Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b954939-e48e-377a-924e-1c1110d7b404.roa
File:                     0b954939-e48e-377a-924e-1c1110d7b404.roa (raw, json)
Hash identifier:          gFH5s2tj3KXFyO5cH0D7JasuoxHvAvGZaK6hVtN3/NA=
Subject key identifier:   68:D1:1A:15:D3:17:29:15:B2:64:BE:A3:57:53:86:7E:7B:A3:7B:2D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EBD0CF916166E8CAF0BEFE280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b954939-e48e-377a-924e-1c1110d7b404.roa
Signing time:             Wed 05 Aug 2026 18:02:26 +0000
ROA not before:           Wed 05 Aug 2026 18:02:26 +0000
ROA not after:            Tue 03 Nov 2026 19:02:26 +0000
asID:                     19905
IP address blocks:        173.28.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:0c:f9:16:16:6e:8c:af:0b:ef:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  5 18:02:26 2026 GMT
            Not After : Nov  3 19:02:26 2026 GMT
        Subject: CN=d8e49309-1cec-4b26-8da4-b96eddb38ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:95:c3:7b:d7:cf:79:64:d6:d8:e0:df:0b:8a:
                    fa:3a:32:ef:c4:61:57:60:de:d0:9c:c7:e4:82:55:
                    9b:2f:f5:e1:a9:8f:af:0f:48:0f:e1:aa:09:cb:e4:
                    1e:1d:f7:67:5e:54:64:bc:57:95:ee:99:7c:63:16:
                    95:c0:5a:82:2c:59:fe:c5:4d:08:2b:aa:6d:a7:9b:
                    e2:a5:60:e8:48:d8:3d:41:54:f6:60:b4:62:22:5d:
                    64:d8:f0:c0:5e:19:16:76:10:7f:86:a1:1b:de:34:
                    25:11:5f:13:52:04:df:11:d6:f5:18:8a:ab:99:46:
                    66:90:7c:81:8e:e8:aa:31:22:35:aa:46:e2:cf:b3:
                    4a:6d:49:1f:41:98:27:33:b7:23:c7:27:ce:47:d3:
                    43:46:f3:8f:46:a6:b2:38:73:bf:1b:af:9b:0f:95:
                    b7:46:be:f1:3b:d3:8c:98:1e:cd:1b:04:b4:eb:5a:
                    cc:c9:ab:4d:f7:e1:f4:c1:1b:d9:51:a4:e7:4a:35:
                    1b:ea:98:1d:36:66:3f:97:71:c4:bb:3b:0f:dd:5f:
                    b0:c5:11:6f:0d:cf:bf:51:c1:21:27:18:a2:63:56:
                    06:49:b2:cc:06:29:24:b6:05:9a:47:2f:f5:e6:17:
                    21:cf:6b:00:bd:f2:14:0b:a3:85:67:3a:b5:be:eb:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D1:1A:15:D3:17:29:15:B2:64:BE:A3:57:53:86:7E:7B:A3:7B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b954939-e48e-377a-924e-1c1110d7b404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:df:3b:45:ed:22:7c:3f:b6:f7:7c:da:11:e8:a8:44:99:
         85:fc:5c:73:43:94:ee:78:75:d0:54:a9:70:a2:f9:25:5b:3d:
         bd:45:73:57:11:5b:de:9e:79:62:82:5e:7a:1d:b9:e6:08:80:
         22:38:8b:13:7e:8b:e6:98:3b:b6:25:d8:14:d8:44:2d:1a:53:
         9e:74:1c:61:ab:7c:cb:85:bc:17:cd:e3:e7:7d:a1:5c:1a:8a:
         8f:5d:4d:fb:6c:07:d2:30:69:6e:09:33:36:fc:bb:69:32:96:
         7c:12:3c:b2:f6:e9:67:27:0a:03:b3:3d:1f:51:36:13:6a:0d:
         52:9e:05:10:3d:42:56:35:6e:b7:6b:06:7f:0c:e7:da:40:eb:
         ed:a8:5f:2a:d7:ed:17:90:54:3c:36:9e:8d:b5:10:e6:bf:4c:
         13:2a:57:c3:c1:3b:94:18:6e:f5:f9:4b:41:1d:6a:5e:e5:71:
         94:3f:28:77:5e:c5:2c:ec:04:f1:ec:17:8b:4e:ce:12:2c:e0:
         48:15:84:b1:61:8d:2f:64:d8:76:25:db:72:e0:89:6f:64:28:
         ac:76:12:9c:3e:a9:7c:7d:c4:b6:ec:11:f2:e5:d2:aa:30:04:
         d5:06:71:ef:78:a9:39:3e:85:8d:05:01:4c:36:26:9a:b6:84:
         7d:f3:27:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:11 2026 by rpki-client