Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/fc284e26-d2d1-3655-a308-af31001c9c53.roa
File:                     fc284e26-d2d1-3655-a308-af31001c9c53.roa (raw, json)
Hash identifier:          9mNvkItXdmxzK+k2BAxVvMyOfoNDspCzCbXYMwEm40w=
Subject key identifier:   28:A1:E1:E0:AE:AD:7E:40:19:FC:77:5E:74:26:F1:BE:FF:4A:7A:49
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584F4973DE030B7F1E6BAC1E59DE
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/fc284e26-d2d1-3655-a308-af31001c9c53.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     5769
IP address blocks:        173.176.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:de:03:0b:7f:1e:6b:ac:1e:59:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4e8a9545-15a8-4084-b8a8-2101e02eaef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9a:30:d9:eb:d9:64:e1:6a:44:5b:fd:12:a0:
                    83:12:e2:81:b2:fd:1f:10:ef:8d:c8:0c:a1:bd:aa:
                    6a:47:0f:7a:f3:35:56:f4:ec:3d:1c:d3:fd:a5:fd:
                    3e:b2:c1:b4:63:62:3d:e1:f3:61:ff:1a:bf:75:48:
                    b0:cb:4d:87:99:84:5e:8c:b6:56:69:9b:14:d4:cd:
                    0c:06:99:19:4a:11:c9:eb:df:34:1b:f1:b1:0b:e6:
                    5b:08:8c:e2:bb:3e:32:b9:87:6c:54:28:0f:66:b4:
                    45:2d:d6:4b:ae:cd:ad:4d:84:2a:ae:a0:ba:ba:9f:
                    c6:e8:6d:dc:2b:6d:41:57:9b:93:09:81:a8:7e:81:
                    f4:10:fe:c3:ee:4b:60:42:ce:b1:97:12:84:a4:8a:
                    f1:22:ec:cf:bc:e7:31:14:3a:78:1d:a7:9b:d4:a8:
                    7d:5f:e8:35:c5:66:bf:b1:d1:e7:84:13:be:2f:91:
                    90:6c:81:6d:84:f5:64:f6:7f:93:ce:d0:71:42:f2:
                    5a:d3:aa:a3:1d:8a:83:f9:60:f2:01:ff:51:3b:4d:
                    a4:cb:21:54:0d:9e:ac:06:0e:99:73:04:57:28:e4:
                    f7:9e:d5:24:fe:c2:da:93:92:d8:3a:87:ec:fe:3a:
                    70:8c:48:d3:7d:1b:c8:15:65:df:b8:41:5a:61:1b:
                    01:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A1:E1:E0:AE:AD:7E:40:19:FC:77:5E:74:26:F1:BE:FF:4A:7A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/fc284e26-d2d1-3655-a308-af31001c9c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.176.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:5d:cf:e9:62:92:94:7d:7c:cc:b0:05:36:9e:9e:78:22:7c:
         0f:86:b8:7d:af:b5:8c:06:a7:2b:5b:b5:79:3b:59:07:55:ae:
         7f:70:f1:bf:27:a0:cd:7f:9f:0a:2e:a7:c0:01:bc:e3:32:2c:
         14:44:2c:90:e3:32:ba:67:99:0b:74:99:8f:aa:79:58:04:98:
         a3:f7:02:3e:68:95:7b:34:92:3f:bf:61:73:29:31:1c:02:61:
         61:ad:11:b0:df:c5:c0:9a:4d:1e:67:c1:6c:77:27:d1:ea:50:
         61:ab:a8:36:fe:be:2c:91:b6:8f:ec:0c:95:b9:7e:e4:99:24:
         18:1f:20:99:d6:b1:f3:7c:bd:e4:2f:38:83:3f:97:b8:d8:99:
         f4:7b:b7:37:03:ff:0d:1e:e5:1d:3e:9c:6a:cb:05:be:6b:ad:
         a9:73:3b:7d:d9:a1:8a:57:4d:64:51:0a:22:5a:be:4d:4c:6a:
         93:16:16:bb:f7:a1:a6:66:e1:e2:1a:65:d8:76:4e:7c:9c:0e:
         98:3b:4b:80:02:cb:a5:4e:ab:60:1c:18:2c:d2:17:a8:7b:2f:
         91:25:7b:bb:bd:68:fd:21:5e:e7:3d:52:58:cc:0d:92:02:f1:
         0b:93:41:45:b2:62:bd:c2:38:18:8a:45:29:46:57:5c:4c:22:
         cf:fb:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:14:32 2026 by rpki-client