Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ae6e8d1-dcd6-35f6-bd26-d340ded5be13.roa
File:                     6ae6e8d1-dcd6-35f6-bd26-d340ded5be13.roa (raw, json)
Hash identifier:          qaYdil5HQMJDdWCYBJwyfNJtcWu5FWCOry8A4vXOMBc=
Subject key identifier:   87:91:67:80:02:A6:1A:99:87:65:81:2E:53:A6:90:2D:AC:A0:DF:EA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D300A33DE990FF12B61E90320
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ae6e8d1-dcd6-35f6-bd26-d340ded5be13.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        174.233.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:33:de:99:0f:f1:2b:61:e9:03:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=a7545bb1-1b06-416f-8a7d-f89487a3e6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:44:cc:17:93:74:2d:b6:ee:f7:ca:56:71:
                    6d:bf:0d:92:d8:96:46:de:d0:ab:69:b5:93:ad:23:
                    d4:49:be:16:ab:dd:2b:c3:8c:be:77:ee:3b:f6:88:
                    47:8e:d6:a1:f6:49:48:a2:8d:3b:bc:b0:10:18:4d:
                    a5:96:9b:e4:02:da:18:6c:a7:6a:91:7c:06:e8:c0:
                    ec:57:4c:3c:aa:57:b5:a3:91:58:b9:61:0d:73:b6:
                    14:4c:34:d7:61:5c:65:80:9b:18:a2:e3:c2:76:a4:
                    ec:d5:13:27:e0:75:db:b8:91:c5:fc:82:ff:13:ea:
                    da:55:63:de:52:f1:a6:4d:e2:de:7c:5f:3c:d9:6e:
                    a1:b2:f5:d8:51:63:c4:60:5b:92:2c:39:78:1a:d1:
                    9d:32:8a:90:b8:b2:7e:aa:f6:6e:3e:02:e1:39:f4:
                    78:fd:0e:76:5e:a9:ea:99:94:54:d0:06:18:74:8a:
                    e4:67:e5:74:c9:90:09:d9:c4:e1:69:30:b3:62:eb:
                    02:2c:50:7c:fb:1a:63:4a:3b:ae:87:45:11:81:60:
                    3e:81:70:21:40:b0:83:8c:c4:75:fd:82:9d:f5:dc:
                    89:56:b3:ef:ac:2a:3b:b1:6d:6f:80:ee:55:cf:65:
                    82:0f:41:92:b2:92:b4:f4:2e:1e:4a:d2:e2:33:bd:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:91:67:80:02:A6:1A:99:87:65:81:2E:53:A6:90:2D:AC:A0:DF:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ae6e8d1-dcd6-35f6-bd26-d340ded5be13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.233.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:54:3c:89:b6:00:1e:5f:76:dd:5b:2f:af:2c:a5:88:a8:57:
         9b:ea:1f:6f:11:31:2d:a4:43:90:27:05:67:2a:9a:67:e1:9a:
         b2:1d:7b:da:ec:34:87:d9:9b:49:53:de:7f:d8:c7:ce:fa:06:
         a5:16:c5:bd:ac:ab:5b:78:c4:d0:41:dd:e1:79:ac:33:36:27:
         ba:2e:f2:91:49:4e:3f:32:e8:1b:b6:c8:47:7c:54:0a:d3:44:
         ca:e6:41:00:2b:cd:0c:f1:d1:91:07:01:41:4d:4a:6b:94:09:
         36:49:b7:e0:14:ed:74:9d:ca:9e:9a:69:e9:49:73:ea:b2:3f:
         79:a1:a3:fe:6f:39:15:ba:d6:78:93:4b:16:2f:41:0a:ba:67:
         51:ba:77:3e:63:f5:13:30:78:f1:80:b7:51:03:a2:e4:87:89:
         74:b0:51:e9:74:53:03:b9:45:bc:77:f2:a4:13:86:67:b9:81:
         91:fd:a3:0b:0f:8a:9f:42:48:be:d9:d3:b3:38:ff:5e:6a:66:
         2e:9a:57:eb:11:78:8a:ed:60:b7:df:fb:e1:02:03:e7:be:d2:
         42:55:07:be:c1:6a:f5:a9:cf:44:e1:ca:11:1c:a4:fc:8d:53:
         ff:42:b0:9c:e0:f8:06:48:c9:22:35:b0:c9:cd:72:f4:c3:f5:
         c1:0e:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:51:11 2026 by rpki-client