Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fddd362d-d14b-3849-a00c-b58e4108bc51.roa
File:                     fddd362d-d14b-3849-a00c-b58e4108bc51.roa (raw, json)
Hash identifier:          4B6m13uu4aiShSCa45DmYoXA6SHGgERnySfjSpjTZ50=
Subject key identifier:   60:B1:58:60:3C:F8:AB:D1:4E:58:D4:BE:3F:C5:B0:24:32:6E:02:A2
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC23F3F4AE57F1055B18CB480
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fddd362d-d14b-3849-a00c-b58e4108bc51.roa
Signing time:             Fri 07 Aug 2026 14:42:46 +0000
ROA not before:           Fri 07 Aug 2026 14:42:46 +0000
ROA not after:            Thu 05 Nov 2026 15:42:46 +0000
asID:                     395954
IP address blocks:        173.234.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:3f:3f:4a:e5:7f:10:55:b1:8c:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  7 14:42:46 2026 GMT
            Not After : Nov  5 15:42:46 2026 GMT
        Subject: CN=7da2709a-408f-4832-9497-bf79d2e132de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:4d:1b:40:4e:5e:c7:58:03:b9:3a:e3:f1:
                    ee:63:a8:1d:89:0a:97:7f:0c:01:5b:cf:a1:f0:54:
                    1a:18:50:c3:cf:99:4d:84:51:87:f9:50:aa:b8:f5:
                    12:0f:3f:cb:21:25:04:01:3f:f2:a5:6e:64:91:49:
                    c9:a7:a8:00:6b:0b:b4:55:b3:c8:81:27:c8:e4:c0:
                    bd:f2:d6:af:c7:ca:1e:a4:d2:1e:03:5a:5d:36:b9:
                    c6:ec:f3:c0:45:0f:bf:83:b6:55:79:53:89:a9:18:
                    f0:43:82:c9:92:f3:5b:7b:a5:b2:4c:bf:2f:89:5c:
                    02:fa:66:a9:8d:31:06:0b:c7:23:7d:01:6e:50:04:
                    62:38:59:c7:a7:30:05:20:49:b0:2d:1e:98:b2:8e:
                    c3:22:dd:a2:59:b0:20:59:e7:54:82:63:38:73:9c:
                    85:ca:08:42:e4:e2:51:3c:fb:b7:c0:ac:70:2d:40:
                    6a:52:0a:c0:5b:d7:03:42:a7:30:c1:a3:16:d8:29:
                    b8:6b:51:2a:d7:aa:7f:7c:d0:66:91:df:67:5a:92:
                    74:83:b8:63:8c:40:2e:52:ae:3b:43:4e:ac:5d:f7:
                    23:5c:d0:f8:4c:a1:f1:4e:e8:32:0c:ee:c7:1d:37:
                    72:9a:e1:a0:bd:70:f3:72:8b:45:a8:4d:26:a7:4c:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B1:58:60:3C:F8:AB:D1:4E:58:D4:BE:3F:C5:B0:24:32:6E:02:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/fddd362d-d14b-3849-a00c-b58e4108bc51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.234.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c5:56:25:5a:2e:65:94:3b:57:ab:3f:8f:27:a3:96:92:b6:
         94:6f:89:6e:9c:ec:bc:15:87:d6:61:cf:5c:66:2a:d0:cb:ea:
         50:2a:39:35:ff:f0:cb:46:a5:7a:dd:82:4c:ec:4b:69:b9:00:
         26:7d:b5:91:51:cf:10:2b:2b:73:fc:22:07:fe:d9:f7:81:de:
         11:f2:3d:63:2a:f2:44:35:51:53:0f:41:44:c9:10:20:81:35:
         67:68:5a:b3:28:fc:6d:9e:d5:d8:c1:18:2e:bc:be:9f:ae:bb:
         f9:8e:9c:e8:36:a1:32:9c:9c:25:fc:56:db:8e:19:4a:e8:ac:
         97:1e:d7:41:02:7e:64:04:e8:d1:68:7b:73:b0:6c:e8:67:5d:
         23:6b:23:23:fc:20:95:3e:a0:8a:a8:d5:df:c9:32:cd:5f:80:
         07:0a:3e:3e:30:b3:71:53:1d:0b:20:6c:ad:39:5c:d1:22:26:
         b7:b2:55:19:02:7a:d0:3f:9b:89:e4:01:64:81:ff:f5:eb:12:
         71:0a:96:60:44:59:8f:85:76:15:21:83:76:8b:f7:b7:65:c3:
         e5:cf:4d:f9:e5:24:f8:8c:4b:49:0b:c7:a1:95:40:24:81:36:
         80:c4:5f:a8:12:23:3f:5a:6a:5e:c5:37:86:27:95:b0:31:80:
         95:81:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:27 2026 by rpki-client