Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71211f42-f47d-3213-a0d6-425199d25e7a.roa
File:                     71211f42-f47d-3213-a0d6-425199d25e7a.roa (raw, json)
Hash identifier:          m+ig7vWAi8zMgvPxbXbHJOu+8hWlXqmERSdRooaBrxw=
Subject key identifier:   E8:60:8D:BD:AE:D2:10:99:10:F0:F3:7E:8D:6D:23:9B:A2:20:2D:0E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F7FD546DA35B30D1B4FA7AEE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71211f42-f47d-3213-a0d6-425199d25e7a.roa
Signing time:             Wed 14 Oct 2026 12:32:50 +0000
ROA not before:           Wed 14 Oct 2026 12:32:50 +0000
ROA not after:            Tue 12 Jan 2027 13:32:50 +0000
asID:                     19905
IP address blocks:        173.22.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:d5:46:da:35:b3:0d:1b:4f:a7:ae:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 14 12:32:50 2026 GMT
            Not After : Jan 12 13:32:50 2027 GMT
        Subject: CN=ee2c76a9-60a8-4928-b0d9-a7ae53ee80cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:08:c8:57:50:11:b4:b5:e9:97:60:c5:aa:
                    66:85:37:da:1a:c5:2a:6a:75:c8:1b:50:30:99:39:
                    ca:e5:50:06:a1:f1:ed:48:36:81:bc:b8:23:9f:6f:
                    96:39:96:50:a8:80:64:c3:17:1f:a8:c0:d8:d9:7c:
                    eb:be:89:b9:c5:90:82:28:ce:f1:16:67:04:68:95:
                    cb:74:c3:8a:4d:c6:6d:7a:37:3e:6c:2b:59:04:35:
                    80:a2:10:30:14:9e:28:ca:3e:9c:ff:dc:ee:b8:d4:
                    21:8d:71:8b:5a:c5:02:cd:3a:f8:85:7f:df:80:2a:
                    cf:42:da:d5:79:71:19:63:e0:40:b7:8c:7e:1e:d6:
                    6b:82:23:be:24:b0:29:2f:f2:88:68:4f:8b:e8:58:
                    7d:f0:50:f7:67:a6:a9:a1:7c:64:0c:0c:7f:5c:51:
                    12:f4:fd:38:e4:eb:a6:fa:b9:f3:b1:7b:13:8d:7e:
                    13:15:8c:8b:c1:71:36:b8:7a:aa:9e:c0:e0:18:b3:
                    b8:76:5b:38:c3:d6:11:bd:f5:c5:49:06:41:97:0a:
                    9f:ce:8c:d6:52:ee:d5:ed:3e:07:f6:0e:8c:83:13:
                    29:3a:3c:96:39:18:c1:41:d5:82:6a:4d:32:30:0b:
                    c8:27:4c:61:48:ef:63:3e:db:01:eb:99:db:6b:2c:
                    61:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:60:8D:BD:AE:D2:10:99:10:F0:F3:7E:8D:6D:23:9B:A2:20:2D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71211f42-f47d-3213-a0d6-425199d25e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b9:e9:a1:47:00:62:3e:f7:d9:2f:71:09:e5:4b:2f:66:f6:
         b7:6e:8a:ff:1b:a0:08:35:fb:87:86:ab:40:68:dc:d7:d5:c2:
         07:d1:bb:4b:67:89:cd:55:3f:79:af:be:5a:1f:7d:db:4c:e8:
         f1:f6:ff:ed:7f:f6:c7:01:f3:91:1e:52:05:22:70:b6:c9:25:
         fd:9c:b8:c1:0f:0e:b8:f0:46:9e:23:32:98:98:72:ad:fc:78:
         77:92:a5:df:f5:d9:66:e8:6f:8c:a2:89:af:1d:22:41:ac:85:
         04:0b:c6:f6:66:93:cd:c8:c8:f7:e7:3c:ab:1c:09:d4:63:63:
         ba:53:ee:84:e0:22:ed:6f:6b:74:25:66:b2:3f:91:5b:c7:4a:
         ce:47:50:6f:3a:a3:66:03:4d:f2:3b:2b:35:98:9c:ff:31:a7:
         7b:26:8c:2f:a1:57:c8:89:e0:f5:62:9c:61:72:e3:41:18:f6:
         93:45:d3:00:2f:af:fa:ec:75:72:c1:fa:63:c0:52:4a:24:4f:
         89:c4:d8:42:df:a1:c6:8f:b6:99:21:cc:01:3b:06:e2:12:66:
         b1:23:8a:de:4b:3f:84:1d:e2:60:1e:e5:3e:fb:68:12:d0:a8:
         4f:a5:7e:59:ce:84:e1:93:42:18:3f:db:2b:81:da:2c:cb:d5:
         17:b6:85:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:37:41 2026 by rpki-client