Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bccd67f-327a-339f-884d-4d21940bc230.roa
File:                     3bccd67f-327a-339f-884d-4d21940bc230.roa (raw, json)
Hash identifier:          pMa37uC/gsAiWzLe2NLv1/6zuaj+KigpgqSI2rfyhtQ=
Subject key identifier:   B2:DB:FA:FE:48:E5:E8:71:C7:5E:4F:F1:02:4E:DD:61:D8:D3:37:73
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F4B2A42C111295A8ED6A7EC00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bccd67f-327a-339f-884d-4d21940bc230.roa
Signing time:             Fri 25 Sep 2026 15:46:14 +0000
ROA not before:           Fri 25 Sep 2026 15:46:14 +0000
ROA not after:            Thu 24 Dec 2026 16:46:14 +0000
asID:                     40676
IP address blocks:        173.211.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:2a:42:c1:11:29:5a:8e:d6:a7:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 15:46:14 2026 GMT
            Not After : Dec 24 16:46:14 2026 GMT
        Subject: CN=f3c89179-dd9d-4979-be08-9660641894e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:60:e3:3c:33:e0:90:e4:34:09:e0:24:7b:
                    34:c2:5a:1a:21:e6:f3:ed:ca:29:9b:c4:61:a7:6f:
                    9e:3c:82:77:a6:d8:25:7d:63:02:8f:01:f6:fe:0c:
                    2e:5d:85:f5:0f:11:f9:66:8b:62:35:38:97:fa:bc:
                    06:7f:6b:b3:30:be:57:29:5c:8a:d5:0e:19:76:0f:
                    5c:97:5c:42:79:ea:ee:81:e6:4d:2d:52:a1:6a:94:
                    36:83:d2:9a:ee:2c:5a:55:5a:81:71:15:32:9b:3f:
                    0b:e3:f0:c3:5e:a3:05:d4:ed:ac:fe:ff:80:bb:62:
                    22:b9:98:3a:05:f3:6a:76:61:24:43:f7:47:3c:94:
                    31:00:70:46:cb:ee:f3:06:63:66:94:c1:ef:bc:2f:
                    bd:28:26:34:f4:ff:95:f7:00:49:62:ec:11:0b:8c:
                    1e:49:e8:bb:ac:c1:8a:69:98:d6:d0:ae:e9:27:21:
                    02:fb:ce:0d:87:e0:37:70:3a:c1:eb:87:aa:e9:e0:
                    57:17:8c:f4:25:a0:c2:0e:4c:d4:7d:2e:b6:cc:fa:
                    50:fb:97:f4:68:b5:23:71:02:6a:23:5d:7d:2e:48:
                    5f:95:66:02:ad:9a:75:7c:3a:4e:7c:a6:f1:d6:2e:
                    ea:4c:31:90:c9:1f:ad:86:11:47:78:0a:4d:0d:2c:
                    33:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DB:FA:FE:48:E5:E8:71:C7:5E:4F:F1:02:4E:DD:61:D8:D3:37:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bccd67f-327a-339f-884d-4d21940bc230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4a:08:34:0f:e2:2e:dc:e2:9c:d6:ae:6f:fa:39:01:df:ed:
         1e:e4:e6:47:06:b1:31:13:e3:4e:70:f8:77:c6:ef:9d:d2:06:
         64:42:da:c8:3e:7c:20:b9:e3:af:81:6f:55:82:c9:75:08:9b:
         3b:ca:48:b6:b6:e0:91:b3:49:14:9a:c1:7b:cd:29:e3:e0:0d:
         cd:27:95:23:38:77:58:fc:18:02:3c:e6:50:8b:47:c7:dc:be:
         9e:e1:a0:f0:45:00:fd:da:ac:c1:a2:14:b7:77:fa:f5:a9:00:
         9f:52:50:31:8d:01:00:07:52:91:00:58:6f:43:8b:fa:08:83:
         23:c6:35:51:1d:8b:59:bc:ec:73:a3:03:e7:ca:aa:cb:c7:42:
         c3:98:43:95:01:e7:55:2d:b4:df:34:e0:6c:7f:f0:29:c8:e8:
         a2:29:d8:d7:73:d3:43:c4:bf:d5:fe:eb:1a:7e:47:ab:a5:bc:
         0d:e5:61:c7:ce:82:8d:bb:2f:21:90:30:3d:61:16:10:f9:14:
         aa:f1:ef:8a:43:88:8d:74:9f:93:d6:e9:3f:65:a5:57:73:4d:
         44:b1:42:21:9c:2c:41:75:c9:6d:db:15:81:cd:73:72:fa:7e:
         28:aa:fd:1b:8e:e1:8c:9a:62:58:ec:95:85:e3:c9:55:01:71:
         dc:23:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:26:44 2026 by rpki-client