Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa
File:                     06678aea-69e2-33a7-a0d2-04432ccce437.roa (raw, json)
Hash identifier:          o1Lrb6tKVkXn/PHbTZB3W7GZRag7x4MPd6TazqyFl8E=
Subject key identifier:   37:3D:9E:3E:DF:4D:AA:4D:11:F7:B8:07:08:98:57:29:C7:96:96:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F71EDB4EE2200DF4B51BDD190
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     22394
IP address blocks:        174.41.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:b4:ee:22:00:df:4b:51:bd:d1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=84e041d1-7ed7-484b-b488-f1b2bc05b6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:cb:3d:9d:47:58:f8:74:ca:ae:66:3c:0f:
                    3a:60:f4:7c:eb:67:79:10:86:b1:4d:a8:de:72:81:
                    ff:5c:dd:f9:72:79:9a:30:cc:d4:9f:4a:93:68:2f:
                    8a:82:e7:81:41:f7:96:52:f4:5b:be:ad:ae:fd:8d:
                    e9:0e:4d:f1:2c:fa:a5:d7:57:19:ce:f3:4f:a3:5c:
                    a6:f2:a1:ed:6f:39:84:fe:7b:42:e5:01:f8:6e:31:
                    34:70:52:7e:ab:dc:9c:0d:87:c2:e5:62:0d:b1:09:
                    65:80:20:73:aa:77:09:04:3b:65:fe:df:f8:12:f6:
                    26:bb:fe:e5:fd:9d:e7:cf:36:b9:34:69:4f:36:52:
                    24:1b:d0:47:e9:5b:f4:97:0f:ff:4a:bd:0a:12:d5:
                    86:a7:a1:5f:e9:6d:b3:51:5c:3a:b0:6a:6b:d2:48:
                    c2:6a:dc:df:be:a5:94:70:2a:bc:e8:82:71:49:f7:
                    64:71:e3:44:e6:81:38:cf:3c:cc:5f:bd:74:9a:fa:
                    89:ad:ef:34:2e:8f:1b:dd:15:a3:07:58:15:34:b5:
                    8d:d1:ae:96:5a:63:31:0e:fd:2d:25:84:26:21:2f:
                    16:a0:01:ad:a2:c8:58:4f:71:a7:f9:7f:3f:d0:89:
                    72:dc:1b:65:05:f7:be:c4:8b:30:ad:92:25:1f:ac:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3D:9E:3E:DF:4D:AA:4D:11:F7:B8:07:08:98:57:29:C7:96:96:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06678aea-69e2-33a7-a0d2-04432ccce437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7c:bb:b9:87:64:14:81:e1:38:62:6c:af:bb:ce:e3:0e:92:
         ba:96:aa:1c:15:19:95:a5:3d:a5:87:b1:81:ad:b3:50:1a:01:
         0f:70:81:1b:b5:4f:28:24:84:4f:41:d8:88:1d:d4:a9:c0:c1:
         51:22:5f:7d:27:6c:84:6c:ce:cc:c6:d8:0b:22:56:1a:bd:23:
         24:ec:0e:8f:65:67:79:16:2d:5f:f0:0e:e6:8d:af:8c:ee:5f:
         1f:f2:19:5f:27:44:51:5e:c9:ea:41:e4:57:f8:6b:0b:59:15:
         15:70:a7:8c:c8:ae:bb:26:5f:bc:9c:01:ab:54:3b:b1:c9:67:
         4f:25:f1:e9:06:5e:72:2f:2b:dc:75:c6:d7:ec:f5:57:49:74:
         d9:55:cb:cd:8c:cb:f5:85:c0:9b:e1:14:df:54:85:6b:cd:ed:
         18:28:4f:eb:d9:89:af:c9:c8:b4:b3:4e:0b:54:fd:3d:77:cf:
         0c:cf:c3:b7:ff:3d:98:8e:c3:21:df:1c:59:70:42:d6:a7:42:
         95:43:fc:0d:3c:c2:42:2c:f6:fb:2b:39:c7:fe:d5:3c:df:d5:
         1d:6c:44:6b:6e:35:fe:4c:43:ec:bd:d0:db:21:9a:ba:2d:5a:
         c7:a3:15:2f:e8:20:98:38:9b:55:ad:4b:81:39:a3:e6:c4:3a:
         5c:35:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:47:47 2026 by rpki-client