Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4fe5a25a-7e37-3021-84c4-ab63ee058e3e.roa
File:                     4fe5a25a-7e37-3021-84c4-ab63ee058e3e.roa (raw, json)
Hash identifier:          onJ24NGKyoc5Cn58EQgyhbrex5HqS2HTS0IgbTH7Owk=
Subject key identifier:   E1:34:17:6C:3C:65:40:4E:F9:13:D6:55:9E:81:7A:32:38:42:64:DC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5E62F4E4998F9660F08F1060
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4fe5a25a-7e37-3021-84c4-ab63ee058e3e.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     19905
IP address blocks:        173.26.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f4:e4:99:8f:96:60:f0:8f:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=7e897e91-7e5c-4c69-9144-8c2803b7a70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:e2:d3:a8:1d:0f:77:f0:10:3c:32:c6:e5:
                    b5:f8:3e:17:fb:85:cf:ad:2a:f0:ee:9d:b3:5e:1b:
                    97:1c:61:e4:03:f0:b8:21:c8:50:7d:15:73:13:fd:
                    08:d6:71:33:36:da:03:40:70:90:9d:64:85:4c:ee:
                    f3:37:eb:c8:4c:20:22:67:e9:c1:f7:a4:a4:85:41:
                    b9:35:87:5a:a4:da:09:39:b8:a6:c8:4e:58:5d:dc:
                    76:65:64:3d:33:dc:8d:40:b5:c1:3d:73:84:78:78:
                    c1:32:21:7e:81:b3:3b:ab:33:cc:d7:62:25:5a:26:
                    e5:97:63:9f:89:be:2d:fe:27:fb:4b:dd:b9:91:13:
                    5f:9a:e3:75:11:99:3f:73:c5:8d:44:04:52:89:ed:
                    a4:7e:71:f1:93:e0:ec:13:22:7e:59:88:74:d5:72:
                    6e:7a:63:5a:6f:09:e7:13:1f:72:b0:27:65:05:a5:
                    be:88:31:f4:44:42:a8:c6:95:9e:4c:c8:09:ef:73:
                    3d:21:df:be:31:c9:fb:ab:cf:c2:e6:64:8b:86:74:
                    21:4b:4d:52:0a:fe:69:ad:f7:2c:45:29:cb:66:b4:
                    d9:f0:2d:73:82:0e:53:c6:56:bb:38:8f:e8:fc:10:
                    56:8e:b9:80:27:8f:73:4e:fa:01:9c:52:ad:d8:be:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:34:17:6C:3C:65:40:4E:F9:13:D6:55:9E:81:7A:32:38:42:64:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4fe5a25a-7e37-3021-84c4-ab63ee058e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ac:0f:1d:0f:08:b6:b5:31:14:c1:e8:4c:f5:3a:29:b2:73:
         bd:8f:2a:92:36:68:5c:5c:9e:9a:fc:c3:77:d2:3f:b1:43:3d:
         76:7f:e4:00:46:39:42:b2:d7:ae:21:d6:1f:6b:76:2c:96:cd:
         01:60:bb:c2:84:eb:19:ac:f7:dc:2d:7f:5d:cb:3a:32:8f:ef:
         64:14:21:1e:1b:3e:24:54:ff:80:fd:2c:0c:c3:c4:69:94:8b:
         32:5f:77:84:b4:8e:76:18:02:a7:a2:fd:f5:4d:4a:31:ff:53:
         cf:a6:4a:2d:f6:75:57:34:f4:f7:b8:93:15:92:fe:f9:66:c4:
         9b:b3:b8:36:4f:9c:15:5f:6c:23:10:dc:51:fe:d6:44:8d:f1:
         cf:2e:74:28:da:f3:0b:4d:95:d6:e4:db:d3:07:ff:e9:73:ff:
         1d:96:a5:d8:1d:06:ee:59:4d:c1:72:ac:94:3d:f0:f5:9f:da:
         b2:17:8c:85:1d:f3:bf:7d:ca:d1:11:a5:13:e0:05:c7:6b:0b:
         cd:3b:fa:c4:d9:8d:1e:5e:27:d1:e1:68:ad:f6:23:f8:57:c9:
         97:9e:d0:b0:f4:4a:41:ac:ff:1c:fe:91:65:6f:c3:bf:af:ee:
         fc:af:b7:dd:77:3a:a1:2a:86:1a:13:84:4b:be:3c:14:52:7b:
         7d:19:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:24:21 2026 by rpki-client