Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bda474f-94c1-3d4d-a601-21104437cd1e.roa
File:                     9bda474f-94c1-3d4d-a601-21104437cd1e.roa (raw, json)
Hash identifier:          1DOlSiZl2dBKZ2U7FtUFX/Ov32Cb8t9Y/BA71XbNlMk=
Subject key identifier:   17:1A:99:4D:72:EB:86:AC:8E:2D:BA:50:54:05:42:7D:F5:23:2A:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF7CE32667801681696900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bda474f-94c1-3d4d-a601-21104437cd1e.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.237.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:7c:e3:26:67:80:16:81:69:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=33a6fb1b-d4ef-4be3-a762-2a1a1f3a6da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5b:16:ec:f3:16:e4:73:7e:22:ec:75:b4:87:
                    c9:8b:c6:f8:5e:06:f3:ef:1a:e9:e1:00:18:6c:46:
                    00:16:09:db:73:1e:ff:93:bf:72:a0:2e:90:ca:31:
                    6f:bd:79:63:28:a1:8c:e3:2c:14:a6:36:bf:2d:f3:
                    37:a5:3c:3f:9b:86:25:cb:70:76:0f:fc:9b:1c:86:
                    e1:4f:d3:61:ac:72:9f:13:69:bd:f5:79:9b:d3:b8:
                    74:90:0c:8b:fc:7f:38:af:d1:ec:77:96:d6:84:90:
                    ea:d0:ec:7a:ee:b0:96:76:3c:f5:3b:51:9b:ae:00:
                    99:f8:2c:22:30:2c:4a:49:8e:b7:1c:6c:ca:6e:19:
                    54:9e:30:c5:f8:a1:17:39:3b:77:c8:18:99:24:9c:
                    9d:75:51:a7:81:54:01:a7:43:e1:87:09:62:77:ce:
                    4b:9b:b7:ad:73:ae:ef:de:b9:c1:5f:c1:76:b9:f5:
                    cf:59:d9:bd:fd:ef:6a:52:62:95:fe:87:28:cf:57:
                    be:de:28:f9:d8:ac:e2:9b:92:ef:18:84:14:99:ea:
                    4c:33:ea:31:90:d0:f9:8d:bd:6e:18:c2:e1:01:67:
                    fb:09:b1:71:b1:a8:cd:81:c1:1a:08:0a:17:9b:7c:
                    9e:d8:b6:af:0a:23:f3:3a:b8:47:c8:ce:65:32:77:
                    4f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1A:99:4D:72:EB:86:AC:8E:2D:BA:50:54:05:42:7D:F5:23:2A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9bda474f-94c1-3d4d-a601-21104437cd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.237.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:28:19:7c:43:30:79:ba:86:87:0d:24:77:f1:6d:72:d3:e9:
         ae:80:d0:a3:18:3d:2e:7b:0a:f9:f5:2c:0a:25:7d:f3:0f:5c:
         1e:0e:8d:e6:b9:82:2e:f3:b4:06:ef:da:84:d8:45:01:6a:ab:
         ff:e0:3c:1d:a2:35:cc:0c:8c:9a:0c:3a:12:d9:62:d6:4b:fd:
         93:5f:28:27:89:3b:48:92:43:05:3e:51:14:22:32:ff:02:7d:
         67:10:83:3e:57:73:2e:88:50:4a:ae:43:9b:97:c4:74:80:6a:
         95:1e:04:a8:d9:31:80:05:4b:8a:6e:81:24:a3:1b:6f:e8:f6:
         92:42:73:89:c8:2f:d4:90:3a:dc:ee:85:74:6e:fc:16:a4:ae:
         4d:00:5f:1f:c8:d2:2b:f7:71:c2:5f:db:c0:52:a0:60:d6:08:
         85:0c:50:10:30:1e:1f:b2:36:13:7e:04:ba:1a:a2:ee:16:0f:
         67:5e:b3:59:d1:d0:52:bf:45:66:ae:44:e4:d3:23:6a:a4:b9:
         15:7b:1a:d3:12:c7:2d:9e:e7:c3:86:af:56:70:01:e8:ee:77:
         e1:16:70:31:4a:48:e2:09:8e:41:50:b8:fc:b2:1e:b4:c2:c9:
         1c:82:d5:bd:2a:aa:1f:3b:80:9d:19:c4:4c:9a:f7:b6:51:64:
         85:6f:fb:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr3zjJmeAFoFpaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
MzNhNmZiMWItZDRlZi00YmUzLWE3NjItMmExYTFmM2E2ZGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFsW7PMW5HN+Iux1tIfJi8b4Xgbz7xrp4QAY
bEYAFgnbcx7/k79yoC6QyjFvvXljKKGM4ywUpja/LfM3pTw/m4Yly3B2D/ybHIbh
T9NhrHKfE2m99Xmb07h0kAyL/H84r9Hsd5bWhJDq0Ox67rCWdjz1O1GbrgCZ+Cwi
MCxKSY63HGzKbhlUnjDF+KEXOTt3yBiZJJyddVGngVQBp0Phhwlid85Lm7etc67v
3rnBX8F2ufXPWdm9/e9qUmKV/ocoz1e+3ij52Kzim5LvGIQUmepMM+oxkND5jb1u
GMLhAWf7CbFxsajNgcEaCAoXm3ye2LavCiPzOrhHyM5lMndP2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcamU1y64asji26UFQFQn31Iyp1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWJkYTQ3NGYtOTRjMS0z
ZDRkLWE2MDEtMjExMDQ0MzdjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEru3QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEEoGXxDMHm6hocNJHfxbXLT6a6A0KMYPS57Cvn1LAolffMPXB4Ojea5
gi7ztAbv2oTYRQFqq//gPB2iNcwMjJoMOhLZYtZL/ZNfKCeJO0iSQwU+URQiMv8C
fWcQgz5Xcy6IUEquQ5uXxHSAapUeBKjZMYAFS4pugSSjG2/o9pJCc4nIL9SQOtzu
hXRu/Bakrk0AXx/I0iv3ccJf28BSoGDWCIUMUBAwHh+yNhN+BLoaou4WD2des1nR
0FK/RWauROTTI2qkuRV7GtMSxy2e58OGr1ZwAejud+EWcDFKSOIJjkFQuPyyHrTC
yRyC1b0qqh87gJ0ZxEya97ZRZIVv+9o=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:39 2026 by rpki-client