Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2f66e88c-bd77-316f-aa2a-05628573fb4f.roa
File:                     2f66e88c-bd77-316f-aa2a-05628573fb4f.roa (raw, json)
Hash identifier:          t8ha4xzq63sl1ynVPeBTu1+IepFKBGFXjrQTyRpLaMM=
Subject key identifier:   42:B9:3D:63:71:A0:DE:BD:FC:E3:B1:DA:19:3A:E2:85:E2:05:12:FC
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5E62DC097607AE2EE271D080
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2f66e88c-bd77-316f-aa2a-05628573fb4f.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     27411
IP address blocks:        173.234.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:dc:09:76:07:ae:2e:e2:71:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=cc126c6a-2f32-426b-8c0f-825b6ba28b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b4:02:07:7e:39:5c:3a:0f:60:a4:db:34:bf:
                    61:7f:fb:3d:50:10:d8:fd:3f:8a:78:a7:49:96:7c:
                    d4:fb:62:67:29:4f:81:c5:88:fa:76:b0:90:ab:04:
                    3d:c7:10:80:30:7c:55:e8:90:ab:af:bd:84:76:2e:
                    ad:79:42:a3:ef:ad:b5:65:2b:bc:43:e1:83:d5:22:
                    18:ff:01:cf:d0:7a:20:72:86:47:3f:69:93:89:9a:
                    f9:8a:d4:b8:a5:14:00:e4:76:39:94:f9:06:f8:86:
                    f5:50:72:16:47:a0:58:35:7d:be:99:81:e5:d0:7a:
                    4c:fb:9b:70:25:df:73:83:35:a2:73:bf:8f:a3:16:
                    e0:ae:2b:97:99:7c:3b:e0:94:08:92:d1:dd:c3:2d:
                    a3:30:9d:84:54:d7:9c:02:30:7e:75:45:b4:1c:bd:
                    76:8d:d5:c8:21:2f:6b:46:4d:33:c6:1a:b1:f3:1a:
                    c3:2d:71:8a:0a:7c:5b:ef:f0:54:ae:8e:d9:54:21:
                    70:80:2e:b6:6d:66:f6:89:a1:8d:0f:ba:4d:76:34:
                    45:bb:40:86:7e:bc:af:f7:64:8b:f9:9c:e1:17:12:
                    72:9a:cc:fc:0a:01:31:99:de:b5:d5:f2:8e:c4:d3:
                    0c:4f:33:9f:45:b4:59:de:94:15:b0:9f:1c:93:87:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B9:3D:63:71:A0:DE:BD:FC:E3:B1:DA:19:3A:E2:85:E2:05:12:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2f66e88c-bd77-316f-aa2a-05628573fb4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.234.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d1:49:da:c2:0f:95:8e:a1:45:63:64:0a:b1:2f:94:4a:2b:
         a4:f6:fb:83:c4:f4:48:a5:06:3e:71:2e:b0:e7:58:9c:ac:51:
         65:a4:ed:d7:5f:60:34:2c:de:64:e0:cf:d2:01:f9:12:83:33:
         62:4d:6b:c4:ea:da:0f:5a:35:e6:49:ff:5b:be:22:c2:2a:9d:
         57:81:ab:85:5f:8b:75:a9:f9:ba:d9:fe:5d:24:fc:27:ec:8d:
         61:4d:7e:f1:c5:6d:78:2c:fc:02:8a:94:7d:0f:84:f8:cf:ad:
         91:84:7e:a1:01:6c:e5:96:44:ea:07:f0:b1:48:5c:c5:71:3e:
         31:1c:3c:24:fe:d7:59:52:60:8d:7d:09:cd:d7:a9:49:3b:71:
         09:30:49:e0:de:90:9d:6f:93:c8:10:6e:3f:c3:5a:65:a5:8f:
         67:6e:da:3f:61:fb:3c:fd:42:8c:ee:f6:72:92:48:ac:aa:a2:
         86:79:4a:1c:2c:55:87:cc:f4:40:d9:76:da:d9:00:95:01:41:
         6b:2c:59:cc:9f:f8:9f:9d:41:8e:0b:aa:5c:b2:e0:97:a3:36:
         68:1f:5a:56:11:a4:31:ad:0a:a5:de:a1:be:f2:45:5e:05:72:
         46:27:56:e8:08:dc:c5:02:4e:9d:17:b1:11:15:30:04:92:0d:
         20:54:7a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:38:43 2026 by rpki-client