Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/839d2938-9585-322f-bf9a-f7449f08b85d.roa
File:                     839d2938-9585-322f-bf9a-f7449f08b85d.roa (raw, json)
Hash identifier:          XZCnzru0mY1lzj1Z48hw4a70zPYCB+PGUCPCUjIWMBk=
Subject key identifier:   5A:C0:87:99:75:48:08:EB:21:5A:B5:3A:12:91:BB:0E:7C:30:72:48
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA787940D62385719651DE080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/839d2938-9585-322f-bf9a-f7449f08b85d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.245.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:94:0d:62:38:57:19:65:1d:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7ae5f17a-84cc-4388-b7ec-097178032ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9f:8b:cf:0c:2f:44:25:6f:08:8b:52:f5:9a:
                    9b:64:78:82:ed:2f:c0:76:8c:d8:91:14:e9:c6:8c:
                    49:d7:88:bf:14:15:b4:a6:e7:37:8d:e3:73:1c:5b:
                    93:aa:f9:c6:5c:2e:7b:33:05:09:83:6d:e2:ed:79:
                    0b:00:76:7c:85:ae:a9:76:40:c6:e9:ce:1a:02:46:
                    67:f8:ec:7c:6e:0e:86:7a:00:93:ba:e8:26:59:f6:
                    1f:4c:0f:be:c1:19:f7:d2:78:75:82:c2:1e:24:4a:
                    d0:d7:c4:60:5b:08:cf:b3:db:ab:68:3c:47:21:2e:
                    ed:c4:09:38:e0:c1:7b:73:c1:3d:81:97:cd:b7:63:
                    47:17:7b:9e:e0:20:db:16:d3:74:b3:27:c5:89:87:
                    ad:53:23:57:56:84:ba:b2:89:05:c1:56:97:12:fc:
                    69:ff:f0:15:bb:e8:a7:00:c6:7c:54:aa:f4:7e:38:
                    21:3f:80:53:1c:bc:64:f7:1d:44:4e:87:cc:10:99:
                    a3:3b:42:3b:23:b9:9c:0b:bd:90:56:48:fa:3b:aa:
                    d6:e7:52:80:f8:bb:e9:14:fd:ca:7e:3e:8d:a2:a3:
                    60:28:0e:c9:8c:19:81:5e:93:82:1b:fe:f5:89:54:
                    9c:65:e8:88:5d:0a:dc:9c:a4:da:4e:0e:5f:c7:2f:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C0:87:99:75:48:08:EB:21:5A:B5:3A:12:91:BB:0E:7C:30:72:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/839d2938-9585-322f-bf9a-f7449f08b85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.245.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:88:8b:eb:e5:42:09:67:d6:0e:60:19:0d:86:00:46:2f:95:
         3e:b1:ef:ac:a6:06:bc:6b:c6:8c:98:2b:ff:de:95:fc:a9:06:
         4e:7b:75:92:5e:87:4c:01:05:a7:50:25:e0:54:e4:9c:60:7e:
         d8:e2:13:b5:98:68:29:08:4c:6f:83:c1:87:9f:c9:aa:4d:d2:
         fc:da:01:5e:6f:a8:70:ef:79:03:a9:ad:4a:8d:f9:19:3a:0d:
         2e:1e:e2:45:7a:97:a3:0c:6b:73:f4:ae:b0:90:8f:6f:f2:73:
         15:22:09:9c:76:6e:03:69:7e:a8:1c:97:8a:47:2c:d3:23:9b:
         07:83:4b:13:a8:2e:a3:fd:f3:c5:c2:0f:45:4b:33:fb:8a:9f:
         95:f0:8f:b1:f6:9d:dc:df:34:bb:2d:67:f6:67:9d:e2:df:3b:
         b4:15:b4:bb:35:7f:fa:18:d1:28:8a:38:5d:8f:37:59:e1:4e:
         59:4c:9e:02:b5:3c:db:05:5b:ae:c9:0f:81:7b:ef:16:44:94:
         57:35:fb:5e:48:e8:94:d1:4b:25:e4:91:13:49:e7:68:8f:2c:
         b7:b0:fd:ba:86:75:53:a8:a6:3e:55:e4:7b:30:0f:ee:06:08:
         c6:e1:b5:af:3b:a0:fa:6c:a3:8d:d7:fc:68:0c:bf:56:aa:7d:
         95:26:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:55:21 2026 by rpki-client