Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e455bc-6c46-31c4-ba8a-dc3fa4cc9220.roa
File:                     29e455bc-6c46-31c4-ba8a-dc3fa4cc9220.roa (raw, json)
Hash identifier:          7kh58tIRhtB0VIAm4AKlPc5t+BWgLInuW9wacQCJ/PY=
Subject key identifier:   98:9A:E9:62:75:F6:2F:61:03:32:2A:0F:3D:25:7B:35:F6:0D:E3:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C58406250072C8FFF02B380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e455bc-6c46-31c4-ba8a-dc3fa4cc9220.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.203.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:40:62:50:07:2c:8f:ff:02:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=80e44fa8-4961-49fb-841c-d526a30c50b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1c:57:53:f1:df:52:e1:32:ad:e1:02:45:9b:
                    28:f2:01:c4:e5:90:18:90:f3:a4:d3:eb:8e:ae:bf:
                    a7:20:32:be:d1:25:5c:58:60:bd:89:a3:50:78:d9:
                    35:c3:3d:14:2f:11:ab:36:e4:cf:13:26:25:22:e0:
                    9d:9b:18:98:79:64:3c:ef:d4:16:63:db:8a:89:7b:
                    87:74:be:b1:57:07:c0:a8:3d:74:bd:94:2d:fb:d9:
                    a8:2f:f3:df:a5:71:58:0b:00:38:93:fc:f6:d7:40:
                    e0:a0:c7:6c:cc:03:41:ca:15:09:86:73:bd:7a:ad:
                    d5:e3:a5:15:df:ae:37:17:8f:e2:90:dc:2f:e7:c2:
                    fb:fc:ac:6d:c4:a9:36:06:f9:be:c1:eb:13:90:7a:
                    7c:47:c0:d8:e9:69:c5:c6:20:e2:82:97:69:c7:0f:
                    11:ca:be:78:3d:a5:e1:9a:c5:44:0a:19:33:d8:51:
                    8b:b3:bf:c8:a5:b7:20:e2:0f:aa:30:63:1f:cf:6a:
                    b3:7b:23:82:78:02:ba:ef:3c:7e:fe:96:64:f7:3f:
                    5b:d6:d5:0d:bd:e2:aa:d1:75:36:50:8a:47:4c:d3:
                    2c:ea:0d:24:49:c7:7d:32:7c:c2:b2:92:65:cd:c0:
                    02:f0:5e:7d:11:e7:86:49:b8:4a:b3:71:7d:ea:ca:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9A:E9:62:75:F6:2F:61:03:32:2A:0F:3D:25:7B:35:F6:0D:E3:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e455bc-6c46-31c4-ba8a-dc3fa4cc9220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.203.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:5a:5d:01:95:d0:fb:f9:b3:14:17:1c:17:27:78:8c:50:7e:
         63:71:bc:ba:35:23:ab:2b:35:65:ed:70:fe:78:12:a0:08:87:
         05:a8:33:7d:6d:a3:e9:e6:02:cf:77:21:c3:f9:15:5d:56:ae:
         a7:89:27:66:47:22:eb:8a:bc:04:86:de:cc:8f:c6:8a:93:92:
         2f:26:14:95:a2:3a:7b:c7:5c:f3:ea:56:82:a8:0b:b8:18:9c:
         85:5a:4e:22:ae:e2:c8:2e:05:52:1e:6a:03:0e:18:51:a6:86:
         a9:9b:15:79:1d:6b:ab:c3:fd:95:0c:34:1a:4e:47:fd:a3:c8:
         f8:d7:57:6c:7a:26:51:7c:57:cf:fc:0e:22:af:c5:53:01:1c:
         ae:d0:40:2a:d6:76:e4:87:62:f5:74:4b:15:b1:80:59:d6:df:
         c6:8a:6a:38:bf:ff:1b:5a:1c:28:a1:f5:5b:b7:47:50:4c:c7:
         02:ca:6e:d2:d6:f9:ad:84:57:78:75:70:f0:57:d3:5c:a1:a9:
         66:d6:99:79:0e:f4:a4:01:09:ad:5d:dd:24:42:de:ff:ff:34:
         f1:d6:83:d1:b6:02:70:cf:cc:09:f9:f1:e3:2f:ad:7a:1a:74:
         10:b9:34:c7:ee:d5:79:92:80:cd:86:d0:7c:a1:d7:5c:72:79:
         cf:76:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:13:35 2026 by rpki-client