Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0e3a953-03b3-33bf-98e7-8f708fac21f5.roa
File:                     a0e3a953-03b3-33bf-98e7-8f708fac21f5.roa (raw, json)
Hash identifier:          HsG/t+mc/Q/i4weIAyftietHIYQgyZhMOE4yWuesq4Q=
Subject key identifier:   27:EA:90:CB:E7:29:9B:5A:A6:FA:13:24:AF:8D:61:D5:CD:D3:B7:72
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F46A7E013F75764C96560ED20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0e3a953-03b3-33bf-98e7-8f708fac21f5.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.221.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e0:13:f7:57:64:c9:65:60:ed:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=b4f3ff02-5baa-4177-8de6-a0d791d2d23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3b:37:c7:c4:a4:12:c9:20:99:65:3c:92:1a:
                    db:26:04:76:5c:6f:0c:9b:87:22:b1:3d:9c:5d:85:
                    5a:0c:8a:c4:d7:02:23:56:b7:d6:78:be:c5:8c:28:
                    7b:77:8d:47:0a:78:47:9f:4a:fc:c6:c8:cf:0d:4b:
                    e5:b8:35:1a:ec:bd:a3:ee:df:1a:63:2d:76:2f:d1:
                    cc:21:1b:8f:34:01:e4:a6:15:ce:06:7b:c3:9c:cc:
                    c9:69:a6:87:93:c9:47:3c:40:5e:99:95:c8:10:d5:
                    aa:df:f1:ff:73:11:7a:9d:df:cc:e0:b0:77:54:dc:
                    b0:32:7e:8d:97:68:41:db:7e:4b:19:99:64:d0:4e:
                    72:65:88:c9:db:0c:46:5a:73:15:95:59:c7:95:38:
                    85:5b:e9:39:d7:3d:e4:81:d8:95:8a:e1:fa:da:2c:
                    5d:76:b3:de:7f:4c:62:ef:72:2c:5c:e3:26:41:9d:
                    df:8a:df:86:e0:78:e4:dd:5f:74:05:e4:59:7b:a2:
                    aa:99:7f:c3:50:5f:08:ac:a8:9c:4f:20:90:d0:23:
                    5b:f8:49:32:82:c5:4a:7b:d2:f6:f0:8a:59:97:7b:
                    34:ec:cf:5b:53:43:4b:1e:85:d8:c2:90:53:84:4b:
                    06:5b:58:a1:cf:52:86:2d:b5:4a:9d:52:eb:e3:ae:
                    ac:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EA:90:CB:E7:29:9B:5A:A6:FA:13:24:AF:8D:61:D5:CD:D3:B7:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0e3a953-03b3-33bf-98e7-8f708fac21f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.221.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8b:ce:67:c3:2f:57:3b:ac:07:25:b6:14:3f:45:ee:dd:93:
         79:6b:f0:50:53:1a:15:cd:3e:3d:a0:1c:27:8c:63:fd:bf:44:
         f1:4e:a2:9b:35:27:d1:02:83:aa:28:62:90:6f:45:20:7f:e3:
         76:5b:3c:99:e4:c1:c2:00:a7:90:80:1b:8e:a9:aa:21:d3:37:
         20:d9:61:79:b3:36:a1:7d:35:90:6c:10:db:de:f4:d6:c8:3a:
         f8:93:b8:e7:ea:de:f5:c7:fd:b3:bf:01:b7:38:c5:a0:e8:0e:
         b7:95:5a:5f:14:b5:7d:17:09:22:ce:99:79:9f:81:e1:61:56:
         ac:cc:a6:4e:18:01:9b:1e:aa:42:6f:58:e5:ac:73:d8:ca:8b:
         ad:21:ae:bc:ec:e7:af:9a:3a:be:c5:b1:ea:78:36:32:45:1e:
         cb:df:b1:60:f0:5a:2f:04:55:dc:9e:0d:a6:e4:7c:15:cd:ff:
         6a:b1:d2:bc:bd:38:ee:43:41:2c:3a:cd:09:7d:9a:d6:e8:f2:
         85:f9:ae:44:89:68:b7:c8:7d:0b:8d:d8:9b:c3:d1:a8:76:24:
         b1:eb:89:5f:62:dd:6b:3f:8c:89:9d:8e:cc:75:d3:59:6c:58:
         7a:4f:79:14:4b:76:6e:57:89:49:4e:08:ca:a7:25:89:63:2e:
         02:f1:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:52:30 2026 by rpki-client