Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2076fcb-1e7c-33e5-9fab-24cc9b7d6803.roa
File:                     a2076fcb-1e7c-33e5-9fab-24cc9b7d6803.roa (raw, json)
Hash identifier:          DKTfjTh29YAULGifkQlZUSQ6AzzYQONl34DdePhUXU4=
Subject key identifier:   2E:70:35:0C:09:9A:67:11:63:08:C8:B1:8D:BF:B8:99:73:C3:AD:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C7C1AEAB5A3DBCAFA24C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2076fcb-1e7c-33e5-9fab-24cc9b7d6803.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.233.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:7c:1a:ea:b5:a3:db:ca:fa:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=f76d5849-b329-4591-aba7-1db7311b5132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:10:18:a3:75:75:0a:af:44:32:09:07:b5:
                    c7:69:86:28:d5:c5:68:21:ee:a7:01:1c:71:68:fb:
                    3b:04:af:29:43:5f:58:23:3b:c8:50:4a:02:52:3f:
                    44:c8:b3:74:c9:01:5e:6a:e8:d7:6e:42:67:68:ba:
                    11:d2:46:35:8d:bf:90:cd:ca:bf:68:99:e8:1d:78:
                    f1:d1:36:fe:28:94:21:2d:e9:7a:2e:b5:79:b6:27:
                    2d:e9:5f:8a:9a:a9:49:7d:8e:fd:60:02:eb:40:4d:
                    96:17:b2:4f:1f:33:77:5d:21:1f:76:bf:b6:4c:e7:
                    02:49:b7:e8:20:ff:65:53:69:76:68:ca:7b:86:ae:
                    ee:19:ee:08:7f:07:38:fd:c9:79:2f:e7:7c:6f:b8:
                    92:41:3a:9c:38:43:61:6d:b7:cc:1b:42:8c:c9:e9:
                    76:0a:8c:60:ac:23:05:ef:8f:a7:ed:90:4a:06:d3:
                    0a:f7:69:8b:14:82:38:6c:92:33:81:4f:d9:1b:5a:
                    01:63:b7:35:e9:1d:9a:75:b9:4c:15:d3:95:71:99:
                    ff:04:c5:17:bd:92:7b:83:03:56:f0:8a:7e:ab:c4:
                    9e:68:e9:00:d8:f5:0b:a9:e5:02:8d:57:d0:93:b8:
                    b0:51:59:17:69:0d:c8:9b:d0:5d:30:14:d0:0e:b3:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:70:35:0C:09:9A:67:11:63:08:C8:B1:8D:BF:B8:99:73:C3:AD:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2076fcb-1e7c-33e5-9fab-24cc9b7d6803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.233.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:96:bf:ed:8f:8d:6c:33:69:79:bb:9e:32:82:06:c6:22:2d:
         ee:af:a6:3d:73:49:68:ce:87:f1:32:20:69:9e:92:1f:e4:91:
         e0:da:36:cb:02:51:26:e3:9a:f8:12:9c:98:6c:05:fb:e0:66:
         cd:40:e0:b1:d2:fb:2a:31:ec:02:e5:62:37:24:89:6e:90:df:
         53:e9:56:17:b7:ca:c3:bb:e8:1c:a0:c0:3d:74:15:4b:90:f4:
         3a:5a:20:b1:af:e2:38:0d:92:26:5c:5f:a7:88:b9:5d:06:b1:
         85:e9:3f:cf:4e:f6:d7:58:46:a8:e7:07:ea:38:3d:54:15:57:
         53:fa:fe:57:2f:71:86:31:04:cc:86:77:e1:af:0b:43:06:77:
         36:aa:3b:54:ce:c9:7e:54:1b:e4:01:bb:d3:b3:fd:0e:58:b7:
         9f:de:f5:2d:3c:0d:5b:cf:40:d4:24:68:c7:6c:e4:80:37:67:
         21:9b:a1:c5:40:93:e2:fb:9b:71:17:71:0f:2f:62:43:e9:a9:
         89:ff:bc:d4:3a:23:c4:6e:43:df:7c:10:de:02:8e:8d:5f:22:
         23:e8:d4:f1:10:65:3b:cf:0e:7b:85:d7:91:8f:39:4f:18:2b:
         5c:a4:6a:de:cb:cf:f6:ba:00:8a:86:1c:12:5a:46:94:60:ab:
         5a:f4:3e:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbHwa6rWj28r6JMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk
Zjc2ZDU4NDktYjMyOS00NTkxLWFiYTctMWRiNzMxMWI1MTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutsQGKN1dQqvRDIJB7XHaYYo1cVoIe6nARxx
aPs7BK8pQ19YIzvIUEoCUj9EyLN0yQFeaujXbkJnaLoR0kY1jb+Qzcq/aJnoHXjx
0Tb+KJQhLel6LrV5tict6V+KmqlJfY79YALrQE2WF7JPHzN3XSEfdr+2TOcCSbfo
IP9lU2l2aMp7hq7uGe4Ifwc4/cl5L+d8b7iSQTqcOENhbbfMG0KMyel2CoxgrCMF
74+n7ZBKBtMK92mLFII4bJIzgU/ZG1oBY7c16R2adblMFdOVcZn/BMUXvZJ7gwNW
8Ip+q8SeaOkA2PULqeUCjVfQk7iwUVkXaQ3Im9BdMBTQDrPFJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5wNQwJmmcRYwjIsY2/uJlzw61KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTIwNzZmY2ItMWU3Yy0z
M2U1LTlmYWItMjRjYzliN2Q2ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErukAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK+Wv+2PjWwzaXm7njKCBsYiLe6vpj1zSWjOh/EyIGmekh/kkeDaNssC
USbjmvgSnJhsBfvgZs1A4LHS+yox7ALlYjckiW6Q31PpVhe3ysO76BygwD10FUuQ
9DpaILGv4jgNkiZcX6eIuV0GsYXpP89O9tdYRqjnB+o4PVQVV1P6/lcvcYYxBMyG
d+GvC0MGdzaqO1TOyX5UG+QBu9Oz/Q5Yt5/e9S08DVvPQNQkaMds5IA3ZyGbocVA
k+L7m3EXcQ8vYkPpqYn/vNQ6I8RuQ998EN4Cjo1fIiPo1PEQZTvPDnuF15GPOU8Y
K1ykat7Lz/a6AIqGHBJaRpRgq1r0PmE=
-----END CERTIFICATE-----
Generated at Thu Aug 27 20:46:16 2026 by rpki-client