Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa
File:                     4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa (raw, json)
Hash identifier:          g8juPEjo7VX+8EfPRK+uLYUIZFrZNScK6Nn9gCPju+I=
Subject key identifier:   3E:3C:1F:C1:6C:D0:8E:A7:F4:E5:34:E0:09:3C:2F:01:F6:EC:6D:7C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F71EDB49B398FF931C25C5500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     22394
IP address blocks:        174.41.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:b4:9b:39:8f:f9:31:c2:5c:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=6f77d002-fed8-4f8c-8791-75bf8e09de17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:60:65:8c:af:03:2b:01:a2:3a:c5:09:cd:f9:
                    03:e4:36:2b:ac:35:ee:12:cf:7b:66:4e:80:5e:f5:
                    9f:3b:52:07:ab:21:34:c8:ca:71:85:09:3c:d1:7b:
                    3d:77:b7:06:0c:98:8a:5b:07:08:0a:2b:89:e5:eb:
                    d6:19:20:89:15:23:6a:21:ee:2d:46:60:cb:ee:bb:
                    1c:44:4f:8e:2f:b2:a1:73:dc:4a:d6:52:74:88:68:
                    a2:e1:76:07:9a:68:c4:67:d5:e5:73:e5:ad:9e:05:
                    56:1e:46:72:85:81:e4:f8:b7:51:f2:1a:a7:3a:e1:
                    7a:06:e6:d4:33:0a:55:dd:2d:ee:69:a6:92:77:6b:
                    f6:23:84:92:47:25:43:c5:f2:e5:b6:ab:4d:99:91:
                    37:42:09:11:61:07:92:80:8b:99:d2:35:53:58:42:
                    1a:3e:cd:22:2e:c1:e1:34:89:89:17:91:37:10:bf:
                    e7:f8:33:fa:c1:59:a9:f6:bf:f7:6a:01:90:90:e0:
                    41:37:f5:33:75:fb:13:6b:05:8e:e0:3f:07:3a:a8:
                    85:f5:4b:1d:01:50:b9:c5:42:fd:b3:1f:69:ef:b1:
                    5e:b3:ee:30:a5:6d:80:af:0b:88:79:48:6e:18:56:
                    46:cb:cf:af:1d:54:6f:77:63:28:49:03:38:71:d8:
                    e2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3C:1F:C1:6C:D0:8E:A7:F4:E5:34:E0:09:3C:2F:01:F6:EC:6D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:15:cd:bc:cc:8d:fd:8c:21:6b:da:c8:a4:5d:8d:f6:45:
         2f:17:36:37:28:5a:98:8c:2a:4a:c6:2c:c8:7e:4a:a7:0c:fd:
         0c:69:5d:52:1f:9e:c7:0a:01:8d:81:91:8d:6d:18:8e:55:7a:
         24:41:dd:67:8e:34:12:4e:2d:6b:17:aa:7a:e8:31:fd:06:ad:
         aa:03:a0:29:df:90:b7:ed:0e:d4:9a:03:7d:2c:40:eb:5f:00:
         02:4d:5c:83:c3:66:33:58:89:dc:f7:90:fe:83:ea:80:20:e9:
         16:27:19:d0:e5:93:ae:e1:d0:eb:8e:9b:a3:27:88:f9:4c:40:
         32:5d:a7:1b:bf:8c:c8:0a:ff:70:c5:38:84:13:d4:49:ef:4e:
         24:ca:1d:44:11:47:8e:02:49:0d:d8:54:84:2a:ff:31:a2:97:
         03:00:a5:75:a7:43:85:92:99:74:d6:b2:cb:f3:d5:57:a7:80:
         a3:0f:13:22:a3:03:21:23:8a:e8:00:e2:24:85:e1:9e:92:f8:
         55:d7:b1:51:47:1f:94:14:65:5a:8c:37:dd:bb:98:5a:35:1a:
         60:e5:4d:2d:a4:90:28:3c:d0:f2:c5:3e:50:ef:ab:de:b6:74:
         db:a1:8a:6f:22:27:58:1a:ff:10:38:e5:43:1f:db:b8:27:6b:
         19:ab:1a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:15:22 2026 by rpki-client