Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b7329ce-929e-366e-84f5-56410cf563cf.roa
File:                     4b7329ce-929e-366e-84f5-56410cf563cf.roa (raw, json)
Hash identifier:          WRomDrZYUwhURwd3z6EKQgg3EFUoAATOwuUfoBgums0=
Subject key identifier:   6C:C6:03:13:67:60:22:69:49:3E:25:B8:E6:CA:A3:C3:6F:5E:E0:CA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DD9DE53F3C597CE4E4D4D1520
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b7329ce-929e-366e-84f5-56410cf563cf.roa
Signing time:             Sat 16 May 2026 08:59:57 +0000
ROA not before:           Sat 16 May 2026 08:59:57 +0000
ROA not after:            Fri 14 Aug 2026 08:59:57 +0000
asID:                     19905
IP address blocks:        173.16.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d9:de:53:f3:c5:97:ce:4e:4d:4d:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 16 08:59:57 2026 GMT
            Not After : Aug 14 08:59:57 2026 GMT
        Subject: CN=009154d1-2840-4521-9328-d2fee17be4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:11:b1:09:5b:b9:49:d6:f9:1f:fd:63:43:
                    e5:3c:f3:97:e1:94:11:42:cb:7f:4d:f1:57:fa:7f:
                    73:2c:9b:07:9c:48:05:ed:89:e2:f7:e9:77:57:a0:
                    c1:e8:6c:e6:96:08:7c:60:1d:9e:59:3b:e0:0a:d8:
                    ef:1e:6d:f1:e2:9c:5d:04:84:34:8c:78:cf:0a:2f:
                    d2:d5:c5:80:f2:4e:73:fc:63:6e:41:88:e0:0f:b5:
                    83:b3:4e:38:ea:e4:55:44:a7:95:a6:95:4f:a9:ab:
                    98:aa:50:01:3b:33:7c:41:f0:f3:b4:c5:f2:ea:0d:
                    1b:6b:5c:3e:7c:a5:23:c1:21:1e:d7:67:ea:43:93:
                    38:27:eb:42:af:a1:2e:d8:06:89:ca:b9:d9:7a:26:
                    f0:42:e0:a3:5b:ef:f9:a7:20:9c:15:e1:49:b5:35:
                    0c:20:e6:93:a7:83:e2:4e:7d:d0:c3:d5:35:a3:c3:
                    ed:c8:d1:e3:92:f1:14:fe:03:f0:8b:ac:2e:e4:32:
                    e1:50:cc:03:e1:4c:a4:e8:5f:8f:fb:a0:e0:01:42:
                    11:56:a5:39:b5:73:36:27:88:6b:4b:6d:68:7e:3c:
                    51:7f:fe:ee:8c:d3:a3:43:c6:f5:82:42:ff:55:71:
                    97:6b:48:21:f2:31:37:1e:37:99:32:ad:ae:7e:93:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C6:03:13:67:60:22:69:49:3E:25:B8:E6:CA:A3:C3:6F:5E:E0:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b7329ce-929e-366e-84f5-56410cf563cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d9:b8:4d:aa:d7:40:f9:d4:21:ec:b0:70:00:55:d1:80:d3:
         bf:e1:2d:65:72:07:f4:0e:51:0d:fe:ce:53:e2:75:5e:75:2b:
         5d:fa:ad:25:3a:c7:eb:19:ce:ed:27:17:20:cb:ea:b2:96:51:
         94:4e:9e:f6:2d:25:5a:13:5d:62:ad:46:c1:d2:f0:64:f3:28:
         14:ac:c2:e5:60:aa:c0:0e:72:b8:3a:75:f2:75:71:f3:e6:d2:
         5e:21:4a:9a:32:fd:d2:d8:1d:da:8e:41:22:85:cb:3e:4e:41:
         a3:92:e1:12:8c:9b:5a:b7:48:d9:0f:9c:0d:72:ee:91:97:21:
         68:4d:76:e5:72:58:8a:da:97:03:01:5a:b9:34:a7:22:8e:7a:
         91:b9:23:b7:60:d2:ea:6a:2d:bb:f8:3d:fc:a7:a7:1b:cc:ff:
         0c:4d:2e:2f:bc:fc:f5:69:02:ed:1b:62:8f:0a:ee:bb:df:be:
         47:1b:ae:2c:08:3b:27:ff:7c:00:e8:90:de:55:77:6f:ba:18:
         7b:1f:ea:1f:3d:32:ad:bf:3f:aa:99:8c:8d:4c:d8:24:37:eb:
         d3:53:b5:23:a6:7b:07:0f:82:5a:6a:6e:d5:9a:1b:73:97:b6:
         1b:aa:c8:e0:27:6c:bb:6d:5c:64:eb:64:33:49:76:ef:44:ea:
         d7:1c:41:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:19:01 2026 by rpki-client