Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0912f52b-1993-3b65-af93-553d90bb1b71.roa
File:                     0912f52b-1993-3b65-af93-553d90bb1b71.roa (raw, json)
Hash identifier:          DIQxXf84Z6bq+93uC15oPZ8lxT8O9PL5sGMg2qycUvU=
Subject key identifier:   15:AC:9C:E0:0F:AB:B4:42:2C:93:C6:A3:C4:85:CD:28:09:5D:ED:55
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DB10A9CF96E0FB5A349671500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0912f52b-1993-3b65-af93-553d90bb1b71.roa
Signing time:             Fri 01 May 2026 18:01:02 +0000
ROA not before:           Fri 01 May 2026 18:01:02 +0000
ROA not after:            Thu 30 Jul 2026 18:01:02 +0000
asID:                     19905
IP address blocks:        173.20.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:0a:9c:f9:6e:0f:b5:a3:49:67:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  1 18:01:02 2026 GMT
            Not After : Jul 30 18:01:02 2026 GMT
        Subject: CN=c7b7c60b-0651-4789-816f-c130e96b3240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:ba:e5:08:17:52:04:9e:a6:78:7d:89:32:
                    24:e6:7a:df:b2:53:f8:25:1d:40:75:0a:ea:0e:e9:
                    fc:01:fd:ad:b2:ec:b0:b3:c2:4d:cc:b5:60:05:b6:
                    1f:d8:37:8d:4b:fb:34:82:06:e3:62:4b:d9:32:04:
                    ed:e7:48:85:a9:1a:5e:d0:1f:42:3c:22:b5:47:22:
                    7b:07:43:9a:4f:ad:f3:83:5a:4e:ed:43:74:ba:7a:
                    93:48:2e:07:15:09:d7:01:3f:37:e3:b2:ad:86:67:
                    dd:f0:7c:06:05:62:ee:64:ee:20:89:97:93:e3:cd:
                    1e:31:bd:a4:85:05:29:81:fe:0a:5b:1a:7c:2b:b7:
                    63:bd:72:2c:bc:8f:f9:25:5d:bc:d1:74:5c:10:3a:
                    1d:17:a2:e9:7c:d3:05:94:cb:8a:30:0f:2d:34:93:
                    5c:7d:c5:d7:61:2f:f8:48:93:b4:1a:bb:6c:7c:b6:
                    51:ad:3e:09:38:1e:f4:0b:29:17:88:b8:8c:1a:57:
                    96:cc:e4:2f:50:c2:50:aa:fd:16:78:37:c3:fb:72:
                    56:88:39:c8:62:d5:10:15:3d:dc:bd:af:cd:02:6b:
                    bf:b7:83:66:7f:3a:7a:8c:31:9f:07:8f:47:47:32:
                    f5:6b:f1:78:5a:31:17:f7:05:da:c4:bf:a6:5c:83:
                    19:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AC:9C:E0:0F:AB:B4:42:2C:93:C6:A3:C4:85:CD:28:09:5D:ED:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0912f52b-1993-3b65-af93-553d90bb1b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:fa:5d:3d:70:ac:ae:9a:68:de:6a:97:ba:bd:99:a3:1e:
         7d:a3:a5:61:bf:9b:a0:13:4f:42:4b:8e:96:b0:02:bc:cd:19:
         33:11:61:bd:7e:4e:67:07:95:18:6f:fa:e4:e2:79:16:00:2d:
         1d:ab:6d:3b:2e:2d:8b:1c:a5:0b:88:3c:79:2d:c1:b0:33:4e:
         16:40:ec:ba:8d:d8:e2:72:25:b3:30:dd:04:73:b3:d9:3d:6e:
         7c:27:69:d7:45:af:73:13:89:50:ed:3d:73:32:bd:9c:64:e9:
         e5:71:3a:d2:53:4f:bd:f6:ff:ac:ac:d0:dd:fd:00:1f:66:55:
         4e:7b:c4:20:0b:2f:d8:ae:52:72:89:b4:4a:c5:6c:c9:1f:9e:
         ff:d6:2c:e4:bd:9d:b4:04:1d:ba:64:cb:7f:99:b2:6d:0e:60:
         b5:dc:af:d3:a8:20:f4:c0:12:04:e3:78:9e:df:b4:54:18:c8:
         dd:b7:8a:bb:11:8b:a3:b3:33:cf:2c:dc:52:08:9e:ae:61:f1:
         4e:58:fa:40:d1:b8:23:2d:08:57:9d:52:7a:65:67:ad:4f:59:
         e4:63:b8:b2:e9:11:ca:bc:fd:cf:f2:96:67:60:5a:62:17:70:
         10:24:48:c4:0b:3f:31:0d:ee:35:35:3f:81:e3:37:36:8d:fd:
         44:54:09:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:25:55 2026 by rpki-client