Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aee11c08-7089-348a-b93f-9dfd274ffd68.roa
File:                     aee11c08-7089-348a-b93f-9dfd274ffd68.roa (raw, json)
Hash identifier:          HXafsNGPs//YoNFIhARDc7ErBqK0JIID7WYbCHAX9kw=
Subject key identifier:   66:DE:DD:FF:94:71:90:3E:A2:03:6A:26:45:AF:B4:CE:53:3F:B0:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ED00206DA26EFBBA2ACFCF380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aee11c08-7089-348a-b93f-9dfd274ffd68.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.42.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:06:da:26:ef:bb:a2:ac:fc:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=50d6c6fe-e156-4de4-8e6e-96f3c4230053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:84:7e:9d:23:da:f7:a9:6f:d5:3a:76:27:
                    d5:e2:0b:d8:08:6e:ea:5d:07:80:fa:6c:da:de:10:
                    a1:09:33:9a:46:ac:2a:0f:57:9a:2e:4f:29:24:cf:
                    e2:72:93:20:49:9c:ee:4a:98:e4:e7:57:1c:e4:23:
                    67:4a:61:a1:7c:df:7a:f4:3c:ae:e2:75:21:2c:a2:
                    78:69:3e:93:0d:29:20:81:46:ae:c6:03:b5:c5:fd:
                    31:5b:17:a7:88:f9:7d:3b:f4:fa:1d:e0:91:37:70:
                    34:11:33:96:b9:ab:ce:5e:b3:fd:c9:9d:7e:86:2a:
                    b6:c8:40:b4:14:61:d5:0a:48:52:52:c2:57:e5:88:
                    c6:6f:78:26:6f:fa:0a:e9:90:14:a4:d5:c1:8e:36:
                    3e:c2:5e:61:01:66:2f:9f:34:ee:5b:b8:15:d4:bd:
                    d1:84:e6:15:0d:37:29:6e:35:52:6e:8b:6e:1e:c9:
                    0e:24:98:08:23:c5:ea:22:d2:2a:6d:79:00:6f:bc:
                    7f:f3:31:63:23:bb:2a:86:e6:08:94:ce:e8:7f:cb:
                    cd:6a:6d:f2:aa:5c:62:47:4c:84:02:16:49:f9:84:
                    f3:9f:d3:78:b8:e2:b7:fe:4d:55:32:fe:06:dc:b8:
                    00:2f:b8:9b:b8:0f:94:f5:7f:10:6d:3c:e0:6c:77:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DE:DD:FF:94:71:90:3E:A2:03:6A:26:45:AF:B4:CE:53:3F:B0:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aee11c08-7089-348a-b93f-9dfd274ffd68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:91:a1:80:de:28:bf:07:7c:78:d1:54:1a:e7:3e:4f:a1:f9:
         88:c1:c3:c3:63:b3:aa:6d:89:3a:44:7e:e5:cd:60:80:33:02:
         5e:70:c9:84:97:20:a4:d1:fe:fc:de:4c:a8:b1:a1:ad:88:bf:
         90:a1:f6:33:77:45:8a:2b:5c:54:fa:0d:df:29:a2:14:0c:db:
         6d:4f:38:49:18:22:42:b4:b9:3b:d6:7d:c2:8d:52:46:fb:f2:
         c7:c5:94:62:49:44:ca:a5:4c:f8:dc:b1:07:f3:de:3b:03:7c:
         a6:67:b1:35:5e:6b:25:e5:bc:47:f7:2e:bc:2c:05:5a:5a:f8:
         85:af:97:21:90:e6:60:fd:73:b2:70:82:c3:c0:37:6a:26:2d:
         95:d5:cc:03:3e:7d:a7:d0:64:f8:19:6e:b8:fb:18:76:73:20:
         5b:a4:e2:b5:99:10:20:4a:91:54:58:d4:1c:c1:e4:b3:00:07:
         91:47:9a:27:d1:cd:96:e6:22:7d:35:72:73:ad:34:72:46:fd:
         cc:fa:2e:33:f2:8b:fe:5e:d4:49:fd:d4:0b:26:10:00:44:ed:
         21:ba:11:14:77:0a:05:21:c0:52:92:41:ae:cc:36:86:4c:56:
         57:60:62:90:4d:37:88:b4:7d:33:40:24:07:d4:3a:f9:2d:5f:
         24:c8:61:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:15:52 2026 by rpki-client