Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/604df5f7-5724-315e-b330-2e9868265adb.roa
File:                     604df5f7-5724-315e-b330-2e9868265adb.roa (raw, json)
Hash identifier:          W1fwHXe8W35BCZVw7KSxowM4eyEB/NPmIpTn24X81BQ=
Subject key identifier:   78:2D:B1:16:23:E7:41:72:6D:E7:D2:D2:10:C7:C7:3F:3C:E7:96:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF71090DF6ECA9C4FF9B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/604df5f7-5724-315e-b330-2e9868265adb.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.211.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:71:09:0d:f6:ec:a9:c4:ff:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=274a96ba-dbc8-49b6-af6d-0252ffa46dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:e9:b3:bc:fe:c5:7a:b0:49:90:e6:0a:26:
                    ab:72:cc:2b:f9:24:bd:39:9e:67:3a:0c:59:78:a0:
                    6c:d3:e4:c9:51:77:1c:64:52:0d:5b:e1:0b:77:09:
                    bd:b8:61:1c:b0:c9:64:c9:4e:91:e6:7f:ea:37:47:
                    5d:e3:ad:1e:ab:41:37:57:4a:f1:82:80:f4:77:c2:
                    80:74:14:31:70:c3:f5:6f:06:ee:85:1e:d5:fe:38:
                    31:b7:82:9c:ea:b5:ae:cf:69:bf:60:65:30:21:11:
                    68:b4:17:6a:23:bb:8d:e7:0a:3b:3b:1c:ab:0b:bf:
                    d2:ef:f5:66:0d:94:e6:af:d6:f6:38:a8:43:fe:2d:
                    81:6b:a8:92:ce:ca:af:3f:28:ec:0c:58:3c:33:8e:
                    23:35:4b:1d:31:b6:2f:be:75:a6:13:9c:49:a7:14:
                    ec:25:6e:6e:05:ed:c4:52:af:1c:12:05:c0:70:a9:
                    e4:8c:55:54:66:66:47:33:ee:5e:5a:3e:7b:f3:c1:
                    d0:0e:25:1f:9d:b4:37:36:43:58:d9:13:80:19:13:
                    3f:88:8b:ca:dd:6c:91:65:b7:fe:6b:3f:79:90:26:
                    67:38:b9:f9:64:15:f3:97:ab:d9:d6:88:cb:18:ef:
                    7e:94:c1:e9:c5:0f:c3:77:e8:bc:18:13:f3:df:e5:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2D:B1:16:23:E7:41:72:6D:E7:D2:D2:10:C7:C7:3F:3C:E7:96:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/604df5f7-5724-315e-b330-2e9868265adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.211.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:6c:4f:d1:ff:e1:25:72:36:c8:3a:19:3a:7c:e5:72:17:86:
         8d:fd:c9:84:9b:33:bc:33:f1:c3:41:3a:a4:ef:0a:c8:a4:ff:
         95:98:0f:18:21:33:68:85:b0:ff:bb:dd:f2:89:e2:58:b0:07:
         92:e5:ef:81:aa:f9:0c:b1:c7:9c:50:09:a9:c6:2b:5c:8d:9c:
         62:9a:db:63:9f:7d:8b:10:05:aa:22:06:d7:92:36:59:ea:ed:
         72:1b:cd:d7:e8:da:fd:e4:6d:dc:08:ef:79:e7:48:35:9b:4f:
         86:28:4c:7f:3b:9b:ed:59:07:38:01:23:1f:da:e4:cb:35:5b:
         0f:3f:44:f1:3b:55:e8:20:d2:aa:e3:d2:6b:f0:ec:4e:6a:d1:
         8c:2d:11:aa:33:c8:3d:a1:0f:47:75:f1:fe:0d:ce:6a:a7:79:
         09:6e:13:b0:e7:c1:a4:61:14:f1:8f:9d:c3:99:68:da:eb:f6:
         10:47:a5:27:28:fe:64:23:06:52:bd:f1:fc:d4:f8:46:b0:8e:
         00:c2:7b:ba:5e:9f:d9:92:e3:8c:16:0b:4b:ce:a5:91:43:34:
         88:72:e4:9a:11:32:0c:27:d2:4c:12:ee:e1:76:5d:83:05:1e:
         a3:d6:1f:f7:c6:c4:77:aa:e1:24:9e:76:6e:ca:5b:1b:a7:7c:
         2d:ce:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:57:31 2026 by rpki-client