Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f14acdb5-b433-3dde-86ca-ba73628b325d.roa
File:                     f14acdb5-b433-3dde-86ca-ba73628b325d.roa (raw, json)
Hash identifier:          wRDIdty6KxxVHf5pydGx55JChjITBjTh1rxXVJiRGcU=
Subject key identifier:   94:BF:81:10:C9:DD:EC:12:ED:CF:B0:D1:0C:03:EB:15:E0:40:27:A2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DB7702CE09CBC833698EFC4C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f14acdb5-b433-3dde-86ca-ba73628b325d.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        173.23.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:2c:e0:9c:bc:83:36:98:ef:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=dbb7bd64-fe00-424a-85f9-5e27d3b32e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:63:84:09:07:0d:bb:21:58:e6:ea:62:d3:
                    06:e4:a4:86:c0:51:3e:16:e1:3b:cc:7b:2e:9a:ab:
                    26:3a:be:8b:a6:99:be:89:5c:f6:95:9c:c4:65:7a:
                    a8:cc:5b:50:7f:98:6e:dc:4a:36:c2:e3:f4:96:2b:
                    9d:37:07:42:19:c5:55:2f:93:a1:d6:df:16:4a:d6:
                    c7:c1:67:32:13:84:07:9e:a3:12:a9:cd:bf:1e:9a:
                    7c:f6:d9:e5:22:00:4e:0b:3a:2a:27:9f:26:fb:ec:
                    c7:86:68:46:18:3e:38:55:79:21:79:2b:7b:cb:6d:
                    b9:c0:eb:d6:a5:b0:3f:cb:99:25:82:bf:39:88:36:
                    29:9e:1b:13:0f:b9:4d:99:a0:6f:01:ea:62:86:7d:
                    37:75:ee:53:1e:b5:fb:ab:12:2a:f3:6b:5c:c6:85:
                    00:06:5d:10:59:fe:25:23:f4:6a:af:89:47:2d:87:
                    60:90:22:05:e3:67:af:7a:14:39:55:9b:fc:1b:2b:
                    e5:8f:42:fb:e4:1d:61:16:ac:6a:43:cf:bf:f1:0a:
                    62:33:d2:c2:10:ff:50:d2:a6:4c:66:95:ea:2a:77:
                    ad:19:44:d5:67:c4:e1:df:2b:f6:f8:e3:1f:20:d5:
                    45:f1:78:ca:5c:26:28:95:cb:9a:ee:8d:90:86:9c:
                    8a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BF:81:10:C9:DD:EC:12:ED:CF:B0:D1:0C:03:EB:15:E0:40:27:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f14acdb5-b433-3dde-86ca-ba73628b325d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:65:80:82:b2:7c:c8:cf:94:34:b6:ee:12:eb:42:82:a2:94:
         26:94:77:92:02:43:dc:60:e9:82:2a:0f:1f:a9:9a:59:f4:28:
         e9:ec:45:4e:ea:3f:89:51:9c:6e:27:3e:42:a6:66:60:e9:f7:
         f6:46:06:a5:d1:57:f8:98:a1:38:c2:b1:05:bc:bb:f3:60:1b:
         fb:8f:49:ff:94:b3:2f:53:50:aa:fa:81:ea:d9:8b:f6:25:88:
         3c:20:76:4a:6e:ca:b7:a8:e5:4c:c7:d4:b9:24:43:7c:a2:a1:
         42:7a:1c:d6:84:90:ce:27:e2:26:f8:d3:fc:b7:7a:ed:53:0a:
         72:bb:75:d0:42:bc:14:1a:b4:bf:c8:3d:6d:69:99:d8:24:66:
         69:67:ba:7b:07:81:4c:89:8c:2d:e3:14:d9:d5:b3:ab:e9:e9:
         f2:c3:40:39:24:7b:27:da:6b:69:a3:5b:00:48:d9:7a:12:16:
         92:6e:71:c2:c3:b6:de:0a:3d:b5:70:f5:5e:67:76:4b:0b:4a:
         dd:50:00:81:20:30:97:c4:d1:28:9a:f9:74:c9:2e:06:8d:b9:
         24:0a:03:5f:87:bf:7a:96:2b:97:ee:19:a3:d7:5b:58:e0:b2:
         5c:4e:8f:3b:ce:f4:4b:52:b3:6c:35:f9:43:4e:43:c0:db:88:
         b7:fd:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:26:34 2026 by rpki-client