Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780397e2-11b6-3433-86d2-c8c2b5876efb.roa
File:                     780397e2-11b6-3433-86d2-c8c2b5876efb.roa (raw, json)
Hash identifier:          cirCB8LwvaeYWF8XDI87a7xxj3YVmC5Rx1/tdy39O70=
Subject key identifier:   1E:09:E6:79:AD:27:9A:7B:CB:90:30:6B:BB:74:0A:5E:4C:62:87:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F076A877DB670B2735A9D
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780397e2-11b6-3433-86d2-c8c2b5876efb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.219.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:07:6a:87:7d:b6:70:b2:73:5a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b5bb8dd3-e671-4be2-8f45-73269886aab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:a7:1f:83:07:59:5b:8d:48:94:de:b8:5f:
                    a3:24:f3:38:5b:12:7b:b2:22:46:88:6d:22:3f:e7:
                    de:14:c3:32:60:ea:2e:4b:e1:75:fb:d7:04:07:aa:
                    56:40:52:55:25:7f:e3:a8:df:a9:95:7c:f5:2d:d8:
                    37:83:d3:ad:86:b5:2b:5b:9f:05:5c:45:e0:2b:a5:
                    61:16:bd:d4:19:46:2a:e3:7f:d0:95:31:cd:08:0b:
                    2d:98:c7:89:35:e0:08:8c:1d:dc:1f:e5:07:e4:13:
                    e6:2d:f8:92:80:18:5c:60:56:df:86:ab:88:41:57:
                    02:88:e6:cd:5c:90:4e:2d:d1:9a:7c:81:fa:c6:18:
                    61:90:e6:ac:f0:02:f1:d1:e4:12:e3:bf:fa:76:f9:
                    0c:96:5b:20:fa:2e:2b:50:e3:b5:fd:1c:08:c4:b5:
                    64:d9:b0:5d:24:3d:f0:75:40:64:8f:5b:21:96:a9:
                    dd:1d:9c:ae:29:ee:1b:87:bf:a0:02:d6:f6:e0:43:
                    6c:1b:45:cb:bb:cb:d9:66:36:cb:4d:c9:de:71:a9:
                    82:45:d0:e8:aa:a6:76:b9:84:a2:0a:0e:9a:45:68:
                    d4:4f:0c:a7:9b:86:3c:72:20:bf:c8:62:c9:88:02:
                    e9:6d:78:42:31:50:f3:7f:bf:a3:2d:59:e3:88:6f:
                    79:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:09:E6:79:AD:27:9A:7B:CB:90:30:6B:BB:74:0A:5E:4C:62:87:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780397e2-11b6-3433-86d2-c8c2b5876efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:4c:17:bb:99:1b:69:a7:11:88:3c:5e:c3:b7:68:7b:23:19:
         4c:ca:01:af:4a:38:19:16:19:81:50:4b:4c:de:20:10:46:5a:
         fb:20:6f:b6:0a:3f:cb:4b:54:db:64:6c:53:89:72:32:11:dc:
         ae:45:09:e0:24:47:13:6d:34:47:1f:bc:a4:9c:7f:bf:39:9c:
         57:fb:b8:d3:05:c4:25:17:55:c7:7f:f9:58:59:c0:f9:01:85:
         bf:9e:a1:a9:10:9d:be:c7:0f:8b:93:b5:25:18:06:74:8b:86:
         32:3f:02:6e:bc:33:9a:37:4d:09:c7:a3:a0:d2:55:aa:e3:a9:
         c0:76:11:0a:29:30:b2:39:67:3d:b7:9b:91:7b:50:67:11:c5:
         6d:7f:d9:c6:f7:85:85:c5:c2:23:4b:52:99:2d:f3:32:7d:f1:
         47:a7:3b:d8:9e:e1:1a:a7:94:ea:38:bc:f9:a1:86:74:c8:fd:
         87:f9:91:eb:98:8d:3f:b1:16:73:1e:46:1b:f5:f6:79:ac:21:
         a0:36:54:70:a8:03:e5:2b:e0:1d:02:94:0e:db:35:80:f8:d0:
         db:5d:5d:1a:67:59:56:e3:9f:21:7a:ae:6e:0a:a4:1e:fe:98:
         96:72:55:54:f7:7c:bb:aa:a5:eb:de:5c:df:b3:05:64:a0:dd:
         f9:5a:9c:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfwdqh322cLJzWp0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjViYjhkZDMtZTY3MS00YmUyLThmNDUtNzMyNjk4ODZhYWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzmnH4MHWVuNSJTeuF+jJPM4WxJ7siJGiG0i
P+feFMMyYOouS+F1+9cEB6pWQFJVJX/jqN+plXz1Ldg3g9OthrUrW58FXEXgK6Vh
Fr3UGUYq43/QlTHNCAstmMeJNeAIjB3cH+UH5BPmLfiSgBhcYFbfhquIQVcCiObN
XJBOLdGafIH6xhhhkOas8ALx0eQS47/6dvkMllsg+i4rUOO1/RwIxLVk2bBdJD3w
dUBkj1shlqndHZyuKe4bh7+gAtb24ENsG0XLu8vZZjbLTcnecamCRdDoqqZ2uYSi
Cg6aRWjUTwynm4Y8ciC/yGLJiALpbXhCMVDzf7+jLVnjiG95HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4J5nmtJ5p7y5Awa7t0Cl5MYocrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzgwMzk3ZTItMTFiNi0z
NDMzLTg2ZDItYzhjMmI1ODc2ZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrtsoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtMF7uZG2mnEYg8XsO3aHsjGUzKAa9KOBkWGYFQS0zeIBBGWvsgb7YK
P8tLVNtkbFOJcjIR3K5FCeAkRxNtNEcfvKScf785nFf7uNMFxCUXVcd/+VhZwPkB
hb+eoakQnb7HD4uTtSUYBnSLhjI/Am68M5o3TQnHo6DSVarjqcB2EQopMLI5Zz23
m5F7UGcRxW1/2cb3hYXFwiNLUpkt8zJ98UenO9ie4RqnlOo4vPmhhnTI/Yf5keuY
jT+xFnMeRhv19nmsIaA2VHCoA+Ur4B0ClA7bNYD40NtdXRpnWVbjnyF6rm4KpB7+
mJZyVVT3fLuqpeveXN+zBWSg3flanD4=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:42:20 2026 by rpki-client