Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cab320d-a4cf-396c-878a-4196119fbff5.roa
File:                     5cab320d-a4cf-396c-878a-4196119fbff5.roa (raw, json)
Hash identifier:          OZzanwrZufTp9N0xnanj+hKqSKwm9CRA/Qbrxw9Pkzs=
Subject key identifier:   C8:73:C7:45:42:23:E0:6B:6D:EB:E6:08:0F:C1:51:82:CA:8F:9A:52
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D8D8FE424E607ED70E766E280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cab320d-a4cf-396c-878a-4196119fbff5.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     19905
IP address blocks:        173.28.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:e4:24:e6:07:ed:70:e7:66:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=bc5101ee-fed9-4af4-ba19-642f640d16ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6c:87:74:21:f0:44:42:a7:b3:58:19:cd:6b:
                    ba:ed:64:3d:11:fd:37:d7:98:6d:99:12:ae:d7:fa:
                    e2:72:53:a0:4b:c6:3e:bb:70:80:90:1c:1c:1c:4a:
                    3c:67:a7:82:28:1a:8b:01:25:06:b4:cb:58:27:a5:
                    e8:c1:71:a0:88:a8:c1:ea:e3:b5:02:95:a7:56:ff:
                    1d:d6:7d:11:6b:4a:cd:25:45:a7:ab:e1:fc:0d:16:
                    fb:e0:65:bf:0b:5f:ab:db:7a:ba:f3:44:00:6a:40:
                    2e:66:6f:a9:10:e2:ea:a3:a2:0f:71:1d:7c:6d:ce:
                    aa:7b:df:66:ec:fc:ce:27:28:8e:76:cc:bb:e6:38:
                    63:b8:c7:e1:e0:d0:61:89:f0:07:e1:1f:8b:07:f9:
                    94:e5:ad:21:ae:02:53:b5:4f:44:96:ff:80:25:66:
                    8c:23:c1:07:ed:25:0f:f5:82:8d:75:57:2a:4a:c9:
                    3a:33:a9:b3:f0:0a:7f:1a:6f:d2:01:02:99:d3:4f:
                    bf:42:28:b3:0f:82:e8:18:8e:9f:fb:95:45:13:b3:
                    81:c6:3a:8a:ab:f1:e3:a4:70:cc:fe:ea:f1:cf:93:
                    64:48:1b:76:2f:8c:ea:0e:1d:72:fe:29:f3:53:71:
                    5d:3c:44:b7:9c:28:2c:ef:50:02:53:2b:73:80:6d:
                    63:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:73:C7:45:42:23:E0:6B:6D:EB:E6:08:0F:C1:51:82:CA:8F:9A:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cab320d-a4cf-396c-878a-4196119fbff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3b:fb:bf:cd:e3:ac:21:fd:28:e7:c8:c4:66:bc:78:74:9a:
         c4:c2:0d:09:eb:87:92:93:83:81:24:33:ca:80:09:27:95:37:
         d7:1f:26:6f:db:5c:d0:4a:0f:36:03:28:58:dc:67:26:df:da:
         3c:c8:17:c3:44:60:28:de:c3:29:8f:4a:d8:dd:51:8c:5c:5b:
         27:e6:2b:fc:0f:1a:14:57:db:ff:a1:a0:a2:a4:f4:29:bd:6e:
         e0:1b:1e:ce:7f:6a:9d:28:18:a0:d5:8b:34:98:b4:01:3c:58:
         d1:56:9e:36:25:20:d0:ea:68:b4:69:96:41:a8:d8:21:91:34:
         ab:3c:79:36:95:b7:8c:5d:1c:80:75:6e:87:11:05:e2:05:9e:
         de:9d:cd:95:89:21:34:0d:6a:e9:20:b4:fe:b0:ba:a3:ab:b6:
         a3:4b:f7:e5:84:02:ff:c7:e6:bf:a1:bb:0f:d7:9c:d0:f8:86:
         7d:a6:e4:6b:fa:62:b1:16:ba:ec:00:1a:54:de:a0:c5:17:2f:
         97:24:2b:9d:ce:a2:8d:33:62:42:ab:38:15:50:55:fb:78:fb:
         af:d1:99:8c:de:13:75:40:eb:07:e6:22:f2:02:9c:3d:da:22:
         71:98:a2:6b:1a:f5:a5:11:74:21:99:b7:e7:67:45:44:62:7b:
         8f:9b:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:28:31 2026 by rpki-client