Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f25320a7-7b4f-3d00-8d0c-9d741477de51.roa
File:                     f25320a7-7b4f-3d00-8d0c-9d741477de51.roa (raw, json)
Hash identifier:          yXgdovGOc7QGYvuzh/glczeRJcFwQvFq+sJD704plqs=
Subject key identifier:   F7:01:A1:A0:2B:5F:41:45:23:4C:CA:4D:4E:DA:6F:49:A0:A4:F2:01
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D74701E1CF6E18E1E0A5CB000
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f25320a7-7b4f-3d00-8d0c-9d741477de51.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     834
IP address blocks:        173.232.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:1e:1c:f6:e1:8e:1e:0a:5c:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=39aefdf2-8368-423d-9544-a36e4fdeee79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:50:cc:86:c8:93:01:d6:04:75:f7:4a:19:
                    87:d1:a6:ef:bc:1e:8f:6f:71:89:af:a6:33:0d:35:
                    ba:16:38:c8:4c:46:92:58:54:7e:1f:dd:60:18:e2:
                    05:42:5f:bc:72:5e:94:e0:77:d9:fd:4a:fc:ff:70:
                    c7:a9:cc:d5:a8:97:1e:0f:8e:19:e2:90:28:ee:4a:
                    06:fb:ab:ff:c3:c6:fe:35:b8:bb:12:85:12:8b:7f:
                    3f:5b:cc:f3:cb:2a:05:4b:b1:b9:d4:35:6e:af:4c:
                    85:13:42:b1:71:73:54:f6:ac:21:b5:d4:cc:de:b8:
                    a2:40:63:3a:83:65:11:ce:e3:8e:3e:29:c9:cd:fc:
                    b0:9e:97:fd:3b:4d:52:f3:79:74:5b:1f:b0:9c:8c:
                    43:98:c0:2a:d6:63:b7:af:dc:bc:77:82:d6:82:b8:
                    cb:01:d9:b2:ed:a5:86:75:58:22:fe:c1:c5:87:85:
                    2f:ed:60:20:cb:05:ff:51:de:34:ce:20:3c:5d:a4:
                    3b:78:db:1d:eb:07:31:c1:43:00:e4:28:4f:6a:a6:
                    5e:a3:f0:6b:60:ee:e5:d4:99:86:51:ad:fd:2d:d8:
                    ac:b8:67:e0:65:36:6d:d7:fa:23:b0:71:d7:06:a6:
                    7f:eb:b7:38:90:5a:ac:65:31:80:d1:07:4e:8a:10:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:01:A1:A0:2B:5F:41:45:23:4C:CA:4D:4E:DA:6F:49:A0:A4:F2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f25320a7-7b4f-3d00-8d0c-9d741477de51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:61:88:83:2b:b3:7e:17:3a:a6:14:2b:fe:13:d8:2d:24:9e:
         4e:b3:2f:34:fb:e5:ad:e9:50:5a:30:51:4c:83:ea:37:c3:b0:
         2d:85:a7:fa:10:a3:bb:4f:10:cd:3a:ff:a0:ff:96:61:19:6a:
         d9:8e:4b:fd:bc:36:f6:d1:7e:37:e1:37:66:e8:a6:c2:a4:93:
         c1:9a:ec:77:aa:1d:d5:08:db:90:db:df:6d:55:a2:d7:c6:37:
         33:98:49:d9:c1:62:5e:ef:77:5f:6f:d5:95:93:10:dd:da:c3:
         72:e0:a8:a0:9a:b8:aa:ac:f9:bf:0d:75:11:77:80:b5:8c:0e:
         cc:61:92:07:9d:fc:30:16:3d:7b:9a:ec:dc:e9:39:3d:1a:99:
         fb:ac:33:b1:e2:21:63:3c:83:72:0d:3a:0e:63:7e:8e:5f:bb:
         21:c8:2b:c7:c3:b2:d6:7f:e2:f4:13:fc:39:54:a7:8d:08:36:
         a2:d2:f5:e6:70:70:68:86:bb:4d:e6:e1:44:de:63:21:7c:23:
         c4:75:8e:c7:f0:9b:32:0f:d2:e4:f1:60:81:d8:93:2a:88:9f:
         95:32:3d:15:f7:8c:80:d6:16:ea:67:ba:2f:ff:df:54:22:84:
         b8:e2:eb:da:e1:be:eb:11:96:7e:e2:75:5f:04:f1:c7:38:5e:
         6d:3b:c3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:34:15 2026 by rpki-client