Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ec8a7567-bfc7-361a-a176-73be4afe9797.roa
File:                     ec8a7567-bfc7-361a-a176-73be4afe9797.roa (raw, json)
Hash identifier:          c/slP4q+JUe/TjOcwWEX7TOuO1SeHLNqG4hthzba2yM=
Subject key identifier:   26:9D:DD:0C:58:C3:5C:4D:9D:F5:E3:B1:1E:80:B5:5E:AE:3B:04:C2
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D620AA4C6516267546CB32180
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ec8a7567-bfc7-361a-a176-73be4afe9797.roa
Signing time:             Fri 03 Apr 2026 10:52:14 +0000
ROA not before:           Fri 03 Apr 2026 10:52:14 +0000
ROA not after:            Thu 02 Jul 2026 10:52:14 +0000
asID:                     26769
IP address blocks:        173.232.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:0a:a4:c6:51:62:67:54:6c:b3:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr  3 10:52:14 2026 GMT
            Not After : Jul  2 10:52:14 2026 GMT
        Subject: CN=7278d104-2e14-45f5-8c6e-0604016f0c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:3d:e6:10:25:90:de:25:3a:3e:86:a0:36:
                    f8:a0:e9:03:f7:87:8f:aa:e1:bb:75:59:e3:c9:96:
                    e4:24:48:17:ab:91:b0:93:72:93:61:70:6a:a0:13:
                    59:71:c8:00:da:47:a7:30:38:c7:52:86:aa:5d:f8:
                    b3:cf:67:77:b4:25:6e:86:8e:5a:fe:bb:38:29:2c:
                    07:d3:8c:02:5b:f3:cd:82:01:77:de:9d:ce:70:ee:
                    29:3e:74:c8:ce:cb:55:0b:08:bf:ce:82:fb:e6:9c:
                    13:82:75:f4:ed:7c:be:45:02:1a:dc:63:1d:fc:72:
                    61:c8:3a:f9:c3:00:d5:8d:82:0d:07:22:5f:11:3a:
                    e6:41:2f:ee:03:26:bf:cd:76:e8:52:e8:61:53:aa:
                    dd:3c:fb:1e:64:d4:8a:04:98:30:35:71:20:a6:9b:
                    ee:08:eb:75:1a:7e:84:0d:26:88:3c:f5:bc:6a:1b:
                    22:36:c0:b4:f7:97:4a:f9:cb:9a:ac:49:98:4b:bb:
                    97:07:2a:78:00:18:0d:00:70:b6:1c:f2:97:c8:d2:
                    c4:f6:c1:da:b8:4b:18:7a:53:5c:38:6a:37:2a:de:
                    0e:d0:2a:f9:a2:b1:fb:0c:c3:41:1c:a8:93:f1:05:
                    f5:0c:53:c0:a7:b9:94:3f:fc:8b:ed:e7:ff:03:9c:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9D:DD:0C:58:C3:5C:4D:9D:F5:E3:B1:1E:80:B5:5E:AE:3B:04:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ec8a7567-bfc7-361a-a176-73be4afe9797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:45:b8:b6:77:6b:b6:39:aa:1f:37:9d:be:b1:42:2d:c5:c7:
         53:18:c7:01:a4:84:f2:ec:82:ca:d5:fe:15:28:b9:a8:6b:cc:
         31:a7:b7:b9:2d:d2:ca:81:56:4f:5e:41:f3:ee:ec:b3:84:55:
         6d:3a:62:2d:82:08:34:8c:77:1a:42:2f:c9:32:54:e3:cf:aa:
         e5:b5:e5:5d:ab:3e:a5:91:87:07:cd:e2:9b:31:76:aa:18:78:
         77:90:e9:82:82:78:a8:12:17:41:33:cb:7a:a0:e9:f4:75:43:
         02:5d:83:af:ac:b4:36:a0:83:54:29:05:fc:a5:fd:1f:d4:74:
         2a:c1:9a:1e:e3:fb:0f:fd:4e:97:9e:ed:dc:fd:f4:84:1b:8e:
         d1:52:7e:ad:7e:12:5a:8e:f2:a5:15:56:9e:98:3f:e9:ba:74:
         ce:93:e7:77:72:6b:fc:16:6b:95:e5:5e:d2:a1:f7:91:18:14:
         2b:ee:7a:e4:28:c3:c3:4f:88:62:f8:ba:b6:29:f6:db:38:64:
         31:4f:a3:bd:c3:25:9d:e5:26:cb:c6:90:6e:b1:47:f6:cf:e5:
         13:34:b3:e2:d0:cd:ef:a1:ec:95:2a:f6:68:69:9e:a7:71:0b:
         8d:b2:4c:5f:d9:83:85:55:63:4f:cc:e7:b7:d0:5e:7f:ec:c1:
         1b:80:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:07 2026 by rpki-client