Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/433d4e57-4921-369c-9c17-bc9b9415fae4.roa
File:                     433d4e57-4921-369c-9c17-bc9b9415fae4.roa (raw, json)
Hash identifier:          QmQv7SiNe7S4OmRP9byOF/yoyet+HodttZlYBtf8zgg=
Subject key identifier:   1F:2D:E3:B8:49:B5:B4:71:3F:7A:AE:9E:AD:1C:5B:B7:C7:81:ED:76
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F7D3395BB19093171D90FCE00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/433d4e57-4921-369c-9c17-bc9b9415fae4.roa
Signing time:             Tue 13 Oct 2026 13:55:26 +0000
ROA not before:           Tue 13 Oct 2026 13:55:26 +0000
ROA not after:            Mon 11 Jan 2027 14:55:26 +0000
asID:                     49532
IP address blocks:        173.213.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7d:33:95:bb:19:09:31:71:d9:0f:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct 13 13:55:26 2026 GMT
            Not After : Jan 11 14:55:26 2027 GMT
        Subject: CN=5ec50fc8-dc12-45d7-a04c-6284723b94b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:45:cb:88:d9:f7:bc:bd:63:d9:34:c8:24:
                    9f:59:c3:a5:2a:17:22:9e:cd:ba:8a:fe:3c:06:38:
                    3a:82:94:36:d4:2f:49:c1:22:fb:5d:ff:2f:a9:ba:
                    05:15:35:2d:54:6e:f8:ad:e3:ed:4d:ab:57:99:ea:
                    e6:62:7e:d3:9b:79:5f:9c:a4:0b:ba:b8:5f:f7:93:
                    4e:f6:64:86:a5:ab:e9:65:00:81:04:c1:d1:10:27:
                    a7:cc:d1:6f:5e:67:49:1d:2a:4d:a1:54:21:1c:95:
                    24:fd:95:f5:d5:35:34:25:d8:9a:48:fa:52:b2:40:
                    d3:99:2d:e5:22:f4:6b:e7:3c:27:84:73:f3:2a:bd:
                    54:d4:f7:6c:e0:25:d9:88:eb:8a:29:1f:fe:47:96:
                    bb:9d:08:ee:27:3a:3d:c6:5f:e8:15:f6:48:cf:df:
                    70:91:18:2d:fa:c7:ea:27:03:7e:b7:1d:de:c2:1d:
                    94:4f:f5:e7:db:9e:0b:24:cb:68:59:7a:5e:5e:b3:
                    02:55:ce:0f:4d:a4:bd:66:a8:a8:b5:0c:80:9c:6e:
                    5a:aa:7e:bb:87:22:e7:86:ae:98:b1:aa:f7:54:bc:
                    f1:56:1a:11:8f:d2:49:61:28:93:9a:17:92:6e:29:
                    8b:13:42:25:78:a8:11:7e:c4:15:21:7a:f8:d7:50:
                    07:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2D:E3:B8:49:B5:B4:71:3F:7A:AE:9E:AD:1C:5B:B7:C7:81:ED:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/433d4e57-4921-369c-9c17-bc9b9415fae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:02:21:67:10:c1:5d:c1:b3:a5:82:82:55:b1:77:34:92:33:
         49:bc:43:cd:24:3c:c4:71:d2:d4:aa:d1:bb:71:a6:dc:4d:0a:
         01:a3:d0:fd:58:b2:d6:e0:a8:be:2f:ae:3d:fe:bc:f6:45:1c:
         cb:12:29:3a:4c:fa:4f:6f:20:7d:8f:95:b5:d2:bf:92:ba:5e:
         ec:7a:cc:25:46:87:d9:27:c8:95:57:f0:f9:79:6f:3e:2b:1f:
         99:d9:58:f2:a1:17:c5:53:4e:c7:19:18:2d:5a:f7:dc:ee:66:
         36:9a:4d:2b:68:61:44:cb:6a:a6:f9:85:ae:6e:8b:37:8e:54:
         71:8f:4e:ee:f5:86:3d:49:f4:45:20:ba:3f:e6:37:31:80:18:
         8d:b4:c1:33:d6:c7:08:fe:01:15:2e:f9:4f:53:a2:2a:ac:02:
         ff:4e:63:31:ab:fb:1c:08:71:10:2e:5f:cf:08:60:fc:db:4c:
         ca:5a:75:17:9f:6e:55:ba:00:97:da:0c:0d:f5:c7:4b:46:37:
         f4:33:dd:ef:c5:c7:0a:03:d2:35:31:06:19:5f:6d:0e:57:49:
         cc:39:69:da:5f:f5:4f:0f:47:00:28:57:ba:50:a4:dc:09:82:
         2b:18:44:ea:70:43:15:ca:a7:34:41:c3:61:7d:82:d7:e3:47:
         52:3d:87:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:49:53 2026 by rpki-client