Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da83e155-a2fd-3dd4-84ff-a8f49a447084.roa
File:                     da83e155-a2fd-3dd4-84ff-a8f49a447084.roa (raw, json)
Hash identifier:          RH50mB/9TWO3OR2TGCYwqLtFlc8QHwBh5hjl32JrhV8=
Subject key identifier:   EE:45:E0:47:8F:FE:4E:6F:F7:D0:D5:F0:1D:77:62:B8:A7:27:91:D5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6201FBE9461620ED72ED7C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da83e155-a2fd-3dd4-84ff-a8f49a447084.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        173.26.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:fb:e9:46:16:20:ed:72:ed:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=4b16c7e0-4b74-417b-9922-b0c0c26c4148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:8c:df:5d:63:84:a7:66:a9:ee:d5:05:98:
                    f3:42:d2:27:f0:df:11:e4:6f:03:64:bb:57:50:a7:
                    e5:6f:28:4c:e6:1e:f0:d9:03:ab:d1:c0:20:95:24:
                    2c:f8:8e:b9:43:af:e3:ee:50:2f:52:b9:5a:82:fe:
                    bd:92:8f:4f:20:94:ca:b0:84:f8:8f:8f:e0:a9:d7:
                    22:34:1f:36:41:7f:fb:3a:32:45:ef:56:b8:31:1b:
                    e7:d8:dd:b0:f0:e7:53:d1:b4:30:74:f7:b1:19:b8:
                    03:5e:ad:ea:ce:d1:d4:45:f4:33:59:b6:56:04:91:
                    ec:c0:75:8b:17:35:4f:7e:7d:7d:de:ca:c2:a5:b9:
                    f5:fa:27:da:d6:21:37:40:2a:d2:3f:2a:0a:58:f5:
                    b8:c2:b2:67:51:3e:cd:20:e8:56:34:d1:8e:13:d0:
                    84:13:98:f4:36:df:b9:6c:69:2b:65:65:5b:26:d6:
                    bc:ee:44:2b:aa:e1:86:2c:17:64:26:75:65:a5:1b:
                    18:a5:f8:65:7a:ef:10:c4:c1:53:47:1e:97:e2:35:
                    3e:f6:40:57:7c:7c:8e:e3:cb:a4:75:e6:17:0b:40:
                    3f:c8:dc:b1:3b:b7:ae:be:10:88:2b:3d:81:67:6a:
                    25:36:67:97:b9:99:c1:45:08:e0:59:7c:87:86:f4:
                    23:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:45:E0:47:8F:FE:4E:6F:F7:D0:D5:F0:1D:77:62:B8:A7:27:91:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da83e155-a2fd-3dd4-84ff-a8f49a447084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7f:78:52:cf:23:38:a6:a5:06:4a:7c:23:50:d5:95:7e:61:
         70:b2:cc:68:ed:e5:8a:b2:65:d1:a7:d8:df:e1:31:3e:86:1f:
         5c:31:ee:e9:94:a6:ff:61:85:ee:4c:41:8f:dd:04:fb:de:5f:
         cd:97:3e:f3:bc:9d:0f:76:68:f5:21:dd:e5:be:16:f1:28:32:
         a7:b7:d5:c0:67:2f:9e:63:64:03:f9:ce:3b:bb:64:56:64:25:
         d6:f9:97:86:85:a1:7f:aa:89:ae:50:7d:a6:1b:87:1d:a3:82:
         ca:96:39:07:b6:fb:18:a1:de:0a:95:69:5a:bc:71:24:fe:f3:
         23:61:c2:f3:90:73:13:71:3d:66:7e:75:80:6d:d1:ef:e6:53:
         49:66:cf:a9:d8:79:1e:cc:68:d1:4b:02:33:7e:b7:53:ee:ac:
         2c:80:7b:0d:74:c7:b4:dc:b3:f4:9c:80:2b:f0:56:40:ae:9a:
         e3:58:a2:a4:25:d1:13:48:f3:e4:c5:52:aa:63:65:c9:bc:d3:
         1e:b7:1e:e8:cc:df:a5:a5:cd:0a:2a:d0:12:9d:fc:37:32:ce:
         97:fe:21:19:3f:21:1c:cf:76:84:a2:55:a8:ce:7a:bc:b9:30:
         1c:8e:ef:f6:ee:57:19:de:db:29:84:2f:c7:8e:1d:4d:63:7f:
         5b:f5:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:06 2025 by rpki-client