Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/190af6cb-3846-38f2-bb66-61bfb342beda.roa
File:                     190af6cb-3846-38f2-bb66-61bfb342beda.roa (raw, json)
Hash identifier:          WWJ+7BeWeU1IxiuTKdszi3ridxJbRc42N1a+jJKoEnQ=
Subject key identifier:   01:8D:79:F7:1D:74:18:79:4D:2F:9B:4A:67:43:C9:D0:06:31:12:A6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F62931BE2F26AEEC11BD64300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/190af6cb-3846-38f2-bb66-61bfb342beda.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     19905
IP address blocks:        173.16.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:1b:e2:f2:6a:ee:c1:1b:d6:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=be52db1e-801e-413b-ad35-9e28b91ec222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:7e:ef:98:c5:da:2a:f8:d2:67:98:8c:7b:
                    69:b7:8b:45:16:3a:5c:23:7a:6d:27:33:01:b3:3f:
                    9c:77:a7:9e:ae:32:0e:da:7f:2c:59:6c:69:7a:ce:
                    60:8c:9b:f8:ce:a6:f3:39:25:e9:44:97:b4:29:c8:
                    29:38:18:c9:7f:fd:a3:ed:3f:22:f2:cf:bb:36:47:
                    d2:8e:2b:98:cf:aa:f3:02:74:1d:b1:7b:2f:05:94:
                    b7:3c:0e:7a:8d:cc:79:d6:4e:b5:08:56:c5:9e:a2:
                    71:86:22:bc:8e:11:35:57:44:e8:76:8e:39:3e:de:
                    df:72:0c:d7:88:46:fc:a1:c3:35:9a:c7:dd:7f:24:
                    34:b3:5b:7e:77:42:25:7b:d3:88:d3:ed:71:77:8f:
                    fd:d6:7e:07:fd:e1:f9:aa:66:24:54:e5:f8:15:8a:
                    a7:0d:38:f7:e3:60:61:d9:7b:61:01:ab:c3:8e:69:
                    72:80:c8:d8:3a:de:30:40:ef:03:bc:ba:e1:1d:a5:
                    30:87:03:3c:54:ad:e0:b7:a6:1d:e6:52:5e:6e:f5:
                    a2:0e:8e:bd:32:8d:b3:0b:52:c9:5c:16:f7:c8:86:
                    e4:95:e6:b8:f7:b4:92:f0:96:90:f2:8e:4f:4d:5d:
                    6b:7d:91:7f:6e:73:aa:39:3f:e6:65:ee:97:2b:73:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8D:79:F7:1D:74:18:79:4D:2F:9B:4A:67:43:C9:D0:06:31:12:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/190af6cb-3846-38f2-bb66-61bfb342beda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a5:2b:bd:9e:6f:5b:64:5c:14:07:c0:9f:7a:48:a8:03:62:
         5f:69:46:d6:bb:40:d4:2b:8d:e7:e5:93:f6:de:d5:2c:5a:79:
         35:32:8f:da:00:67:e3:37:c5:06:4a:fe:32:52:73:32:2b:1d:
         c3:da:1c:5b:0f:79:c2:0f:83:98:2d:6c:00:9c:0c:bb:90:37:
         14:f6:bc:fa:fa:fb:f4:7f:66:a4:7d:30:51:7d:7d:96:68:1c:
         4a:22:ca:01:5d:85:fe:8e:09:0e:d9:e3:06:a6:3c:a4:90:fe:
         92:c7:01:bd:db:67:a8:05:6a:45:11:7f:b7:77:4b:41:f5:6d:
         14:cc:69:b5:e1:58:1d:bc:4d:00:33:d1:16:a3:e1:d8:46:d1:
         a8:15:5e:b1:ad:6a:b8:7f:1c:23:95:ff:40:dd:74:67:91:9f:
         18:c1:22:30:c6:d6:99:d5:b8:59:79:94:af:3a:fb:61:a6:8f:
         7c:d0:43:e0:69:58:2d:bf:37:75:ff:ed:7f:da:cb:fb:3a:56:
         48:eb:eb:91:25:5b:3a:58:12:0d:e8:f2:55:b8:c1:e2:9d:9d:
         b0:ad:29:28:08:77:42:9c:6d:db:71:67:43:b4:7d:48:2a:c8:
         69:3c:e9:de:66:7e:58:eb:4d:8b:a8:f7:98:fd:b7:cf:08:3a:
         72:2b:4b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:50:28 2026 by rpki-client