Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa
File:                     5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa (raw, json)
Hash identifier:          zFUt/qU9mmMrf4lNm+FsQq6t15xEexHSqIgUqt/4YWs=
Subject key identifier:   95:3B:BC:C0:3A:6E:19:1B:5A:15:10:D1:B5:97:4C:91:34:4B:CB:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C7EA33FF7600054E1C0C8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.238.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:7e:a3:3f:f7:60:00:54:e1:c0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=3f54c132-6491-409e-9e3a-cef19afe3ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:6c:da:61:35:36:a5:2a:64:90:f6:b7:85:
                    ad:9d:0a:29:9d:cc:96:ef:f3:6e:c9:ed:8c:36:f5:
                    29:fe:ae:0f:6c:13:61:92:2c:0e:94:fa:92:08:22:
                    a8:6f:0b:b0:30:40:5e:6e:98:cd:33:fd:ea:b2:fa:
                    16:0b:16:85:c2:a8:6b:06:ea:aa:0e:9b:fc:91:8b:
                    03:6d:a3:5d:a2:05:16:2b:c7:10:ee:1e:fc:55:d7:
                    55:ee:9c:a6:b5:12:7d:2c:d5:53:6a:d7:5d:a6:19:
                    fe:97:85:bb:88:c1:73:14:e4:a1:bb:57:5c:81:61:
                    3f:6b:a3:49:00:32:d2:b6:1d:2f:97:08:ee:99:5e:
                    20:44:1f:0d:79:a2:e1:f3:e5:1f:bf:24:f6:f8:8c:
                    5a:5f:3c:62:8d:42:a8:d0:7d:b3:30:13:4d:1d:fd:
                    ce:a8:ea:aa:11:21:09:e4:9c:8a:cf:18:0a:31:51:
                    42:d3:c1:e5:67:07:76:71:6e:bb:17:b1:7a:8e:9e:
                    c0:f7:fd:ef:93:f1:5a:e9:f7:ab:0f:dd:38:0f:8a:
                    22:41:9c:6f:de:88:dc:a0:c9:07:dd:f5:07:52:8f:
                    b1:26:9c:4e:b4:31:49:34:47:82:f6:ac:6c:43:9b:
                    3b:1a:43:ea:1a:7b:d9:9f:4c:ba:17:3a:53:03:bf:
                    6f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3B:BC:C0:3A:6E:19:1B:5A:15:10:D1:B5:97:4C:91:34:4B:CB:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:03:a0:f8:9c:9f:07:d1:e3:22:7e:bc:43:57:04:17:79:8b:
         55:b2:d1:6b:6e:ef:e5:91:4f:4e:8d:8a:60:d2:ad:f1:6c:e2:
         4a:3e:37:55:09:95:33:5a:36:1a:f7:a9:5f:fb:8c:f4:fd:2b:
         26:e2:1a:f5:6f:ee:07:0c:a1:d3:12:f8:30:45:e7:0b:24:1c:
         b9:b3:65:21:a9:01:be:e5:53:77:8e:ec:8a:74:53:ed:da:9f:
         a4:a9:8a:67:10:37:a1:9e:33:fe:dc:ca:b1:cd:9c:d3:58:31:
         89:e5:9c:d7:05:fd:75:4c:e2:95:28:7c:a5:ef:80:6b:97:e5:
         5b:48:78:74:93:dd:7f:a4:9b:8f:ef:62:e6:40:61:24:10:e8:
         98:76:f3:f4:22:60:7d:dc:ac:55:34:9b:1a:60:01:ee:91:88:
         e2:4b:ac:00:43:58:7e:e4:65:fd:2a:af:e6:03:f4:30:03:5d:
         94:d0:4e:4d:b1:24:83:59:f9:40:ba:7c:dd:7e:2b:b2:92:6b:
         45:2c:59:1b:45:d0:2b:71:d5:49:1f:e1:d7:13:fc:53:5c:47:
         e3:8e:bf:44:34:14:a4:c7:21:e4:3c:66:43:f3:39:f1:4f:c2:
         5e:28:f8:3c:cb:c6:89:6e:45:34:21:6a:d7:fa:67:0e:66:4b:
         76:66:b9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:42:10 2026 by rpki-client