Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f0679ec-06a6-313a-a421-550c93f3d8ed.roa
File:                     1f0679ec-06a6-313a-a421-550c93f3d8ed.roa (raw, json)
Hash identifier:          IGAPJbF1PBIjVlTrMGoQ3GJmf4YGJo7/PcaxzcKqgyo=
Subject key identifier:   C2:BA:57:D6:72:AE:52:52:FC:C0:D1:D2:38:1F:E1:ED:E8:96:CD:F6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EEEB77B02A42805CD2C0CFAE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f0679ec-06a6-313a-a421-550c93f3d8ed.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.221.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:7b:02:a4:28:05:cd:2c:0c:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=7e872eea-6ccb-4ef1-b5df-b59d8e8395e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:44:b0:13:32:e9:bf:f5:2d:aa:9a:5d:fb:
                    8e:e0:17:5d:91:46:cf:6a:04:8e:2f:44:4e:8e:4d:
                    1e:70:5b:28:8a:16:87:87:e6:01:53:d0:97:8a:50:
                    e5:e5:58:87:ec:b5:b2:d7:c9:f1:9e:16:8e:52:f5:
                    0c:ff:da:11:26:9a:a9:68:8f:94:ab:54:bf:54:68:
                    bc:01:44:d1:57:c4:88:7a:95:15:8b:1c:9e:e7:70:
                    0e:fa:e3:7c:aa:1f:a2:00:66:b9:01:38:4c:e1:ba:
                    70:84:fc:b1:b2:aa:9f:e3:dc:d0:5c:bc:c3:7b:5d:
                    67:ab:2b:2d:62:fc:49:34:db:6d:60:7f:69:d0:39:
                    ad:e6:5e:b5:82:e2:73:a7:7f:f8:80:7a:9c:e7:00:
                    f9:ef:ff:76:53:e7:d7:e6:e7:5b:35:b8:2d:6f:dc:
                    34:7f:b8:9c:b9:91:9c:1c:33:e3:c5:97:e0:be:ab:
                    75:f4:c4:b3:bf:fd:40:ba:db:04:96:4e:60:5f:d9:
                    8e:3a:ff:97:11:08:d4:df:51:4c:18:23:db:4b:21:
                    c7:25:cb:63:8d:4a:d4:ff:f6:41:ba:69:d4:94:51:
                    71:8d:54:d5:9e:1e:10:56:4d:95:bf:02:5b:99:d8:
                    27:65:ed:3d:3b:b1:c3:76:7c:9f:96:8c:8d:6a:a4:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BA:57:D6:72:AE:52:52:FC:C0:D1:D2:38:1F:E1:ED:E8:96:CD:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f0679ec-06a6-313a-a421-550c93f3d8ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.221.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:31:2a:56:00:83:2b:44:42:8f:a8:39:1b:43:62:a0:4c:73:
         67:8e:66:e8:44:45:0b:58:0c:06:eb:f0:a2:85:56:e8:a0:20:
         b6:fc:1b:ba:c1:e5:4e:dc:f9:1f:c6:b1:df:21:be:10:ca:ad:
         83:be:ef:73:14:92:34:cf:af:1d:ad:43:53:27:76:bb:94:fc:
         96:e9:27:2d:30:45:fb:34:4f:80:13:4b:6c:df:99:47:06:47:
         3f:42:5e:3a:3a:f6:25:3e:46:93:37:31:07:19:a2:e7:06:d6:
         fa:1f:5a:7a:90:1e:33:e3:89:07:58:ce:e0:a8:21:9d:96:cd:
         40:e4:7d:6f:23:d0:06:72:b1:f1:68:d4:e1:89:57:97:a3:67:
         d8:ec:be:4f:51:14:cc:34:31:e4:fc:28:76:6a:73:cc:97:20:
         ab:73:be:7e:5f:cf:e9:24:66:e3:05:70:fb:f7:d7:7b:56:3d:
         69:66:3f:6c:c0:70:71:47:b1:58:ca:b4:47:b3:13:bc:79:58:
         74:21:83:20:da:51:1e:2b:0e:21:ac:d7:3b:39:0a:ea:53:a6:
         c9:60:74:1b:ec:8b:0f:57:f4:58:f8:dc:cc:f1:3b:f6:27:be:
         cc:e0:18:50:8d:5e:ad:56:a5:77:0d:6d:d1:d0:64:ea:e0:66:
         11:87:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:53:57 2026 by rpki-client