Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1db18e44-b8da-3ee1-8e5c-41be390ccef1.roa
File:                     1db18e44-b8da-3ee1-8e5c-41be390ccef1.roa (raw, json)
Hash identifier:          qFaJvIlgh8Nv63cg4BBvKFUtgTT+xbNXVqvk6sHj2Lw=
Subject key identifier:   0E:96:06:31:36:63:EC:4B:04:B4:05:80:28:34:F9:39:9E:EE:AD:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4986175236D1EDB05BC394A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1db18e44-b8da-3ee1-8e5c-41be390ccef1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.225.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:17:52:36:d1:ed:b0:5b:c3:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4fac46df-06d1-4474-ba02-42f28ac9e10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:ff:db:3d:97:ae:cd:41:08:88:d1:9b:85:
                    31:04:1f:ac:47:23:5e:bf:ab:ef:e8:ce:1b:87:49:
                    bd:11:ef:9e:15:90:3a:8b:ca:79:3b:a8:21:f5:88:
                    67:10:1c:0c:54:a2:c0:2a:2e:7b:f8:6d:3d:d5:9a:
                    d1:98:fe:9e:1b:be:e0:4f:df:18:1a:80:ec:62:0d:
                    38:4d:2b:84:06:77:e9:7f:a2:6a:38:67:6d:09:95:
                    b5:30:0f:49:7c:af:44:0a:89:b8:32:36:13:60:75:
                    1c:ae:01:85:41:95:a4:71:0b:c6:44:09:86:cf:98:
                    6d:9c:ac:22:5b:03:df:98:81:89:1d:ef:ef:79:7a:
                    d4:8e:b4:06:90:e8:3c:74:8c:4c:f0:35:d8:bc:39:
                    bd:45:26:e2:dd:1a:ce:25:2c:63:5b:e5:b8:95:91:
                    91:2c:7d:f2:ed:f0:54:66:76:d4:8f:a6:2c:d3:98:
                    db:aa:59:c7:4a:78:45:70:da:4e:94:32:e8:5a:7a:
                    da:fd:b8:a5:c4:58:e9:a2:94:d6:9f:c3:76:bc:31:
                    e8:08:5b:50:8b:d4:41:59:57:6d:7f:f8:74:ad:a9:
                    b2:62:4b:04:18:7b:d6:fd:0c:07:83:19:b9:ba:dd:
                    0a:bf:ee:38:f8:b6:07:81:04:4c:a7:83:74:79:ba:
                    34:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:96:06:31:36:63:EC:4B:04:B4:05:80:28:34:F9:39:9E:EE:AD:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1db18e44-b8da-3ee1-8e5c-41be390ccef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.225.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:98:50:88:44:1e:ad:26:e1:dd:3f:c0:07:60:80:0b:2e:48:
         eb:ef:f2:30:b0:6c:0d:9c:da:f3:fd:3a:33:e9:11:c1:35:8a:
         50:98:78:8c:1d:4b:10:7b:e1:aa:75:42:a3:c7:75:2d:53:ed:
         52:d6:77:69:d7:60:1d:62:09:41:9a:31:58:af:a6:fc:78:21:
         f6:84:fa:80:da:f0:20:7d:8e:60:b3:41:e8:79:da:c5:a4:00:
         0c:8b:dc:17:25:8e:6b:fe:38:28:10:0c:70:7d:9c:6c:bc:08:
         87:ac:8c:c9:9d:71:5d:83:35:13:1f:4d:b2:8e:62:20:89:60:
         a6:b5:4d:c4:59:07:f4:50:62:f0:2b:91:da:a0:bd:b3:63:f2:
         97:91:8e:05:47:36:bc:3d:5e:2f:ca:1c:5d:ac:6e:64:2f:eb:
         96:d7:49:37:6d:43:b4:ec:93:6b:37:ca:4f:35:ab:a1:a6:2d:
         3d:2b:4e:41:c0:2d:55:9e:78:b3:13:70:c5:41:8c:d7:86:bd:
         1b:bb:82:a9:1e:f7:14:8a:f9:a2:e4:a4:ac:49:a3:79:fa:7d:
         19:76:4c:c6:59:48:f1:14:3d:e0:da:67:29:09:1d:7f:58:7d:
         57:f3:59:4c:86:ee:46:80:1d:2e:4f:29:89:da:1a:63:be:24:
         12:55:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:41:00 2026 by rpki-client