Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e30c25e-eec7-380c-bece-65e67fb6afeb.roa
File:                     5e30c25e-eec7-380c-bece-65e67fb6afeb.roa (raw, json)
Hash identifier:          m2IiqWa1E1SRqxH5Jlt0ytfrOmp3llqLSmjKBlhp7gQ=
Subject key identifier:   3A:9D:1E:64:63:42:B1:AB:80:3A:54:6C:E0:F9:31:65:2F:8F:C8:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C5846725979B1D85E23ECE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e30c25e-eec7-380c-bece-65e67fb6afeb.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.238.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:46:72:59:79:b1:d8:5e:23:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=6365b980-67a6-4d64-bca7-755c01fc8c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:60:50:69:df:5c:2f:a8:2e:51:26:e4:d2:
                    03:a6:69:bb:8f:3d:77:90:eb:4b:ee:09:67:8e:1f:
                    22:84:a4:b2:f8:05:e4:12:12:31:f4:ab:e0:6d:69:
                    11:b7:2b:4d:bc:94:70:e9:73:10:a0:0f:d0:22:23:
                    ff:51:d2:f5:fb:96:d0:7e:69:ca:62:77:e2:d1:32:
                    d0:6f:e0:ab:a9:8f:15:39:c1:6b:ee:2e:9a:a7:8d:
                    76:98:06:02:34:5d:1b:5e:d7:b2:4b:35:e2:5b:a4:
                    56:22:00:af:1d:2e:11:57:99:4a:f6:ab:fe:f2:9b:
                    79:25:3d:2c:27:21:43:25:66:3a:83:d3:d7:1a:56:
                    ac:1d:41:95:e2:7e:08:bf:5f:3b:3c:7b:65:a4:2d:
                    6d:84:4d:4f:28:e4:df:13:67:07:07:ff:7f:ad:f8:
                    f6:8a:5b:61:4a:3b:79:9b:ff:f3:e4:33:16:30:b4:
                    dd:40:03:fc:62:29:48:86:08:5b:f6:6b:1f:87:43:
                    60:7c:af:d8:cd:91:9b:b1:f2:d0:31:08:f9:dd:14:
                    6b:90:8b:a9:4a:3a:f5:e7:da:0c:47:4b:c5:37:9f:
                    60:be:01:28:7f:5e:be:37:3c:2e:c8:b5:cf:a3:e5:
                    ff:4d:5e:c9:b5:d1:d9:e4:e0:26:ed:a4:20:d9:e2:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9D:1E:64:63:42:B1:AB:80:3A:54:6C:E0:F9:31:65:2F:8F:C8:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e30c25e-eec7-380c-bece-65e67fb6afeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:06:2a:35:64:18:22:a8:a8:f5:8a:4b:7c:38:3f:cd:b4:31:
         8f:ff:32:f2:61:38:78:30:81:c0:9b:f8:e1:dc:84:fa:68:97:
         91:6b:01:2c:25:eb:45:41:3e:8f:5e:91:62:08:d4:a5:7d:d0:
         58:8c:e7:c3:67:71:9e:c8:de:3f:14:73:99:3e:e9:74:ec:c5:
         7a:18:c9:68:dd:62:94:0b:1a:ed:68:a1:0d:88:27:4f:1e:e1:
         49:20:e2:f6:22:b4:a2:63:f9:0d:f5:ed:36:f3:aa:19:8c:85:
         3f:8e:28:02:74:41:12:2f:e0:66:83:e8:4d:07:67:b5:92:7a:
         6c:a1:4f:5e:16:86:4d:33:83:0e:e5:bf:04:7b:9e:68:dc:85:
         7c:de:35:ab:ac:ab:5e:e5:9b:c5:75:f6:01:eb:c5:35:f5:e0:
         54:36:52:c6:15:c7:0a:6d:93:d6:61:c4:bb:5b:d4:27:ad:7c:
         62:27:92:0d:ea:b3:16:50:d7:b8:85:5e:b2:ba:87:0d:ae:4d:
         17:1a:58:87:75:67:ea:9e:3c:c5:44:52:47:3b:84:8e:1d:38:
         e8:65:13:a5:21:12:19:e1:f5:fc:b6:92:be:4e:b5:26:ce:26:
         fe:3c:5a:7f:d3:06:ff:a3:be:10:b2:b2:13:d8:6e:b7:b5:54:
         49:2a:d7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:56:09 2026 by rpki-client