
                    be:82:4e:a7:d1:e3:ac:fe:25:e3:49:1a:11:1c:f9:
                    4a:38:50:78:41:ba:1c:3c:82:7c:d4:bd:4b:f9:03:
                    b6:6f:53:cf:aa:17:d8:41:f4:07:da:60:e8:b0:8f:
                    43:fd:cd:cf:df:c6:9b:39:b8:7b:2b:66:97:b3:15:
                    72:fc:77:e3:75:fc:46:d2:b1:64:13:72:12:8b:63:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0C:DD:26:5A:4F:9D:2C:52:55:F1:2E:C2:C2:90:FE:A1:5B:68:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5df01ada-92df-3645-b1bd-26c1f6d55e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:68:13:c9:c3:fd:f9:81:8e:ea:14:6f:fc:c6:0c:26:9a:a0:
         d0:26:7f:87:b9:df:a4:02:90:cf:00:c1:e7:3a:92:89:e6:00:
         74:a6:65:8f:64:4a:7f:ec:f8:32:8d:74:57:cb:f3:23:5a:83:
         2a:a0:b4:4d:ce:ad:33:b0:60:93:1f:6c:49:4f:c6:cd:f4:ca:
         f9:30:d6:67:bd:dc:ea:ec:34:9f:b9:a0:34:70:f7:87:e0:eb:
         1f:21:78:1c:90:28:08:b4:e6:c6:da:9b:f4:e3:6a:80:cc:3c:
         da:58:f1:64:92:00:ba:30:96:9a:13:f9:3f:74:f3:36:6a:48:
         fd:2e:59:22:ff:af:ba:92:8e:00:4c:58:5a:5e:26:1f:63:f6:
         5d:f2:25:6e:2c:3c:30:d0:5e:a7:ac:96:fa:3d:fc:73:c1:70:
         a9:4e:94:0d:0a:be:6a:2b:37:6d:c8:1c:e1:ad:cf:ba:78:cc:
         f3:8b:33:1d:c5:12:b7:88:24:c4:f1:86:a8:52:03:9f:76:56:
         f1:28:8f:10:1c:ee:bc:de:75:f4:38:50:fb:7d:0a:30:d7:93:
         d4:4c:9a:96:4d:f0:83:8d:6b:5c:ba:a0:25:13:78:90:e7:99:
         71:52:cf:04:e9:28:90:24:27:82:42:a9:5c:34:67:17:ef:1d:
         30:a7:dc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:54 2026 by rpki-client