Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa
File:                     1cb32344-435b-37b6-86aa-873adbe9c521.roa (raw, json)
Hash identifier:          Yx82S15A9FRVeGIGefztHL2c2QQ3ARUyjPhL7f2bMz4=
Subject key identifier:   B2:87:C6:D8:E8:DA:1A:9A:F0:38:A0:58:E8:E1:E8:A4:10:B6:2B:93
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C7CD2B30827927A59BA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.235.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:7c:d2:b3:08:27:92:7a:59:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=46896320-7fe1-4cde-b7e3-10d5273c4265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:cb:b7:61:76:a2:2f:ce:9a:96:bd:53:00:
                    52:b2:86:d9:77:f3:59:6b:91:13:d6:ba:e8:39:15:
                    6a:75:d5:6d:0f:d2:bf:ed:a4:d8:a3:07:ea:36:09:
                    e3:92:52:e2:a5:fa:3e:0a:8c:0d:e1:12:77:85:c2:
                    e8:be:5b:9d:8a:47:d5:02:a1:2f:06:94:41:ae:f0:
                    f7:30:ee:36:c6:1d:de:96:bf:9d:be:e3:7f:18:5f:
                    6f:46:9c:96:00:e1:0a:3b:97:36:8c:92:3c:8a:9a:
                    02:ad:75:94:a2:f5:c1:e7:62:a9:28:0d:87:ac:a3:
                    d9:ba:92:4e:96:80:1a:2e:1c:fd:20:48:4a:57:3d:
                    ef:fd:7d:ed:ca:54:37:c7:86:97:6d:e0:d7:ff:1b:
                    c0:29:e7:d5:02:e0:48:c8:71:4c:d8:b0:78:8f:75:
                    9e:95:aa:b0:e6:26:2f:68:d2:10:9a:25:8f:9f:07:
                    1c:65:01:17:e3:ed:63:8c:2a:3b:3f:bb:b2:78:d5:
                    a5:88:10:4f:73:2a:96:c4:ab:9b:fc:f9:77:ac:68:
                    8c:38:9e:d9:85:57:7f:93:ea:99:49:c8:90:61:2b:
                    06:d6:ee:76:0d:49:e5:cb:5f:dc:74:9a:73:d3:cb:
                    0c:ab:05:8e:4f:5c:c6:be:24:5b:ca:b4:95:fa:6f:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:87:C6:D8:E8:DA:1A:9A:F0:38:A0:58:E8:E1:E8:A4:10:B6:2B:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.235.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:58:cc:c8:81:75:03:be:36:a4:a7:ab:53:27:ed:5a:2d:4b:
         94:68:63:70:81:b3:1b:30:38:a5:27:83:f1:2c:58:96:f0:63:
         dd:90:46:1c:de:9e:8c:87:f9:d0:83:4d:c0:28:2e:73:1b:c3:
         e5:b5:7b:aa:8d:7a:63:6f:01:b0:c0:73:ee:37:92:5d:9e:ee:
         2d:7b:cb:96:7f:61:73:e3:b2:56:79:2b:d0:fa:72:d4:08:5f:
         19:34:20:93:f8:17:ce:3e:a4:0b:d7:d1:8d:85:3b:7a:ea:1c:
         05:e6:8d:2f:e9:4b:ea:e2:0e:d5:b5:de:7e:53:30:d3:2a:89:
         48:ad:63:d6:12:fe:66:51:fa:86:10:35:fb:1a:89:34:6f:3b:
         50:65:6e:a7:5a:c1:75:f9:50:b3:5f:97:15:36:e8:1b:32:1a:
         70:c0:d4:b2:fd:81:e0:7b:a5:ae:d8:1d:46:b4:7f:7f:53:ba:
         f2:bd:8e:99:a1:9c:61:25:38:8c:81:91:9c:56:b7:e9:c6:51:
         0c:22:f6:1a:e4:b7:e9:b0:d2:cc:31:ce:23:e3:39:71:0b:99:
         f4:e1:dd:3b:bd:5a:5a:26:0d:e0:74:30:d3:55:3d:91:79:fe:
         0a:c3:e9:6d:02:4a:9a:b9:3e:b0:0c:27:e6:ed:9e:dc:f2:01:
         3d:87:8d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:52:25 2026 by rpki-client