Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa
File:                     884000e2-fd1c-3bcf-8abc-d10f045ba796.roa (raw, json)
Hash identifier:          wjEenKnBwS4WG4JVD+eZm5FcRTMTFXfydb6suKW2+dQ=
Subject key identifier:   C8:16:26:6D:27:F9:4E:09:5E:E6:E1:66:77:49:93:90:A3:7A:B2:32
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2D9F318074C10FF704CDC280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     22394
IP address blocks:        174.41.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:31:80:74:c1:0f:f7:04:cd:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=58abf46c-e57a-4eea-b991-e18d1c42e498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:83:b1:8b:49:88:e4:6b:f6:2e:79:af:37:
                    fd:a8:f8:9c:21:82:e0:fa:0e:3e:a6:8a:37:10:87:
                    24:7f:81:ed:d3:e6:dc:1c:8f:79:7c:27:da:94:e0:
                    b1:f6:d0:fa:23:e2:28:03:04:d2:f0:e0:51:6b:42:
                    55:3a:ba:de:bd:08:c9:28:f1:af:91:78:6b:21:38:
                    c3:7e:b4:9d:88:06:2a:84:ad:d7:d2:f4:6f:ef:e6:
                    c7:cc:3e:d2:67:09:e6:7a:62:be:09:f3:76:10:78:
                    19:3d:41:06:3b:09:71:94:83:b7:7e:6c:20:d8:30:
                    64:23:27:02:a8:49:21:e6:97:82:cc:4c:c1:e2:fd:
                    3c:a0:5e:26:82:40:4d:ea:f0:b0:30:51:9b:b6:af:
                    95:42:13:a4:6d:dc:91:a8:ce:bd:bd:ce:60:74:b3:
                    26:7c:16:60:c7:28:00:07:7e:e6:19:03:17:5d:c4:
                    31:b6:cc:74:b6:6e:de:c4:ec:4c:d6:fd:16:60:ec:
                    66:e1:0d:9e:75:2b:b2:11:59:d8:e1:18:df:49:53:
                    cd:55:cf:f5:07:0b:14:de:b9:93:fc:53:ad:a8:1c:
                    d6:0d:fb:57:a3:e3:1c:e0:d3:79:87:d5:db:2d:64:
                    f2:f7:70:f0:ae:7c:cc:dd:d3:de:1b:d0:77:c7:77:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:16:26:6D:27:F9:4E:09:5E:E6:E1:66:77:49:93:90:A3:7A:B2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:18:a0:22:fd:2f:3f:26:96:97:56:d0:13:e8:2c:00:59:49:
         d8:ee:a7:ae:57:e5:77:f3:a7:48:25:b5:32:24:eb:f1:16:f3:
         a4:17:05:dc:9a:4c:a9:d4:eb:2d:5a:39:65:4c:c8:6a:58:6f:
         9d:9e:25:2b:fe:d3:84:a5:b8:5e:2a:dc:be:66:fe:a1:fb:89:
         90:9d:0f:0a:65:94:1c:84:48:60:01:9a:73:c3:af:bf:8b:3e:
         ed:55:1e:a3:01:a1:73:e3:9d:de:5e:2d:e1:9b:8d:69:e0:a2:
         a4:c7:78:d3:c3:1d:96:17:9e:a1:7e:2a:58:66:7c:5d:2c:04:
         76:fb:99:94:bc:fa:32:43:49:4e:ea:0a:a1:f4:08:fe:d4:ca:
         50:e2:6b:d1:fd:02:03:72:d7:58:f3:ed:4c:8f:bc:d9:b2:b0:
         e9:56:c4:df:7e:38:b2:59:ea:05:a0:63:a7:96:4f:43:01:18:
         cc:33:00:11:f0:db:d5:6f:95:23:11:3b:90:f6:c6:19:86:3b:
         eb:a8:2f:69:7a:7b:30:5e:6c:fe:4b:ac:75:79:7f:67:81:32:
         50:cf:16:07:75:0f:23:08:56:8c:89:e8:a5:a6:0e:a8:c3:77:
         e5:fc:eb:5a:28:0a:d0:ef:0f:91:b8:b4:2c:85:c0:e0:87:c5:
         e5:80:5b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 03:44:59 2026 by rpki-client