Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ac0ca983-02e9-3af0-9e97-e3f6cda4f11a.roa
File:                     ac0ca983-02e9-3af0-9e97-e3f6cda4f11a.roa (raw, json)
Hash identifier:          FBzBYFcli5ZI9HmZxrlHTBVK6NqKgOfXCrTz2sFsnFQ=
Subject key identifier:   1E:9C:9B:07:C6:25:63:1B:02:BA:7B:E5:CD:4A:88:6F:32:37:6B:65
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC23EA42809D4050FD02D7D80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ac0ca983-02e9-3af0-9e97-e3f6cda4f11a.roa
Signing time:             Fri 07 Aug 2026 14:41:33 +0000
ROA not before:           Fri 07 Aug 2026 14:41:33 +0000
ROA not after:            Thu 05 Nov 2026 15:41:33 +0000
asID:                     395954
IP address blocks:        173.234.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:3e:a4:28:09:d4:05:0f:d0:2d:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  7 14:41:33 2026 GMT
            Not After : Nov  5 15:41:33 2026 GMT
        Subject: CN=e740f177-e352-4fb6-922f-06df695d7fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:c4:e7:06:ed:1f:39:ed:4c:dd:f8:eb:be:
                    99:89:49:f6:5d:97:f6:34:50:48:20:12:b7:25:9b:
                    45:48:a3:88:cb:c1:8d:b0:14:58:8a:42:82:87:2e:
                    78:6a:d9:b9:37:10:8e:2d:e0:c5:6f:8e:06:81:b7:
                    34:f7:7f:35:b0:dd:1b:99:30:49:9f:d7:37:a4:84:
                    34:1a:b6:2f:76:03:2e:bf:8a:b6:e9:00:49:47:f5:
                    da:93:cf:cb:25:ca:c2:a8:9f:79:e2:63:5b:98:42:
                    f3:a9:ba:12:cc:66:33:f3:86:6c:27:ba:d4:e5:58:
                    8c:d0:89:ee:0f:d4:f4:da:00:b4:3d:60:68:d8:11:
                    85:07:c2:78:9d:cf:69:3b:58:b9:3e:da:a6:70:a7:
                    79:01:ea:17:13:31:65:14:98:72:27:b3:04:0a:9f:
                    08:12:f7:81:67:3c:c3:23:b0:ba:4c:e2:a1:f9:d9:
                    df:7f:49:64:3a:59:18:fa:84:0b:68:d6:ea:1d:34:
                    f5:f0:43:01:f6:84:81:5c:6c:dd:04:83:35:74:c7:
                    a6:60:c2:42:98:d3:25:a8:9e:88:14:ae:45:20:22:
                    2a:b6:5a:59:31:8d:db:80:eb:1b:fa:70:0d:02:e5:
                    cb:6f:47:3c:a0:59:4a:02:32:3a:88:06:95:19:0d:
                    6c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:9B:07:C6:25:63:1B:02:BA:7B:E5:CD:4A:88:6F:32:37:6B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ac0ca983-02e9-3af0-9e97-e3f6cda4f11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.234.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d1:d1:7c:c9:e8:79:dd:8b:84:b7:b6:aa:35:7a:89:d9:9e:
         0b:18:a5:db:cd:9c:e7:9d:b0:2d:22:a2:3c:64:a8:0b:a0:99:
         a5:13:ad:20:ef:40:3f:1a:af:2b:d6:91:32:e5:e2:d0:fb:98:
         32:f7:a8:b6:13:e8:26:48:af:ed:68:3d:f5:68:38:a3:de:c1:
         f2:b1:21:96:db:3d:ab:5a:b5:c6:b1:d2:08:e0:cc:96:2e:43:
         f5:11:6d:b3:62:b6:46:16:31:ed:20:93:37:bb:fc:c7:c6:ad:
         db:7c:2c:75:d9:3d:cd:eb:99:f8:f7:e8:7c:95:cb:b7:87:de:
         6d:19:f7:dc:5d:9c:b2:9c:e5:ae:00:9f:6e:5f:fe:68:5a:4b:
         4d:01:3e:22:16:4f:52:80:34:c7:fc:6a:29:37:53:90:79:25:
         71:72:e9:84:b9:d5:05:aa:cb:3e:7d:82:3e:a5:f6:9a:92:ef:
         e7:30:a7:dc:25:24:bf:0d:6c:7e:e4:00:f4:d2:37:cc:7a:a7:
         93:34:7f:c3:0c:9e:1c:64:1f:cd:86:be:b2:79:e1:82:97:b8:
         67:52:c8:b8:2a:64:47:e2:6e:2e:61:15:aa:0b:10:70:9f:24:
         42:76:15:65:4d:2d:ec:c7:58:1a:a1:d2:78:85:83:8e:e8:fe:
         c5:d5:b9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:04:14 2026 by rpki-client