Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acf3aa00-55a8-33eb-9eda-a16e2f92a062.roa
File:                     acf3aa00-55a8-33eb-9eda-a16e2f92a062.roa (raw, json)
Hash identifier:          fTSnS3gOP9JIgVuoKEkds83QZ3Ne82RwIy4MfIF1c4k=
Subject key identifier:   EE:23:CB:86:73:77:1E:52:3B:DC:C3:CE:6C:58:15:0C:23:0E:5E:0F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DFBBFAE16ACD5A605F0589200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acf3aa00-55a8-33eb-9eda-a16e2f92a062.roa
Signing time:             Thu 28 May 2026 12:15:41 +0000
ROA not before:           Thu 28 May 2026 12:15:41 +0000
ROA not after:            Wed 26 Aug 2026 12:15:41 +0000
asID:                     19905
IP address blocks:        173.19.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:bf:ae:16:ac:d5:a6:05:f0:58:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 28 12:15:41 2026 GMT
            Not After : Aug 26 12:15:41 2026 GMT
        Subject: CN=2367326e-cede-4aea-bcd0-1e041a77e9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a0:ae:c9:b1:6a:a5:70:06:85:76:e8:89:b9:
                    22:54:e1:75:8e:58:f0:11:9c:8b:12:7d:c0:4c:3d:
                    5a:78:3f:96:de:0a:6c:29:5e:12:27:df:ef:38:2e:
                    7b:2c:7d:3f:73:a0:fb:42:b2:b9:d3:86:0f:ad:9d:
                    6b:73:af:3f:d3:07:4c:9c:88:fc:dd:4e:3a:b9:ac:
                    b8:d4:01:ec:ed:96:4f:13:29:4c:56:e4:d3:ae:76:
                    90:b0:c4:f6:12:fc:be:d9:2b:ef:a7:e7:16:5e:d1:
                    55:c1:e1:df:05:09:40:3e:3e:e6:b2:7f:0c:5f:e4:
                    62:18:50:25:77:8f:5e:ff:32:0a:93:c0:c3:67:d6:
                    32:5f:5d:15:2d:fc:51:9e:b2:87:06:c6:75:db:9a:
                    3e:f1:38:5f:06:00:e2:5f:df:c3:86:8f:1d:5a:0e:
                    dd:59:98:20:7e:dd:9f:37:01:26:53:ae:ab:11:8d:
                    26:0b:c0:c5:09:76:80:b8:bb:6e:b6:45:27:4f:97:
                    73:f4:18:15:69:1a:18:9c:fb:1f:8c:a9:e2:2f:88:
                    3a:c9:7f:3d:ea:3b:35:2a:5c:11:fb:6f:8f:43:29:
                    ba:83:ca:5a:a0:1c:5d:cf:4b:2f:0f:e1:97:c2:1a:
                    1e:48:fd:cd:6e:18:97:79:f8:cf:c1:bd:03:d5:d4:
                    5f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:23:CB:86:73:77:1E:52:3B:DC:C3:CE:6C:58:15:0C:23:0E:5E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acf3aa00-55a8-33eb-9eda-a16e2f92a062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:02:c5:3f:c8:5e:24:31:47:70:5f:d6:b8:16:5d:86:8e:db:
         65:74:a7:b7:69:ff:2b:96:93:a3:1f:93:74:de:a9:f6:4f:97:
         c4:99:f4:8a:96:f7:ac:de:76:c3:7f:19:7b:07:13:4e:79:6a:
         ce:2d:c9:83:61:df:7b:04:32:3a:a4:73:45:6f:3b:e6:90:b0:
         39:9e:d6:2f:24:8f:82:ff:35:74:c1:d7:ca:d7:00:fb:06:c6:
         47:db:9f:86:90:d4:46:f4:41:ad:f0:ae:7b:24:e5:c3:66:d7:
         11:13:83:35:f6:05:44:08:b1:91:bf:04:30:da:da:c6:b5:0d:
         60:96:fa:cf:07:a3:b3:20:34:cb:3c:0f:c1:ec:78:66:b8:0b:
         a9:1f:e5:07:5e:f4:39:e7:e9:a4:fe:d9:af:00:ce:e5:95:31:
         15:ef:84:da:20:8c:ff:c0:f1:72:4f:71:48:83:10:b5:e3:be:
         a2:9b:4c:d8:58:e3:0b:d8:92:e9:1d:ec:c2:eb:19:02:56:a3:
         5a:97:79:22:74:6a:0c:ec:bb:15:7f:25:26:02:8b:f3:b2:9e:
         d1:3b:4b:1a:1e:ba:bb:a5:58:60:89:92:7e:ab:22:e4:f8:2b:
         23:c8:e8:e5:28:3c:47:55:85:d3:f6:16:bb:19:ed:70:17:de:
         f5:ed:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:27 2026 by rpki-client