Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae771f74-2147-3ae3-a00c-8c3584555bcf.roa
File:                     ae771f74-2147-3ae3-a00c-8c3584555bcf.roa (raw, json)
Hash identifier:          a/CPJ7zBUP4iujX0gsuSMrPWRST6VxrsyZ0tiSaGSK4=
Subject key identifier:   8C:61:05:34:18:B3:3F:80:47:AB:B2:E4:78:48:1F:CC:5D:A7:DA:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ED001FF2D8910040833924480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae771f74-2147-3ae3-a00c-8c3584555bcf.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.42.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:ff:2d:89:10:04:08:33:92:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=4ae69ba3-a346-471b-bec2-54dbfbbf5716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4d:30:e3:32:f2:37:1a:1a:0f:5c:25:1f:e4:
                    7b:53:7b:62:08:38:d2:0a:93:31:80:ff:51:02:c3:
                    12:6b:dc:ad:26:7a:b3:ad:03:00:ef:e8:99:18:21:
                    a7:86:9c:2f:a6:67:a5:5b:95:e2:04:b1:fc:61:1f:
                    9c:3b:c7:74:7d:e0:62:84:38:d8:46:55:29:a7:4f:
                    9e:58:68:d7:77:f9:18:c3:36:d2:7e:15:e3:9c:54:
                    f1:96:08:eb:02:41:bd:b2:89:40:38:cd:b5:3a:3a:
                    5a:65:be:09:69:b5:e2:4e:14:7c:19:36:d2:ff:c2:
                    1b:f8:5b:da:d7:80:ac:f2:85:70:30:26:73:74:ad:
                    3c:af:f7:79:65:60:5a:e5:f7:09:82:69:4a:44:f8:
                    fd:8f:92:c3:5c:29:bc:a9:26:ef:bf:bb:16:7c:3c:
                    e0:29:ab:83:d0:4d:54:7d:c9:84:6e:de:46:42:dd:
                    56:01:5f:db:2a:e8:d5:f0:89:52:66:fc:da:3e:c1:
                    c4:8e:80:6b:e3:cb:29:f7:c5:ad:4a:f7:26:86:52:
                    6a:f5:ed:24:56:60:34:8d:db:b7:cb:aa:51:bf:76:
                    ad:dd:d2:f2:f4:1f:89:91:c2:a8:cc:3d:d9:de:a7:
                    6e:40:38:95:58:4a:93:e1:79:c6:c4:d5:70:fc:08:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:61:05:34:18:B3:3F:80:47:AB:B2:E4:78:48:1F:CC:5D:A7:DA:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae771f74-2147-3ae3-a00c-8c3584555bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2b:ff:8e:9c:5d:af:61:16:74:d5:95:27:ac:f2:d1:2f:04:
         56:9f:d9:6f:e5:40:b2:74:06:88:8a:76:62:1b:76:f7:60:7f:
         5a:68:75:a1:f5:10:5b:06:8f:9e:bc:86:cf:5b:78:64:4c:23:
         bd:b5:8b:bf:2b:04:61:eb:66:07:92:c8:0a:c1:03:57:03:08:
         43:8f:c3:48:45:35:bb:8d:22:16:b0:c6:a7:b5:9d:00:b6:e8:
         52:bb:3a:6b:fa:5a:95:1c:2a:e9:60:48:be:42:83:b5:f2:59:
         cd:4e:b5:2b:b2:8c:97:e6:5f:6f:21:21:e1:ea:4e:78:1d:aa:
         b4:da:7b:13:66:bd:f3:d1:02:0f:20:64:04:41:e6:7e:0f:f2:
         5e:9d:bb:c6:a6:8a:38:4d:06:0c:12:b6:50:25:59:1e:e4:79:
         6a:98:e4:62:ba:e1:f7:04:95:7a:27:70:be:08:a6:75:14:ff:
         1f:47:f3:3f:3d:e5:0c:98:b1:3a:52:17:fb:a0:b4:43:33:23:
         a6:a3:ba:f5:d6:48:a1:02:45:d6:4a:91:a7:86:63:7b:73:e3:
         c8:f4:5c:3d:78:14:5f:d4:62:11:35:56:d3:26:36:88:bf:ad:
         ca:d9:84:de:13:af:94:d5:69:5e:82:44:35:da:1a:66:01:09:
         9e:12:9a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:52:07 2026 by rpki-client