Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad1c9be4-285d-34ed-bf2d-4a17a6e3578d.roa
File:                     ad1c9be4-285d-34ed-bf2d-4a17a6e3578d.roa (raw, json)
Hash identifier:          ZzFFZSFqBajgczPAvBfbkxF9QnkUa7FxWpxDtAYZSco=
Subject key identifier:   4F:1F:7B:CE:8B:E8:5E:FD:26:8B:EB:17:FE:98:0E:42:9C:EB:55:F1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D948AA5A91A42167983D79640
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad1c9be4-285d-34ed-bf2d-4a17a6e3578d.roa
Signing time:             Tue 21 Apr 2026 13:00:31 +0000
ROA not before:           Tue 21 Apr 2026 13:00:31 +0000
ROA not after:            Mon 20 Jul 2026 13:00:31 +0000
asID:                     19905
IP address blocks:        173.22.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:8a:a5:a9:1a:42:16:79:83:d7:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 21 13:00:31 2026 GMT
            Not After : Jul 20 13:00:31 2026 GMT
        Subject: CN=d9d10f34-24cb-4bc1-88cd-b2070dac474b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:3b:74:34:38:1c:1b:71:22:d7:a0:e0:3e:
                    d1:38:e9:15:78:21:a5:a4:32:6f:35:29:65:bf:8f:
                    d4:d8:20:b5:1c:c7:74:d9:6d:19:9e:4a:f7:e5:11:
                    82:b5:41:1b:90:c3:a9:a1:6c:54:53:49:ea:59:03:
                    c6:2b:27:a7:4d:94:6b:1c:7a:93:c1:02:44:77:4c:
                    6e:21:40:ed:3b:7f:0e:9b:56:8d:fc:b9:bd:08:8f:
                    de:aa:fc:0e:7b:c6:c6:7f:22:fb:ee:39:5a:47:e6:
                    3b:7f:05:f1:8e:d4:f1:10:54:b9:ad:c0:b0:77:0a:
                    51:0f:07:fe:9c:7c:cb:54:d2:18:80:36:8f:61:77:
                    bf:0d:db:cf:c5:b6:4f:82:09:2f:2d:3e:42:71:66:
                    8c:c2:81:d6:94:69:15:1c:93:09:f5:db:ef:e7:13:
                    dc:5f:15:6a:8d:79:d9:db:4f:a5:44:91:91:88:20:
                    3e:7e:71:54:50:d4:53:4c:73:ec:83:2a:9b:ef:ee:
                    26:11:2c:ce:fd:5f:e6:09:09:01:e7:9c:d5:f8:cc:
                    fc:02:95:1b:71:b8:f9:86:6e:f6:c3:0e:03:cf:89:
                    d0:38:4a:fe:2c:9f:f7:c6:d5:c0:c9:67:78:54:c3:
                    39:db:10:43:ff:cb:26:f9:5d:e9:2b:39:67:f0:65:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1F:7B:CE:8B:E8:5E:FD:26:8B:EB:17:FE:98:0E:42:9C:EB:55:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad1c9be4-285d-34ed-bf2d-4a17a6e3578d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:5e:b4:a2:65:1c:5e:55:9d:28:aa:91:0c:5a:bd:1b:88:
         fc:7c:ca:2b:93:2a:65:d6:49:65:85:88:f0:88:f5:b6:b8:17:
         8d:fb:11:ee:e2:cc:70:c7:c8:c5:56:ab:2a:8c:a5:38:23:a9:
         71:e9:8b:e2:d8:2b:6c:1d:6b:29:89:fc:fe:5d:d5:9c:57:48:
         ab:aa:2f:e8:fe:5c:a1:20:ed:ae:37:dd:cc:b5:d0:84:62:8c:
         59:87:d5:c1:c0:54:63:41:05:df:38:f5:c2:a7:b5:0f:70:77:
         80:fc:3a:3a:21:f3:5c:ee:3c:60:e2:14:77:b0:90:77:bb:ea:
         08:58:5e:fa:6b:49:97:4b:db:ec:c2:cb:c0:91:e2:c6:6a:3a:
         1a:28:c7:f8:a8:a5:0c:61:b1:e2:2b:e6:f5:73:6e:a0:9f:88:
         33:fb:10:7b:9f:53:6e:54:2b:66:0f:08:4d:84:6c:aa:56:73:
         38:32:05:45:f9:92:fd:86:07:54:dc:a4:ef:38:0e:4e:fa:92:
         d8:94:82:b0:1c:f1:6d:11:ad:f9:e0:96:af:10:42:8a:65:87:
         83:ff:7b:2b:28:d6:46:37:02:88:9d:a4:2f:39:60:51:1e:69:
         bc:d3:4d:1f:fe:2c:d9:31:31:ea:40:7e:05:d4:73:50:97:dd:
         ca:d7:49:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UiqWpGkIWeYPXlkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDQyMTEzMDAzMVoXDTI2MDcyMDEzMDAzMVowLzEtMCsGA1UEAxMk
ZDlkMTBmMzQtMjRjYi00YmMxLTg4Y2QtYjIwNzBkYWM0NzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCE7dDQ4HBtxIteg4D7ROOkVeCGlpDJvNSll
v4/U2CC1HMd02W0Znkr35RGCtUEbkMOpoWxUU0nqWQPGKyenTZRrHHqTwQJEd0xu
IUDtO38Om1aN/Lm9CI/eqvwOe8bGfyL77jlaR+Y7fwXxjtTxEFS5rcCwdwpRDwf+
nHzLVNIYgDaPYXe/DdvPxbZPggkvLT5CcWaMwoHWlGkVHJMJ9dvv5xPcXxVqjXnZ
20+lRJGRiCA+fnFUUNRTTHPsgyqb7+4mESzO/V/mCQkB55zV+Mz8ApUbcbj5hm72
ww4Dz4nQOEr+LJ/3xtXAyWd4VMM52xBD/8sm+V3pKzln8GVJywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8fe86L6F79JovrF/6YDkKc61XxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQxYzliZTQtMjg1ZC0z
NGVkLWJmMmQtNGExN2E2ZTM1NzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRakMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAID3XrSiZRxeVZ0oqpEMWr0biPx8yiuTKmXWSWWFiPCI9ba4F437Ee7i
zHDHyMVWqyqMpTgjqXHpi+LYK2wdaymJ/P5d1ZxXSKuqL+j+XKEg7a433cy10IRi
jFmH1cHAVGNBBd849cKntQ9wd4D8Ojoh81zuPGDiFHewkHe76ghYXvprSZdL2+zC
y8CR4sZqOhoox/iopQxhseIr5vVzbqCfiDP7EHufU25UK2YPCE2EbKpWczgyBUX5
kv2GB1TcpO84Dk76ktiUgrAc8W0Rrfnglq8QQoplh4P/eyso1kY3AoidpC85YFEe
abzTTR/+LNkxMepAfgXUc1CX3crXSdY=
-----END CERTIFICATE-----
Generated at Fri May 8 21:29:43 2026 by rpki-client