Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288dd17e-9057-3ee0-9070-328fb42771bf.roa
File:                     288dd17e-9057-3ee0-9070-328fb42771bf.roa (raw, json)
Hash identifier:          PciNIQ+kwpgXCNJvVcwUE9AKeJbxL7McynI1OrYfcDo=
Subject key identifier:   EC:2C:B4:F2:F0:06:78:52:2C:20:6D:EF:F3:A5:0C:E3:DD:E2:54:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C5845CF2D5D7E1263C7B1C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288dd17e-9057-3ee0-9070-328fb42771bf.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.236.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:45:cf:2d:5d:7e:12:63:c7:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=ee2530bc-0c70-4faf-a6b4-0c96497963db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:1b:ab:fc:be:0f:77:fc:b5:96:27:1e:b7:
                    15:1b:e0:19:00:2f:ef:f7:68:41:15:ad:fd:fb:de:
                    6c:8e:9e:3b:04:21:01:19:ca:f6:7f:a3:75:31:48:
                    a5:18:97:fe:3c:00:d1:c6:72:52:4a:7a:9d:fd:88:
                    21:b7:9d:a5:ec:d1:82:b6:cc:42:47:83:61:3b:2e:
                    ec:81:18:33:3c:3a:c6:36:aa:a6:df:2d:8d:f3:c4:
                    f6:bf:43:b3:60:d6:b7:0c:11:3e:0e:e8:04:9b:9c:
                    d1:60:1c:d7:dc:df:4a:5d:39:c2:01:99:6e:63:cc:
                    21:72:88:12:67:0f:ef:c1:79:3f:68:59:c6:d4:6a:
                    38:81:9b:ba:8b:20:51:10:97:5d:9c:3c:0a:6f:d1:
                    cb:04:16:41:6e:57:84:cf:52:bc:d5:77:6d:58:e0:
                    3d:2b:64:64:f6:ce:54:61:65:df:30:47:d0:f4:49:
                    3b:b5:ab:2b:26:16:c9:57:7b:70:4a:15:2f:69:51:
                    3b:95:6a:15:8e:e8:0d:51:14:c5:06:34:d5:3e:98:
                    38:aa:6a:2b:b2:0e:79:4f:82:fe:6e:d2:77:35:ba:
                    d3:42:59:15:9d:61:30:0d:68:83:39:e6:b8:d8:4b:
                    77:b5:a4:72:e1:44:3e:f8:2f:92:a0:1e:91:55:79:
                    da:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2C:B4:F2:F0:06:78:52:2C:20:6D:EF:F3:A5:0C:E3:DD:E2:54:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288dd17e-9057-3ee0-9070-328fb42771bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.236.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:09:14:91:fa:2e:1b:62:11:7a:71:99:76:6c:ac:87:7f:bd:
         f0:13:97:b3:20:b5:be:fb:75:6c:97:96:6e:06:9c:2c:5f:ac:
         db:53:0c:ae:45:b0:3e:5e:f1:13:8c:10:50:16:6f:b8:36:36:
         ae:e7:ab:c7:63:11:2f:74:df:e8:8c:bd:f5:71:fe:45:92:be:
         62:7d:09:4f:5c:a0:cf:34:a6:18:fe:79:99:38:bd:19:fb:5b:
         33:0f:50:f1:9f:a7:6b:85:68:73:f0:fb:92:e9:f1:25:40:7f:
         49:61:a8:76:05:8a:fa:c3:d0:45:4b:f3:df:b5:d0:0f:4b:14:
         3a:71:87:16:0b:be:62:23:f2:0e:a4:e4:62:7b:22:07:e7:6a:
         70:33:f9:9f:2b:13:dc:d4:08:4b:e6:ab:d3:9f:36:2f:ba:c1:
         e7:00:c8:50:77:8b:35:0d:11:6b:4e:f5:02:98:55:86:97:a5:
         c5:73:62:ce:bd:c6:b8:e9:55:20:90:18:73:9d:14:41:75:e9:
         a6:05:a4:99:9f:9f:79:26:36:d5:05:1c:fd:0d:46:44:c5:91:
         55:a2:72:cd:2f:29:e9:30:aa:71:71:4a:a3:9a:c0:43:d8:ab:
         a0:76:ec:e6:46:cf:48:67:87:b8:09:b0:3c:c6:ad:aa:8d:cb:
         d0:03:32:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:04:29 2026 by rpki-client