Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8943d6c5-5c72-3021-a2a9-b498ce442ae1.roa
File:                     8943d6c5-5c72-3021-a2a9-b498ce442ae1.roa (raw, json)
Hash identifier:          38i+G1huX7ZPrznhZfSPkZ8MrFENh2toeh054npeZ/A=
Subject key identifier:   7A:B4:AE:06:C6:96:20:2A:07:D9:24:E9:66:F7:EB:75:12:43:8A:97
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C4FFC9F599A16F447B5980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8943d6c5-5c72-3021-a2a9-b498ce442ae1.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.247.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:ff:c9:f5:99:a1:6f:44:7b:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=d8c11a94-df3e-43e4-9af2-fb55a1a477bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:a3:46:8c:0e:28:bc:fe:24:39:6d:8d:46:
                    c8:d9:86:1c:8f:bd:4f:88:cc:1d:5d:12:74:9c:91:
                    9a:62:84:60:0a:4f:40:88:a2:48:1b:0b:ad:d6:71:
                    50:11:0f:42:f4:39:e0:a0:ff:fb:16:a5:0f:b8:2f:
                    30:08:a8:c6:17:b8:8e:5e:71:95:ef:e5:99:d8:eb:
                    97:f7:c0:8a:ba:a9:19:17:38:59:c6:5d:9d:6d:67:
                    0b:43:5b:76:23:89:d6:6b:7f:89:2d:05:44:d5:9a:
                    89:e6:7b:22:34:36:68:b7:25:82:0c:e9:a3:b2:8c:
                    89:95:9e:6f:24:70:80:40:af:c8:03:0f:1f:33:34:
                    1e:1d:c5:32:7d:0f:88:be:43:cd:b4:3d:ad:b0:4b:
                    e9:fa:2c:4f:af:f3:e9:16:bd:d4:71:e6:5c:17:9d:
                    de:aa:66:3e:e0:86:09:e7:ce:cc:a3:6e:2d:0e:4a:
                    b0:6e:3c:22:95:24:f1:81:03:dd:18:74:f5:f2:93:
                    00:40:83:62:4a:2b:70:43:ec:01:51:5c:68:f7:f3:
                    da:ea:7b:54:7f:c8:9b:23:1a:c3:51:b6:13:d9:4d:
                    61:96:74:90:29:82:ef:7d:af:37:4d:19:57:ba:14:
                    aa:48:d9:4d:49:04:77:60:8d:22:10:d6:b2:37:fc:
                    75:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B4:AE:06:C6:96:20:2A:07:D9:24:E9:66:F7:EB:75:12:43:8A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8943d6c5-5c72-3021-a2a9-b498ce442ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.247.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:90:ff:5b:5d:e7:c9:37:80:03:dd:07:11:da:9b:31:2e:
         e1:7f:be:d4:11:d3:c4:fa:14:3e:3b:ba:ef:81:3b:34:99:6f:
         c7:eb:2e:df:e7:96:0f:e5:51:62:93:d0:f6:b3:59:5b:2b:0e:
         39:97:06:e0:63:98:1a:75:af:41:af:99:8c:17:76:9c:ad:85:
         00:82:ac:75:ff:da:0d:7b:d3:0a:fd:2c:f5:bb:10:9a:04:8e:
         88:80:64:d9:9b:2d:4d:2b:40:f8:7f:dc:33:b2:fe:2e:0d:cb:
         e1:ce:34:b7:a4:a9:df:f2:b1:7f:35:c6:1a:79:9c:ea:e0:27:
         f8:a8:91:ba:13:34:42:e5:70:11:a5:29:25:32:45:9e:bc:8b:
         a5:1d:eb:5e:4d:8f:26:3b:74:73:70:20:91:82:ba:ac:fc:6e:
         86:cb:ff:6e:36:e5:fe:e6:13:b0:3d:1a:6d:15:e8:70:a1:8a:
         78:18:77:1b:19:6d:e2:2d:ec:31:72:ab:37:fd:cd:0c:d1:1c:
         a5:e5:60:46:7d:9b:1c:86:f8:9e:54:67:4b:82:91:b4:cb:78:
         10:ea:a7:6a:a9:da:00:3b:76:36:1b:6b:9e:31:ad:37:0f:52:
         e0:c9:70:ab:2b:fb:46:f1:e3:53:a5:6e:94:3a:ef:b8:3e:ef:
         10:0d:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:22 2026 by rpki-client