Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3924df51-2857-38d3-81dc-8d7bf03d2093.roa
File:                     3924df51-2857-38d3-81dc-8d7bf03d2093.roa (raw, json)
Hash identifier:          2Pq7xN4hy9JXI8G/sgE+l5nl8fJWUWmQn7ZLEa9k80s=
Subject key identifier:   26:12:8A:8F:F9:7A:20:DE:8A:00:61:49:9E:4D:3A:51:94:3F:99:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F71EDADD9E62D1D8A7EFDBE20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3924df51-2857-38d3-81dc-8d7bf03d2093.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.42.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:ad:d9:e6:2d:1d:8a:7e:fd:be:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=7a6b5654-3e16-4850-9da9-5ae47531fd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:71:b1:f1:d9:32:5a:65:cc:67:75:48:da:
                    a8:12:3a:c9:66:57:ac:af:20:23:10:7e:d9:00:93:
                    f2:25:ec:d0:00:7d:1d:c7:32:df:c7:2d:6d:47:29:
                    8c:47:4a:8f:39:18:be:9f:7e:24:ec:02:d7:e9:9e:
                    dd:ac:64:ac:05:47:0a:8e:98:39:72:6c:e7:3e:ab:
                    5c:07:e2:b3:a0:1b:55:f3:47:52:29:0a:6f:d8:4d:
                    de:94:07:17:31:53:ea:6f:a0:d5:75:c5:51:82:e4:
                    22:ba:89:2c:c6:9b:88:14:e8:6c:1a:37:57:e4:5c:
                    d0:c8:80:92:52:16:50:cf:35:87:d4:54:db:60:c4:
                    6c:d7:7e:56:2e:1e:18:d4:00:1c:9f:0b:56:8c:25:
                    1d:64:f9:39:9b:62:35:7c:99:78:18:ff:45:ea:c7:
                    24:38:cf:13:b5:28:7d:0d:e6:af:d7:7f:7a:f1:89:
                    1c:30:63:19:3c:ee:f4:96:02:c7:1a:b6:f1:01:35:
                    7f:73:c3:6d:df:40:77:ac:5b:95:a9:e4:c6:66:89:
                    7a:e4:80:f7:ef:4c:22:ea:8e:c9:26:84:a8:c0:75:
                    88:0d:59:15:56:53:68:8b:39:bd:e0:ae:4f:a9:45:
                    80:fd:4f:4e:de:d0:96:67:2d:bc:7b:2e:3b:24:eb:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:12:8A:8F:F9:7A:20:DE:8A:00:61:49:9E:4D:3A:51:94:3F:99:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3924df51-2857-38d3-81dc-8d7bf03d2093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f5:05:0b:c6:0c:14:6b:6b:7c:e1:1f:dc:97:8e:b8:16:21:
         1b:c5:bc:18:10:8f:0d:17:ce:4f:c0:04:04:51:cd:54:43:c9:
         ff:16:c1:20:f7:ba:70:15:1f:b6:34:60:bf:73:a7:f2:c0:3a:
         bd:0d:be:9d:25:c8:d7:b4:5f:63:98:89:d1:b1:87:d2:dc:d8:
         21:ee:17:cc:84:33:ae:ce:37:af:3f:9f:d6:40:7d:61:32:1d:
         0d:04:f9:58:2b:31:ea:5e:58:c0:3c:88:cc:a0:fc:2f:4d:82:
         0a:3d:7f:bc:92:f8:1e:fe:82:98:4a:02:f4:87:e9:24:90:4a:
         ef:a0:21:47:a4:3b:1c:c8:3f:45:f2:26:78:23:3f:79:ba:4c:
         3a:10:52:43:a6:ce:64:d1:2c:76:d5:34:8d:c6:40:ef:7d:e7:
         b4:02:7a:ac:79:63:36:24:3a:70:21:bf:68:a8:46:40:17:a8:
         e7:d9:b3:e2:2d:5a:80:b2:03:de:d1:52:87:62:ef:8f:16:66:
         8d:83:62:c6:6c:6b:98:d0:c5:1d:1b:5c:89:ee:f4:60:52:83:
         9a:b9:83:a0:d8:3c:a3:4a:c0:3f:ea:3a:03:2f:dc:bb:a9:b9:
         79:d4:72:f2:ea:8d:59:ca:71:a5:3e:bf:6d:99:ed:f3:f5:3e:
         2c:3b:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:36:08 2026 by rpki-client