Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/449bfeb7-0091-3a51-a94f-c80dadb21c09.roa
File:                     449bfeb7-0091-3a51-a94f-c80dadb21c09.roa (raw, json)
Hash identifier:          YZx7MyZvd3klSSW/2NNzBGF1JKzH51TJXQdS7Y4W98Q=
Subject key identifier:   4E:C1:98:BC:E9:41:74:D4:DF:83:F5:65:D9:97:99:A5:56:2B:73:8F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DFBC035F83B829630B3A4DC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/449bfeb7-0091-3a51-a94f-c80dadb21c09.roa
Signing time:             Thu 28 May 2026 12:16:45 +0000
ROA not before:           Thu 28 May 2026 12:16:45 +0000
ROA not after:            Wed 26 Aug 2026 12:16:45 +0000
asID:                     19905
IP address blocks:        173.18.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:c0:35:f8:3b:82:96:30:b3:a4:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 28 12:16:45 2026 GMT
            Not After : Aug 26 12:16:45 2026 GMT
        Subject: CN=1b739487-e5d8-46d3-a8d3-4887abac9bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:a6:7b:08:ba:5f:d5:4d:1d:37:02:9d:89:
                    f8:ec:8e:f5:6f:46:0c:83:f2:cb:3e:89:93:1c:f3:
                    41:75:60:30:5f:c2:12:74:0b:60:58:a0:75:d6:4f:
                    2c:3e:f2:da:74:6e:bd:f6:d4:c6:66:9a:12:db:10:
                    c7:46:00:60:90:a3:30:23:61:da:f1:7f:b7:ab:9b:
                    2d:56:e0:c0:23:27:3d:ac:f7:bf:15:7b:d1:fd:66:
                    17:da:62:36:11:7b:68:48:7b:bb:99:8a:e7:c7:82:
                    c2:f2:d7:12:c1:18:4f:18:a1:00:ba:ad:e9:ee:4c:
                    17:01:11:f9:bc:f8:9b:45:f6:a2:b9:fe:61:f5:9e:
                    43:b1:60:1e:76:3e:19:8c:15:ef:3a:1f:ff:24:73:
                    f4:07:6e:65:eb:bf:85:0e:4d:ab:d0:3b:81:20:76:
                    c9:60:4f:ae:2c:ce:cb:e4:c8:b0:8d:2a:e2:29:6a:
                    70:f7:fb:bf:25:b6:73:af:a3:5b:9e:65:09:be:92:
                    e4:db:fc:62:14:af:f4:36:f0:97:94:45:29:fd:b8:
                    5e:ef:6d:b5:1d:77:77:bb:dd:33:a4:85:b6:7b:c0:
                    9f:43:b4:ca:8a:75:9e:a6:7f:1a:21:f0:85:89:65:
                    83:73:c5:a5:f8:26:2a:0e:22:fc:a6:03:50:da:5e:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C1:98:BC:E9:41:74:D4:DF:83:F5:65:D9:97:99:A5:56:2B:73:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/449bfeb7-0091-3a51-a94f-c80dadb21c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fb:c4:92:5a:7c:30:c0:be:f6:db:d6:69:c6:c4:14:e8:71:
         f0:96:8d:a2:3d:a8:29:d0:30:f1:27:8e:88:92:09:d5:2d:27:
         71:8b:86:f3:7c:bf:02:15:8e:bb:f2:1f:3b:76:bc:82:3d:97:
         f0:f9:ee:67:4d:03:34:ab:78:70:34:a1:31:ea:60:87:4e:65:
         aa:23:ca:37:a3:aa:e8:6d:79:a3:f2:50:5a:7e:ca:95:0d:d1:
         88:ff:da:8c:fb:fe:4b:19:1c:eb:5a:34:7d:a1:a9:48:70:8c:
         2d:1e:ba:35:65:43:2e:cb:e9:0e:b5:39:03:a1:56:13:45:28:
         e9:7d:9f:ff:4b:1c:b7:ea:83:0a:cd:e3:2e:e3:a9:f9:1b:1d:
         bf:23:c0:fd:24:d4:67:c3:8f:10:ee:95:aa:cf:92:87:40:96:
         a4:6c:74:73:e1:8b:43:9a:ba:09:3f:5c:69:b6:a3:91:00:5b:
         af:c1:21:9e:3d:a3:12:ae:d5:4e:59:46:e1:35:8e:43:01:49:
         14:66:9a:20:b0:c4:68:8b:dc:68:15:56:58:47:c7:2a:86:1d:
         54:ef:d5:18:ca:d3:a8:48:37:52:f6:68:6e:ea:b9:8b:79:29:
         0c:58:db:2a:73:ac:4c:c2:39:54:fe:36:8f:a0:87:5d:5b:5c:
         58:8d:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:19:15 2026 by rpki-client