Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad2c51da-9f50-3942-aec6-fee86fbd9d23.roa
File:                     ad2c51da-9f50-3942-aec6-fee86fbd9d23.roa (raw, json)
Hash identifier:          pK9PDeB4FZOHsPoSCpD0kAAoOs9LuXM/jZSs6g6QTRw=
Subject key identifier:   B2:9F:A7:14:A0:31:93:03:D2:EF:8B:35:42:B3:81:A9:A6:59:58:00
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EBD0D16B589B5EEE607C3F180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad2c51da-9f50-3942-aec6-fee86fbd9d23.roa
Signing time:             Wed 05 Aug 2026 18:02:40 +0000
ROA not before:           Wed 05 Aug 2026 18:02:40 +0000
ROA not after:            Tue 03 Nov 2026 19:02:40 +0000
asID:                     19905
IP address blocks:        173.23.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:0d:16:b5:89:b5:ee:e6:07:c3:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  5 18:02:40 2026 GMT
            Not After : Nov  3 19:02:40 2026 GMT
        Subject: CN=0692bee8-63fa-40ec-ac89-36d277cf4375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:94:f6:ec:12:1c:d9:d4:49:e5:6b:43:55:
                    eb:5e:e7:1a:c4:77:5f:04:c7:ed:0e:02:b3:78:5d:
                    9e:46:12:cf:fa:6f:66:df:f7:ac:0f:9f:f7:ec:5f:
                    c0:ae:da:99:16:5c:ce:68:03:26:7c:67:c0:d3:df:
                    f7:65:f6:42:61:3d:42:fc:b0:1f:69:99:98:28:7e:
                    f9:30:b0:80:ec:e6:97:b3:91:83:bc:19:8d:46:2a:
                    f7:6b:ca:c1:1e:ab:36:dc:bf:00:f0:b4:ba:f2:1d:
                    44:61:4b:0b:40:6d:49:2a:bd:35:dd:e1:c0:ce:62:
                    e8:17:d0:a4:f1:23:6b:69:f1:fd:8a:db:b1:b1:53:
                    5b:fc:90:c3:d1:1b:66:af:44:b9:81:1f:6f:68:8d:
                    43:d1:8d:e4:39:3d:74:5b:25:3d:f9:af:f5:79:7b:
                    2f:e2:30:68:d9:a6:38:44:30:34:dc:3e:2a:f1:c9:
                    d2:de:ee:5e:11:12:f2:37:82:38:46:e1:50:5e:cd:
                    cd:eb:4b:01:ae:e4:8f:17:18:05:bd:38:c3:32:49:
                    57:98:e4:ef:7f:6d:66:2e:18:bc:0d:86:3f:91:35:
                    fa:d8:11:ef:be:82:32:26:e6:66:ac:be:c6:69:dc:
                    97:12:32:17:2a:ad:5c:ec:01:26:4a:00:be:28:1f:
                    91:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9F:A7:14:A0:31:93:03:D2:EF:8B:35:42:B3:81:A9:A6:59:58:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad2c51da-9f50-3942-aec6-fee86fbd9d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:6e:59:61:98:1c:d9:15:22:1c:f6:21:b4:7f:7c:f1:43:37:
         96:97:29:c4:e0:47:db:cd:b2:89:70:18:5d:59:0e:05:9e:05:
         f5:25:6a:d9:2f:a2:2b:ea:f9:30:9f:21:7b:a0:a7:09:29:8f:
         bd:2f:45:03:b0:0d:97:51:9c:66:12:97:7d:ab:1e:57:b2:85:
         f8:0e:1a:47:a3:d7:1f:c6:c8:11:34:44:64:d5:51:0b:93:f9:
         bc:03:6b:62:b4:9e:40:78:84:6b:a3:4d:3f:7a:7d:8d:f6:aa:
         ff:f1:7a:61:3d:36:a1:6a:1a:02:2b:9b:1c:8e:da:02:ee:26:
         5b:40:2c:67:0b:49:97:5a:ef:52:73:0a:dd:55:76:7d:2c:49:
         90:91:e2:43:bb:3d:65:2d:48:18:74:27:d9:70:c8:9c:f9:0c:
         33:1f:38:35:36:01:b4:aa:b3:32:ec:4b:a8:1d:88:51:da:16:
         7f:42:22:b9:57:e6:94:7f:7f:ed:45:df:f8:6a:15:a0:77:25:
         d7:8d:05:8e:cc:2c:fe:a8:fe:6b:31:54:6b:50:5b:0a:7c:48:
         c7:4a:b9:40:bb:00:fa:b0:0a:46:7e:3d:e3:ca:1a:67:7f:e5:
         72:70:aa:30:9b:bd:5f:ce:2b:95:a7:ec:d0:49:5f:ad:57:00:
         86:e1:ae:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:09 2026 by rpki-client