Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7fc54e-4e53-35c9-8961-0f98b25fb01a.roa
File:                     2c7fc54e-4e53-35c9-8961-0f98b25fb01a.roa (raw, json)
Hash identifier:          y1S+dLoqYVcWVDYIRisMFj6U5kXyUrQOVZJg0gJRqQs=
Subject key identifier:   8B:75:5D:FB:85:F0:93:13:DD:76:74:75:B3:0D:B7:F4:45:98:39:6F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C74F89729DB464BC3F080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7fc54e-4e53-35c9-8961-0f98b25fb01a.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.231.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:74:f8:97:29:db:46:4b:c3:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=5d280a2d-6874-4565-9065-6122969b486c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:8f:6e:41:24:36:c6:59:8e:32:7a:b4:da:
                    e1:93:04:7f:7d:b0:e5:91:29:6c:fa:39:8a:5d:00:
                    01:c4:a4:4f:97:6b:f2:5c:2d:4a:0a:fc:d3:60:df:
                    b2:e3:47:13:66:12:3f:8d:cf:42:65:7c:06:52:a0:
                    9a:13:8c:92:09:bb:92:97:61:c7:8f:13:34:af:ee:
                    45:a4:55:8d:e6:0c:07:80:f9:e5:0a:2f:d0:4d:3e:
                    eb:0f:8c:ec:da:85:8f:e2:c9:79:53:73:16:f3:d6:
                    1a:50:49:ad:5c:98:07:0e:e3:7f:4b:62:c6:2d:5e:
                    2d:d3:71:85:b7:92:ad:41:7a:55:6b:1e:99:c0:bd:
                    f7:83:3d:8e:c1:6e:49:50:88:ad:bb:0e:31:f4:2f:
                    49:ea:4f:33:0c:df:eb:23:ce:39:24:56:4f:86:88:
                    f5:74:ba:f6:8b:bb:1c:f7:37:d8:15:dc:be:c0:cd:
                    b6:9e:50:3c:ab:2c:5b:3c:a4:6e:08:59:7e:e0:c0:
                    02:2a:41:b3:14:67:6b:e4:97:ee:98:03:fb:20:51:
                    a7:da:f4:c6:70:9f:88:14:66:7c:c8:0f:92:dc:f2:
                    ab:28:ed:b1:aa:35:5d:02:8f:7e:3e:c4:a3:15:fc:
                    ff:96:48:54:96:b3:98:78:65:aa:1c:c5:0b:4d:95:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:75:5D:FB:85:F0:93:13:DD:76:74:75:B3:0D:B7:F4:45:98:39:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c7fc54e-4e53-35c9-8961-0f98b25fb01a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.231.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:13:86:c3:22:63:89:cb:6b:bd:5b:48:5d:f1:18:21:c6:2e:
         2d:ab:92:6e:9e:2a:1a:07:37:46:01:23:ad:8e:c7:53:6e:51:
         22:3d:38:f7:e8:31:c3:00:c6:94:9d:47:33:94:39:21:b5:86:
         7a:df:f1:7b:d8:c0:d1:d9:db:df:e9:17:8a:eb:18:5e:02:c9:
         0d:0e:60:19:a2:9f:8c:e3:aa:8a:fa:79:45:87:54:fd:07:0d:
         f3:22:df:5e:df:fc:a2:7c:1b:1b:b3:bd:88:1d:6b:10:25:97:
         52:18:f3:f9:fd:b6:11:aa:fb:d8:c2:d7:5b:22:be:e3:03:a6:
         8f:00:39:cb:ca:bd:5d:d1:7f:da:17:ff:0e:e9:7b:ba:5a:e6:
         e4:f2:45:54:2d:81:80:11:98:e4:2e:6f:cf:f7:01:a5:4a:72:
         ff:b9:27:72:1d:ee:a3:82:21:49:c7:7c:1b:b7:ac:02:74:5d:
         e8:54:ce:6c:bf:9a:2b:57:23:86:5e:cd:b1:37:47:d6:7a:be:
         15:18:26:af:db:8a:2a:d5:a5:ed:bc:22:a7:dc:67:0f:bd:81:
         97:c7:c6:39:d0:f7:92:27:7e:52:4d:56:80:82:a4:95:d7:bc:
         03:f0:29:4c:b1:1a:81:0f:12:22:22:2f:fe:fb:4e:4d:9a:6a:
         7a:db:a0:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbHT4lynbRkvD8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk
NWQyODBhMmQtNjg3NC00NTY1LTkwNjUtNjEyMjk2OWI0ODZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDGPbkEkNsZZjjJ6tNrhkwR/fbDlkSls+jmK
XQABxKRPl2vyXC1KCvzTYN+y40cTZhI/jc9CZXwGUqCaE4ySCbuSl2HHjxM0r+5F
pFWN5gwHgPnlCi/QTT7rD4zs2oWP4sl5U3MW89YaUEmtXJgHDuN/S2LGLV4t03GF
t5KtQXpVax6ZwL33gz2OwW5JUIituw4x9C9J6k8zDN/rI845JFZPhoj1dLr2i7sc
9zfYFdy+wM22nlA8qyxbPKRuCFl+4MACKkGzFGdr5JfumAP7IFGn2vTGcJ+IFGZ8
yA+S3PKrKO2xqjVdAo9+PsSjFfz/lkhUlrOYeGWqHMULTZWGnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIt1XfuF8JMT3XZ0dbMNt/RFmDlvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmM3ZmM1NGUtNGU1My0z
NWM5LTg5NjEtMGY5OGIyNWZiMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrueAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKEThsMiY4nLa71bSF3xGCHGLi2rkm6eKhoHN0YBI62Ox1NuUSI9OPfo
McMAxpSdRzOUOSG1hnrf8XvYwNHZ29/pF4rrGF4CyQ0OYBmin4zjqor6eUWHVP0H
DfMi317f/KJ8GxuzvYgdaxAll1IY8/n9thGq+9jC11sivuMDpo8AOcvKvV3Rf9oX
/w7pe7pa5uTyRVQtgYARmOQub8/3AaVKcv+5J3Id7qOCIUnHfBu3rAJ0XehUzmy/
mitXI4ZezbE3R9Z6vhUYJq/biirVpe28IqfcZw+9gZfHxjnQ95InflJNVoCCpJXX
vAPwKUyxGoEPEiIiL/77Tk2aanrboGA=
-----END CERTIFICATE-----
Generated at Thu Aug 27 21:43:55 2026 by rpki-client