Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1631d4a-c671-3051-84bc-267a04dc9674.roa
File:                     e1631d4a-c671-3051-84bc-267a04dc9674.roa (raw, json)
Hash identifier:          kFS4ihM3DHkPPed17xjOyHTwswmjdgP7xeVlejladp0=
Subject key identifier:   54:F4:FB:2E:5F:87:74:30:48:81:0F:08:AC:5D:4E:B3:E2:7F:DD:68
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C584577EABC044266AC5040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1631d4a-c671-3051-84bc-267a04dc9674.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.236.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:45:77:ea:bc:04:42:66:ac:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=4dd3270e-c97b-4432-933e-0d0a6baf2f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dd:13:98:d3:f0:4f:da:fc:97:d8:69:3c:ea:
                    2d:e0:60:d6:9f:e6:05:48:d2:b5:96:cf:2c:a3:43:
                    17:67:f6:62:e3:0f:6d:80:b3:7c:64:3f:b8:e2:9a:
                    73:47:d8:af:4e:b3:3c:51:25:51:9e:b0:50:7f:a4:
                    e2:fe:7d:28:b2:57:05:73:7d:23:e7:a4:d9:21:8c:
                    5d:e5:13:f8:7c:8d:88:8c:65:79:60:93:98:58:9f:
                    ca:d1:96:cc:7b:fa:20:9c:0d:62:f3:51:eb:41:64:
                    4b:d3:38:bf:c7:e9:90:68:cd:91:97:e3:d9:b1:0e:
                    eb:93:2b:7d:a1:04:8a:bf:d9:25:85:de:49:05:49:
                    33:70:65:da:3e:9c:80:45:91:3d:60:3a:38:42:44:
                    31:06:34:97:7e:c7:0c:39:56:f7:d7:c8:93:be:96:
                    28:7e:68:f6:6d:5b:2a:54:cb:d1:bb:e7:5c:a1:83:
                    d2:7e:e3:64:69:77:3e:05:35:eb:93:c2:6e:5f:19:
                    6f:db:b4:e5:b1:9b:fe:d8:d9:8e:fb:dd:48:1a:bf:
                    74:b3:ab:11:3e:63:d9:85:55:73:88:07:48:c3:c5:
                    de:47:2e:14:9f:ea:71:6c:f9:63:33:58:de:c0:94:
                    da:55:e9:ea:14:a7:1e:eb:e9:bb:9d:b1:02:cc:c4:
                    ff:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:FB:2E:5F:87:74:30:48:81:0F:08:AC:5D:4E:B3:E2:7F:DD:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1631d4a-c671-3051-84bc-267a04dc9674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.236.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cd:6d:31:48:15:99:d4:8f:d1:3f:84:6c:62:90:73:e8:85:
         38:87:e3:41:66:a2:f4:5f:d8:d0:94:f3:d1:49:49:34:f2:9d:
         8e:77:38:65:c7:fd:11:8c:5b:76:e7:45:74:ae:c6:4c:fa:8a:
         4a:64:8b:80:4a:bf:b7:ab:84:73:5c:0c:49:a9:04:d2:2b:2a:
         20:a3:34:ac:74:49:6b:34:57:1d:53:d2:ec:d5:12:80:d1:d4:
         9c:31:ca:14:b1:aa:cb:72:79:e4:d9:8e:2e:16:01:1a:3f:16:
         cd:8f:c5:90:9e:e7:c2:91:89:6c:1b:ef:b3:5c:80:74:b8:be:
         1d:79:1a:6c:92:2c:cd:ab:3c:b0:73:57:2b:14:22:d9:23:23:
         f0:06:fd:bf:a9:41:18:59:7d:48:db:ca:8a:96:c6:f3:17:80:
         2c:33:87:34:f8:a4:0c:94:a2:bd:1e:74:ce:a0:8d:7f:e8:4d:
         21:ab:cd:9e:81:0f:15:19:24:8f:a3:60:f1:65:dc:69:6e:83:
         5e:60:c2:8d:38:f5:6d:c7:84:2a:64:30:da:bf:60:65:8b:5c:
         6d:31:bd:8e:89:65:13:80:c1:5e:52:31:8b:1e:5b:dd:5c:89:
         70:1a:b8:b6:8f:1e:bf:6d:32:a1:7d:75:b6:a1:5f:b8:fe:1f:
         80:4a:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:53:53 2026 by rpki-client