Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa
File:                     39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa (raw, json)
Hash identifier:          AUnENwKrSWe9Kv11KTN3T4KSOC1ZKxLZsoJVnOEme6o=
Subject key identifier:   13:86:BA:3A:83:71:3C:C3:B4:CE:B1:40:80:EC:80:3D:05:41:2B:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F0B4F7B8FD35C82E2F340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.219.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:0b:4f:7b:8f:d3:5c:82:e2:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6c7753dc-4e11-47ab-a2d4-2291f5178636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:52:56:7d:82:a7:30:50:84:d1:12:95:a9:
                    37:df:c3:fd:db:17:f9:48:3d:0c:50:bc:8c:c4:bd:
                    01:d4:58:bd:81:62:78:22:c2:d3:79:1a:03:fe:6c:
                    9f:7e:0a:56:57:99:20:7c:25:06:60:7a:f6:8e:dc:
                    05:24:4b:a6:18:cf:30:15:4f:92:e3:2b:99:67:ee:
                    3b:10:71:00:94:68:6e:55:83:0c:83:08:1f:08:0e:
                    65:74:13:12:e6:db:e7:20:5f:6f:f9:54:eb:9f:ff:
                    75:20:ec:21:89:3a:3f:9c:92:33:38:7f:72:c6:b1:
                    74:37:d2:79:9e:53:e7:a2:2b:34:53:40:86:ab:a5:
                    2d:0b:8f:0c:0a:f6:1e:0f:3e:5d:08:3a:1e:6f:16:
                    2b:db:e7:c6:f6:17:7d:f3:df:02:69:3d:27:cd:e8:
                    07:4e:a9:5a:ef:42:82:12:c5:07:1e:b3:e7:77:33:
                    bb:dd:53:d1:7f:c6:05:c1:c5:8b:94:17:62:90:70:
                    1f:0a:a0:bf:9e:2f:cd:f4:25:3f:a3:54:3b:4d:f0:
                    b8:ad:37:bc:ef:e3:7a:b1:8b:38:f3:f4:96:ea:a0:
                    e3:e4:a0:01:1d:4c:dc:87:66:51:3a:2f:99:48:1b:
                    41:81:13:08:34:83:c7:04:31:93:21:00:9b:54:bd:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:86:BA:3A:83:71:3C:C3:B4:CE:B1:40:80:EC:80:3D:05:41:2B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c7:dc:c9:19:c0:8b:12:a4:ee:65:be:22:89:c7:75:a7:c2:
         09:6a:20:85:f9:bb:c0:96:de:97:df:9c:de:0d:d3:42:53:7c:
         84:e8:88:d2:ed:ac:4b:7f:66:92:d2:2b:df:93:79:d2:7c:7f:
         b6:ee:e6:57:13:d4:46:02:83:fd:06:81:d2:06:a6:86:d4:ca:
         e3:88:ef:96:16:cd:ba:3d:f5:98:55:c7:6a:56:93:bc:9f:ef:
         2f:f7:8f:6c:f0:3e:5a:c1:1a:4e:12:17:11:5a:20:00:6e:04:
         00:ad:96:ad:9a:fc:19:ad:c3:e8:2c:12:07:43:81:81:db:34:
         99:98:73:cd:0c:17:c5:35:9a:a4:97:6c:e4:1d:19:0b:26:6d:
         56:40:fe:02:a7:90:0e:56:1c:56:8c:8a:00:6f:5b:f3:79:f0:
         f1:a2:76:c3:bb:f8:ed:76:44:b0:0d:51:f8:6e:59:f2:9a:7e:
         70:db:e6:44:ab:39:7b:74:65:bd:af:d5:e8:b2:61:c7:7a:af:
         5f:69:f9:11:7e:e9:58:60:3f:9a:ea:5d:d1:36:a3:e2:64:df:
         60:9a:36:e3:73:9c:ce:d9:bf:19:67:55:9c:9a:fe:0c:a3:4a:
         39:0b:c5:3d:3e:1a:7f:87:99:8e:6c:5e:b6:ea:28:66:98:04:
         c3:ba:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:11:41 2026 by rpki-client