Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2233ba0e-f7fb-3f3d-8ae3-7118f48a3e49.roa
File:                     2233ba0e-f7fb-3f3d-8ae3-7118f48a3e49.roa (raw, json)
Hash identifier:          ZQBzuBE00RGTSDaO1gAncpDg6ow3PMajXfDmlQyagFg=
Subject key identifier:   1D:3F:4B:A8:38:24:A4:35:1D:C4:84:E5:CF:D5:79:F3:29:FB:51:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F71EDB48F448F4D8EB28BF440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2233ba0e-f7fb-3f3d-8ae3-7118f48a3e49.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     22394
IP address blocks:        174.41.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:b4:8f:44:8f:4d:8e:b2:8b:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=65796f3f-1a92-495b-b127-b677ccce024b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:fd:37:6f:48:b0:00:5c:ec:72:73:4b:b0:
                    1f:40:37:8f:52:31:8c:70:61:7e:97:b2:65:83:32:
                    ab:11:d8:00:cd:cb:8f:68:76:62:3c:69:88:28:0c:
                    8e:00:35:02:da:ef:b7:ba:d7:70:47:a0:18:d4:78:
                    3e:69:ed:87:1e:a2:4c:7f:ea:88:1e:e5:82:1d:8a:
                    59:2a:c2:b7:a9:a0:fd:3a:eb:b1:2a:c7:11:26:3e:
                    0f:4b:a2:8d:09:99:6c:59:32:04:c0:53:ca:a1:02:
                    e5:66:04:e3:71:bf:72:d2:41:49:c1:c1:30:df:36:
                    d0:2d:1d:7f:fc:11:7f:e6:b5:c1:e6:64:66:16:51:
                    82:3c:c7:e5:08:a6:6b:4c:b4:8b:d0:e7:0e:b0:fb:
                    08:dd:3c:cb:14:00:a9:12:34:5e:bb:1f:56:88:70:
                    8a:66:7e:fc:c5:68:59:b4:4c:e3:41:c0:f5:6d:39:
                    e6:a0:2a:3e:ee:83:ac:68:aa:38:3e:4f:0c:79:34:
                    88:82:ac:f8:0f:8f:65:b2:20:27:a4:f8:c5:c5:31:
                    fc:a7:46:cf:aa:ba:0a:da:d0:37:d7:3a:7e:3e:b3:
                    c3:22:32:4c:3a:97:70:b3:aa:28:8d:69:90:97:52:
                    64:cc:0f:67:48:e2:04:5c:cc:01:c8:b2:09:26:ac:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3F:4B:A8:38:24:A4:35:1D:C4:84:E5:CF:D5:79:F3:29:FB:51:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2233ba0e-f7fb-3f3d-8ae3-7118f48a3e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:af:55:62:27:15:8d:13:65:7c:86:3a:6f:9a:35:46:f0:11:
         ad:3e:82:05:d4:8d:32:2d:e8:14:9a:06:21:8e:79:ba:cf:94:
         ce:c3:24:f2:ee:da:9e:db:e1:31:10:bc:88:d8:76:ed:98:e0:
         2f:de:3b:b3:25:43:d6:a1:19:81:48:da:8a:3f:ed:d8:c3:f6:
         53:80:94:f5:db:06:80:f8:6f:81:db:1b:d7:5d:c1:fa:d2:43:
         47:bc:21:06:16:88:a9:1e:f2:c8:3c:30:e9:00:48:e7:a5:18:
         03:10:79:b8:40:29:5c:18:df:43:54:7f:d1:82:8e:71:35:3a:
         52:f9:aa:c9:a0:24:c1:eb:cf:bb:08:41:d2:8b:8d:2a:22:79:
         a0:f7:e6:65:ea:34:16:50:2a:46:08:22:8c:a6:2e:a1:bb:bd:
         86:af:e0:78:c5:16:28:f4:31:bf:26:d0:04:dd:49:51:9a:7f:
         58:8f:0a:dd:f2:0b:d6:21:0d:6c:62:95:ea:ab:6d:26:c6:02:
         e4:61:d4:6a:98:85:54:ee:a0:af:69:6e:ec:31:6d:1f:01:0f:
         75:69:33:25:42:2c:aa:c5:ea:66:0a:5c:2c:0f:ba:83:8f:23:
         d0:21:59:3f:c8:c7:9e:f9:c0:b8:f6:e8:8a:52:02:e4:21:90:
         f5:cf:64:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7bSPRI9NjrKL9EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
NjU3OTZmM2YtMWE5Mi00OTViLWIxMjctYjY3N2NjY2UwMjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dX9N29IsABc7HJzS7AfQDePUjGMcGF+l7Jl
gzKrEdgAzcuPaHZiPGmIKAyOADUC2u+3utdwR6AY1Hg+ae2HHqJMf+qIHuWCHYpZ
KsK3qaD9OuuxKscRJj4PS6KNCZlsWTIEwFPKoQLlZgTjcb9y0kFJwcEw3zbQLR1/
/BF/5rXB5mRmFlGCPMflCKZrTLSL0OcOsPsI3TzLFACpEjReux9WiHCKZn78xWhZ
tEzjQcD1bTnmoCo+7oOsaKo4Pk8MeTSIgqz4D49lsiAnpPjFxTH8p0bPqroK2tA3
1zp+PrPDIjJMOpdws6oojWmQl1JkzA9nSOIEXMwByLIJJqzK4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0/S6g4JKQ1HcSE5c/VefMp+1GsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjIzM2JhMGUtZjdmYi0z
ZjNkLThhZTMtNzExOGY0OGEzZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrim4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+vVWInFY0TZXyGOm+aNUbwEa0+ggXUjTIt6BSaBiGOebrPlM7DJPLu
2p7b4TEQvIjYdu2Y4C/eO7MlQ9ahGYFI2oo/7djD9lOAlPXbBoD4b4HbG9ddwfrS
Q0e8IQYWiKke8sg8MOkASOelGAMQebhAKVwY30NUf9GCjnE1OlL5qsmgJMHrz7sI
QdKLjSoieaD35mXqNBZQKkYIIoymLqG7vYav4HjFFij0Mb8m0ATdSVGaf1iPCt3y
C9YhDWxileqrbSbGAuRh1GqYhVTuoK9pbuwxbR8BD3VpMyVCLKrF6mYKXCwPuoOP
I9AhWT/Ix575wLj26IpSAuQhkPXPZE4=
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:51:26 2026 by rpki-client