Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1543183-aaab-3e73-b964-515f06c3beb0.roa
File:                     c1543183-aaab-3e73-b964-515f06c3beb0.roa (raw, json)
Hash identifier:          yjSC8A4Tu3kmpYa/xg9EsVE5MXcHYgVoIv+5dXchBfo=
Subject key identifier:   00:58:E2:B3:DD:EE:1C:32:50:63:18:4B:FA:78:A8:3E:F2:0E:2E:9B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4972CC7560DF7F9B6D7AB200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1543183-aaab-3e73-b964-515f06c3beb0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.235.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:cc:75:60:df:7f:9b:6d:7a:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3837923f-2eaf-426a-8d3c-7b90d46d169c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:be:ae:cb:02:80:41:a7:9c:0c:44:85:34:81:
                    09:df:32:9f:7e:b5:44:d3:4f:07:aa:b1:1e:61:6d:
                    ef:ba:45:ff:7b:32:9c:10:0e:fb:3b:53:e6:74:eb:
                    a7:d2:54:8d:56:8d:f6:07:7c:f5:d5:51:c3:c4:e7:
                    dc:ae:c8:c4:65:82:33:80:2e:dc:e0:74:ea:1f:67:
                    df:8e:cd:02:5c:4a:7e:fc:57:24:b8:92:3e:f9:9e:
                    80:85:6a:b8:4f:d4:1a:8e:2e:eb:06:dc:56:78:bd:
                    dd:05:89:2d:7e:41:75:d7:50:23:a3:64:74:6f:5c:
                    ad:0e:2f:49:48:af:e0:45:f9:1b:0f:b3:49:ba:ab:
                    77:97:1d:f4:e5:7d:2e:a8:73:cd:1a:68:b4:83:a3:
                    d4:61:a3:d1:de:e0:fd:65:ee:d4:59:aa:82:1e:6f:
                    c1:1d:ee:0d:2a:19:74:b2:fc:1b:0b:7f:32:aa:80:
                    da:cf:2d:4d:09:29:4e:b3:02:79:e7:c4:9c:d2:6d:
                    67:fc:d8:d2:06:aa:f4:d2:1e:58:2a:08:a3:84:50:
                    e5:51:c9:f3:11:b6:2c:a5:a6:06:a2:72:75:63:44:
                    a0:2b:9c:51:0a:76:7c:82:95:8e:33:c3:a4:a4:a9:
                    24:d9:3c:3d:d6:e0:d4:cf:2f:d1:2c:65:71:bc:59:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:58:E2:B3:DD:EE:1C:32:50:63:18:4B:FA:78:A8:3E:F2:0E:2E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1543183-aaab-3e73-b964-515f06c3beb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:3e:b1:cd:02:db:95:12:d5:98:29:6d:c9:bd:08:f1:68:bb:
         75:09:ac:63:e4:34:ba:fb:37:20:58:bb:28:55:ad:d5:a3:dd:
         8a:06:f6:ac:46:cf:3d:d3:ba:30:42:74:fe:2e:db:d9:f0:86:
         e4:d8:79:0c:44:a9:e2:98:5e:72:ab:d0:17:0a:b6:3b:69:ac:
         a5:08:28:58:d2:1d:72:2f:58:41:b4:54:54:17:d9:17:d8:b5:
         c4:5e:3f:a2:48:b4:1c:8c:40:fa:5d:02:0a:c6:b8:75:d9:ee:
         7d:8f:ef:13:91:f8:93:dd:bf:f8:59:35:68:47:2b:b6:af:f1:
         1a:43:c0:31:1c:d3:6c:16:b9:1b:cf:c5:79:a8:e1:a8:c4:46:
         b1:f1:fd:a3:3b:a2:ad:f2:bf:12:cd:9b:c9:d1:47:66:5f:9c:
         a1:b9:be:30:56:eb:58:c7:d6:07:17:36:c2:50:6d:22:54:fd:
         c2:55:db:81:41:f4:b3:40:07:3c:c0:0a:09:8b:10:a8:10:78:
         28:53:0d:46:d1:bb:3c:db:7f:8f:17:4c:a0:8a:3a:98:49:71:
         39:96:ec:84:4f:24:ce:4a:c7:5e:b2:ff:e3:4c:0f:3b:6c:ae:
         42:8c:b4:c2:86:b4:f2:ca:c3:16:a8:b0:cd:f8:e9:9b:e2:77:
         2e:f3:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:44:41 2026 by rpki-client