Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86f5d8dd-e11c-3cef-b99d-a6a6f8488f6a.roa
File:                     86f5d8dd-e11c-3cef-b99d-a6a6f8488f6a.roa (raw, json)
Hash identifier:          SDdtv4N1YrPmLrOK5PotJKOuhwagBcqe1BhAK42IuE8=
Subject key identifier:   39:64:9D:95:E4:D7:1F:AE:FA:0C:61:B2:85:EB:3F:7D:02:C7:FA:E2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D20AF4F36912FD12F029B25D6
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86f5d8dd-e11c-3cef-b99d-a6a6f8488f6a.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.31.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:4f:36:91:2f:d1:2f:02:9b:25:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=ea577711-0a81-46af-a54f-ebded83b99c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:31:45:92:54:40:84:f9:91:cd:fb:49:44:1b:
                    57:4e:c5:b3:9a:9a:37:40:98:be:f0:78:3a:21:5f:
                    f7:79:3c:84:75:23:d2:43:ab:97:36:a5:dc:2a:56:
                    fd:79:08:73:76:33:35:0a:85:14:05:f3:55:80:ca:
                    d1:86:e2:13:d6:09:5e:09:15:8f:37:17:f2:39:90:
                    72:a7:61:f6:68:dd:a6:62:ec:1c:f2:b9:17:41:70:
                    98:c0:1a:fe:8b:4a:6e:bb:35:aa:f0:f0:80:ab:27:
                    b5:62:82:58:b4:7a:f8:5e:04:be:f4:be:0a:77:a8:
                    cb:0e:20:89:e3:c3:78:a9:75:a9:cf:e3:a8:98:1b:
                    f1:30:6f:3e:99:0f:ed:be:b9:02:28:96:fa:a4:30:
                    1e:db:39:8b:d2:3a:63:4b:d9:3d:9a:3d:32:d0:89:
                    ea:2a:e0:3d:9a:26:74:a1:a9:e2:ff:88:d3:8b:00:
                    90:a0:8c:be:41:83:9b:3f:c3:2d:16:44:ee:cf:fd:
                    cb:8a:a8:55:3a:d1:f3:0f:9c:94:c3:06:18:b7:86:
                    92:73:47:91:a1:ab:ac:6f:54:ba:a8:4e:ef:e4:1d:
                    5f:e4:b2:86:66:67:0f:6d:a7:82:5f:42:6a:65:e5:
                    52:b8:c9:38:a5:77:aa:0c:62:e8:04:bd:4d:75:65:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:64:9D:95:E4:D7:1F:AE:FA:0C:61:B2:85:EB:3F:7D:02:C7:FA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86f5d8dd-e11c-3cef-b99d-a6a6f8488f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:5f:e8:1a:ba:6d:f7:e9:18:18:67:32:05:61:ab:3a:bf:
         9c:cd:f4:26:58:d1:4d:27:de:90:b3:79:58:50:8b:3f:50:b9:
         e0:ed:c0:f0:9c:0c:e4:fe:e7:03:63:ff:b5:e1:1c:1c:b6:82:
         3c:6c:28:d3:f4:19:a9:d5:19:6a:e4:5f:16:5b:d8:46:6c:f1:
         5a:70:6c:74:b6:3c:bc:53:10:1e:50:ba:ec:ba:c9:1a:f1:11:
         04:01:ca:96:e8:f0:7e:b2:2e:aa:0f:af:fe:d2:98:42:eb:cd:
         de:18:af:12:ce:3a:16:b0:6a:1e:54:f1:eb:3b:0d:34:f9:a2:
         61:63:33:16:1a:1a:c3:22:de:b1:ed:7b:25:9a:88:ee:29:50:
         47:d3:44:d2:9f:2c:71:34:0d:60:37:ec:cf:86:46:e4:1a:23:
         2a:3f:53:16:7b:d8:27:6a:f4:8f:85:97:8e:03:5f:d2:6b:1d:
         ed:02:cb:3f:2a:0f:13:52:6f:f1:45:45:9e:8f:91:46:f2:45:
         4b:e7:1a:70:c2:e0:2d:82:61:52:7b:9e:f6:b4:85:bc:27:d9:
         1c:51:98:d7:f8:7b:0d:cc:10:ab:4c:59:20:ae:49:d4:e3:23:
         dc:1a:4c:10:5f:7b:32:15:81:b8:3f:d8:0d:f4:73:a0:ae:29:
         cf:9b:75:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:40:31 2026 by rpki-client