Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/34b0bbcc-77a8-3218-a432-5cf0b28b087b.roa
File:                     34b0bbcc-77a8-3218-a432-5cf0b28b087b.roa (raw, json)
Hash identifier:          n14KQMm4jFAaA/CY3LmNRMHeJ4ihBgJqnqtF27d6H/A=
Subject key identifier:   38:BA:60:63:89:D5:5D:E4:A9:51:91:23:08:E4:E5:B4:C7:A5:AE:7A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F268D06DB8E2B4DC761EF5C00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/34b0bbcc-77a8-3218-a432-5cf0b28b087b.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     852
IP address blocks:        173.181.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:06:db:8e:2b:4d:c7:61:ef:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=221bd608-ba6f-441b-a386-d63ce7422179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:6c:64:81:13:ca:da:47:9b:94:f1:15:23:
                    3e:77:fa:97:68:32:35:ab:87:c2:46:b9:ed:55:b8:
                    7d:37:cc:5c:04:18:99:99:6a:6c:f4:1b:92:9c:36:
                    fe:6e:54:d5:bf:44:c7:a7:58:c4:a2:c0:91:fa:e0:
                    1d:cc:49:f6:e7:c6:5c:0b:0d:9b:31:66:db:b0:95:
                    52:bc:0a:fc:ce:db:ad:ad:5c:bd:fd:e2:35:97:84:
                    a8:9f:64:36:db:e4:df:11:0b:5f:02:f6:24:ea:70:
                    21:72:d4:df:0e:54:9e:51:0f:9a:94:b4:a4:e0:b2:
                    d9:57:84:eb:e8:26:8d:af:25:a4:90:34:33:d8:91:
                    6d:4b:ad:5a:41:77:68:1c:33:e4:ed:48:67:06:2a:
                    16:95:bb:eb:c7:8b:32:32:39:fb:9a:55:2c:75:44:
                    cd:2e:4d:cd:19:ad:1c:91:14:e1:4b:6c:a8:ec:3f:
                    33:d7:f2:02:b5:40:c0:5d:bb:1d:6e:e8:ae:6a:10:
                    5c:d9:bd:32:2e:50:db:7d:38:ee:5b:57:5d:b1:ce:
                    41:18:73:ee:eb:e0:57:53:b8:fa:71:21:5b:95:a5:
                    18:08:68:95:7e:b8:cc:05:7c:08:a1:76:00:97:95:
                    c0:7f:ed:64:14:e8:df:5f:36:73:ef:4a:3f:94:b0:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BA:60:63:89:D5:5D:E4:A9:51:91:23:08:E4:E5:B4:C7:A5:AE:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/34b0bbcc-77a8-3218-a432-5cf0b28b087b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.181.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         eb:4e:6e:ae:d0:b2:0e:98:8a:7f:bc:32:8a:2f:28:fb:77:9c:
         ff:d3:42:cf:af:28:28:e4:38:d4:08:d9:ee:eb:f7:ba:5e:16:
         44:48:79:1c:76:d6:31:fd:bc:c1:69:04:d8:9a:77:94:12:61:
         53:01:01:a1:18:09:93:ee:92:9e:e0:87:fe:65:50:02:45:61:
         5a:9c:85:f6:80:f7:bd:a4:9b:62:75:dc:42:47:d4:fc:53:1c:
         6e:18:7c:ee:eb:8c:72:33:99:35:af:49:a8:db:46:4f:20:43:
         2b:1a:de:a1:85:9b:a9:e8:80:c8:ec:56:0c:25:1f:e2:81:52:
         e1:69:4d:b2:5c:d6:78:7c:4e:9e:16:3c:53:ff:31:8b:e2:61:
         69:8d:bf:8f:c7:a0:87:55:65:19:a5:6e:81:4b:51:e3:83:d5:
         15:26:ae:6d:74:81:94:d2:bd:47:7e:2e:03:cc:24:c2:23:b0:
         23:12:88:ca:4d:7d:53:0e:0c:d4:84:30:e9:67:64:2e:5b:b5:
         88:19:ba:2a:e6:94:6a:c0:b7:6e:95:2f:02:f9:0b:ca:b8:d3:
         41:88:df:1b:f0:d2:4f:99:09:8d:ce:86:89:28:0d:da:a8:8f:
         53:4b:f9:28:f5:98:19:d0:37:8b:cd:a3:7c:61:c1:df:2f:fa:
         79:07:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:56:23 2026 by rpki-client