Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa
File:                     d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa (raw, json)
Hash identifier:          AvdHBzOEiv4VyaMohsFvidtOzqy4XwY9Hc5h+lEp3tA=
Subject key identifier:   F0:3E:DC:E9:74:27:C5:51:B7:86:46:5A:28:B3:30:F1:66:7F:FA:05
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ED001FD710513D8304A489F60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     22394
IP address blocks:        174.41.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:fd:71:05:13:d8:30:4a:48:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=4cb4f770-30f3-4220-bcdd-7c4b4f09d372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:12:b6:54:41:63:f1:66:7a:49:1a:ee:32:37:
                    f1:d3:d7:30:0a:e4:f8:f7:2b:b0:44:ea:dd:87:9f:
                    8c:1d:33:78:c2:a6:8d:63:9c:4b:a3:1b:a7:a7:31:
                    61:21:ba:02:b2:30:29:5c:09:fa:a0:c3:1f:5e:23:
                    0e:21:82:af:6b:da:25:2b:0a:13:1b:26:50:24:b5:
                    81:b9:4c:b4:c9:80:7e:64:a3:74:eb:54:c4:a0:22:
                    0e:70:09:0b:31:dc:a6:36:79:4c:d2:6e:d6:a1:9d:
                    50:04:40:da:01:be:81:5a:a1:57:56:ac:99:be:93:
                    4b:0d:aa:b0:91:2c:11:6c:8c:22:39:fc:f8:4f:e8:
                    4e:48:57:26:df:44:ba:d5:eb:1e:0f:0f:55:3a:91:
                    9b:ea:10:b1:2c:e2:e5:88:7f:c3:41:a0:99:1d:24:
                    7b:ce:28:a5:9a:3e:08:d7:fa:3d:4b:3d:3c:aa:cc:
                    cc:f9:59:8e:86:7e:f1:de:b3:df:f4:04:01:9f:49:
                    f0:7b:fc:8e:cd:0b:03:85:98:09:48:45:ae:54:01:
                    32:35:54:f3:85:c5:c3:c7:a5:f9:93:12:89:09:f1:
                    fe:7e:93:e4:5b:5f:c7:31:62:7f:76:17:2f:ff:ed:
                    70:eb:e7:6b:49:28:f1:83:d3:84:4c:36:ad:53:0a:
                    d0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3E:DC:E9:74:27:C5:51:B7:86:46:5A:28:B3:30:F1:66:7F:FA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3348a82-2109-3951-aaf8-2f9a8d1a8759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:97:ef:45:15:56:77:c1:da:ec:38:68:64:b8:89:80:48:53:
         9e:3a:01:d6:77:3e:f9:12:99:c8:eb:94:64:3d:48:79:84:74:
         64:2a:4f:05:3d:f6:c0:9a:8e:63:07:5f:7e:80:ca:24:2d:07:
         3e:3a:fd:b2:c5:57:09:be:ca:0d:7a:b0:d2:25:fa:63:0d:c5:
         a1:82:09:6b:91:6c:08:fe:c4:ba:1a:0f:19:99:df:b2:05:64:
         c4:a1:f6:1c:2a:ac:56:94:17:ea:b3:65:1a:c2:e9:f4:b7:9c:
         da:20:54:44:18:f5:98:24:a0:d9:36:22:49:ff:40:c3:92:a6:
         88:19:d2:eb:14:a6:c7:78:1b:98:0c:2f:7d:6a:7a:3b:2a:7f:
         09:0c:f8:3d:1f:41:3d:9b:01:f5:33:b5:4d:0f:e7:cf:c9:97:
         a1:7e:d6:98:cb:01:9d:ed:90:0e:d2:02:80:34:3d:b7:3f:1b:
         1e:23:de:1a:4e:ca:1f:e6:a9:ac:ec:d9:7a:0c:e3:1e:e1:72:
         e2:d4:cd:9c:bc:33:99:79:02:16:4f:91:a5:aa:98:9d:0c:d2:
         5d:b3:51:b3:93:6d:1d:a7:4e:22:e4:d1:c2:95:28:cf:c4:7a:
         50:b2:bc:0d:31:88:1c:0a:90:bf:b5:eb:9d:81:ac:2c:de:b0:
         a4:a1:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:02:58 2026 by rpki-client