Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde3be6c-297e-39c4-9a9b-d08952bb11cf.roa
File:                     dde3be6c-297e-39c4-9a9b-d08952bb11cf.roa (raw, json)
Hash identifier:          YENw1Iab3zNjbuXt7+13tLqIqoPeCGzWuegDCSuFsXY=
Subject key identifier:   E8:2E:7C:94:23:46:B7:FB:B1:22:FC:C3:6A:B4:BA:C5:57:92:FF:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F20F7A0628D3ECD984E41EF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde3be6c-297e-39c4-9a9b-d08952bb11cf.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.220.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:a0:62:8d:3e:cd:98:4e:41:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=9fe70cc5-3f6d-4179-8fab-82111b844658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:bf:95:ad:73:fe:2f:47:9b:0d:03:63:95:
                    92:86:79:d1:d7:7f:8f:a3:47:49:4b:96:45:92:ae:
                    d2:87:bc:c2:10:9e:a4:5f:22:96:7c:53:52:c3:76:
                    10:9e:7a:26:38:ff:d2:67:fd:b3:98:a6:b5:9c:b0:
                    6c:4b:10:b0:b0:bd:b3:0b:26:c1:08:f5:4a:9e:71:
                    3a:8a:20:52:bc:7c:bb:52:81:08:fd:e9:cd:a7:40:
                    e5:13:09:4a:5e:0c:76:f8:a7:f9:f0:af:d7:f6:58:
                    00:66:c5:a6:b9:0c:81:e0:0f:8c:8c:35:30:e2:82:
                    fc:fd:4b:e7:d5:cc:97:7b:d0:2f:d7:9a:98:9d:d1:
                    8f:44:15:70:25:a6:3b:9b:b1:8e:57:b8:cd:17:0c:
                    1b:f3:86:f7:d2:67:33:65:b8:7b:2a:c5:44:66:7a:
                    41:f8:7f:d6:ea:8e:82:16:b4:c1:c0:3a:c1:78:f3:
                    05:e3:6e:75:ce:88:a2:8a:e2:06:99:f9:63:82:68:
                    30:12:b9:9b:e5:8c:a2:c5:12:aa:02:4c:ce:2f:c6:
                    88:a1:18:35:01:29:e8:6b:80:3a:47:a1:2a:20:85:
                    e0:72:2c:60:65:2a:4e:8a:f1:2f:08:51:e9:ca:14:
                    70:d7:d8:23:a9:e6:90:68:4b:0c:28:45:07:88:2b:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2E:7C:94:23:46:B7:FB:B1:22:FC:C3:6A:B4:BA:C5:57:92:FF:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde3be6c-297e-39c4-9a9b-d08952bb11cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.220.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:95:c5:6d:ac:ce:2f:6c:66:56:a5:00:8f:1d:c7:79:f7:
         29:cc:5b:7d:b4:e2:23:0a:3a:71:f4:0a:5d:fb:c6:fd:21:64:
         c7:11:3d:e2:dd:36:e6:31:97:c3:c8:33:55:d3:8f:13:a6:ca:
         a4:38:f6:5c:c9:c7:99:49:49:db:1c:9a:69:30:26:84:ea:55:
         bf:e6:ef:5d:16:2d:a7:1e:a2:bb:a1:63:6b:a5:2b:f3:16:bf:
         66:36:7c:5c:fa:8f:4e:63:1e:1c:3d:48:ec:8e:ad:aa:b0:9f:
         04:34:5c:a8:3f:c3:48:7e:4b:eb:99:b5:c1:db:09:af:07:14:
         a6:f0:b9:5d:61:60:f6:9f:5f:c9:47:e4:30:f3:07:55:e5:20:
         5a:7c:b5:6c:41:4e:99:77:fa:cc:14:2b:83:64:cd:ac:03:80:
         67:9c:dc:02:7e:3d:0a:1c:33:d0:6c:db:32:ff:5e:fa:b2:28:
         87:0c:3d:69:06:8f:78:ab:77:55:83:c2:99:3a:7d:1b:f9:d7:
         0f:8c:32:1a:78:5a:f3:5c:59:f4:38:c0:b5:97:85:50:ef:c5:
         cd:90:85:ee:9b:f6:1b:ce:03:50:ef:6c:30:cb:c0:8c:65:28:
         fd:84:c2:c7:8c:1b:e5:ba:02:c4:e0:27:96:1c:f9:68:56:b9:
         8a:00:fd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:07:40 2026 by rpki-client