Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa
File:                     b39ec023-ac87-34ae-a387-3c24998f6c03.roa (raw, json)
Hash identifier:          xgIVCCzbgdF+m2ceoY5nv91t8Uyg0nm0vDgFDCHdAlQ=
Subject key identifier:   2F:84:50:FF:8F:6B:42:9D:C1:6B:BF:47:2B:65:BF:6D:38:7F:2F:48
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C58467F5F8A517B726C8240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.238.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:46:7f:5f:8a:51:7b:72:6c:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=e4f946c7-d7e2-4fde-a6d5-14a3d294423f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:83:da:e0:7e:59:29:46:cf:8e:99:4a:c4:
                    04:4b:48:91:7b:c5:7d:8f:6a:7b:2b:ae:16:f8:1a:
                    05:26:a1:e0:49:3e:39:f2:02:f4:ba:31:9f:bb:88:
                    c5:18:1d:74:25:2a:d1:c7:fd:37:20:a2:b8:79:79:
                    b2:4f:a7:78:f5:4f:74:e3:b7:e7:84:73:71:f5:24:
                    fd:f4:70:eb:49:d4:66:30:9c:fb:ce:a5:a0:93:38:
                    06:d3:dd:f8:b9:23:df:6a:18:bc:f4:ae:f5:a9:dc:
                    87:88:a5:8a:67:8f:7b:1f:ba:59:ad:2e:3c:f9:ad:
                    6a:78:d7:a5:7c:b5:1c:d3:fa:f2:2c:ec:10:b7:01:
                    a1:44:e8:7e:10:df:2f:a3:3c:27:ca:34:d2:0d:8f:
                    81:50:1c:39:2b:e4:fd:32:bb:18:1e:63:fc:44:f3:
                    06:b3:bd:d2:20:5d:6d:8d:4b:97:b6:dd:95:41:b8:
                    10:49:2a:ed:51:52:be:7f:88:7f:5d:db:52:3f:55:
                    b2:e9:18:b9:43:40:05:7b:7e:c2:16:1f:06:b6:2d:
                    b7:7e:c2:60:56:8d:53:07:e0:03:02:8a:37:c6:d7:
                    97:4a:f8:60:e8:d1:e2:38:c5:89:95:29:e6:2f:28:
                    66:1a:fe:8f:02:4d:d7:0c:39:7a:20:04:c7:b4:26:
                    49:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:84:50:FF:8F:6B:42:9D:C1:6B:BF:47:2B:65:BF:6D:38:7F:2F:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d9:38:8c:8a:54:cf:d8:06:e9:c5:f8:9b:a9:06:fd:73:01:
         02:fb:33:d1:08:23:d9:2f:17:ed:9c:b4:5e:64:ee:42:9e:05:
         6b:52:21:0e:50:60:24:44:8e:7f:76:03:1c:ab:62:82:20:de:
         5a:97:57:96:fc:83:a2:b0:ce:c9:5b:1c:8d:e5:f9:a5:6e:31:
         42:b7:f6:c1:f9:0c:af:fc:ea:8b:de:90:42:18:cd:99:c1:3f:
         93:3c:5a:db:4e:3c:c1:70:39:24:d1:8f:b7:ad:97:ef:4c:6b:
         ae:3a:35:d1:c2:ed:cb:da:7d:31:85:0a:0f:ed:15:ea:de:94:
         e1:54:b0:1d:15:86:15:a5:f4:34:c6:09:ca:ba:0c:bb:59:aa:
         75:95:f1:ae:ef:71:db:48:6f:6d:6a:98:34:17:82:07:b5:0f:
         69:c6:d5:fc:c1:0f:da:93:ef:43:e4:28:1d:03:93:a4:6e:47:
         43:da:6a:ca:da:b6:1e:e3:31:62:d6:ed:48:8d:10:20:de:44:
         59:f5:30:f2:b5:28:10:6c:40:65:36:13:95:5e:67:92:d8:22:
         04:b2:de:6b:d9:39:a1:ff:a2:1c:25:cb:ec:97:e3:d9:ce:66:
         6a:58:1a:af:50:49:88:13:ed:18:51:74:7e:6b:f0:cf:87:d2:
         29:d6:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:23:09 2026 by rpki-client