Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa
File:                     67818fc7-8ab6-3138-abb2-01b0da986df0.roa (raw, json)
Hash identifier:          c4FioQJa7A/3qc9R9ZKur4IT60gIcXF3JL2Vn0Bp7pE=
Subject key identifier:   FE:8C:0C:CF:53:46:5E:8E:33:98:5B:92:11:DD:29:B3:84:14:ED:3A
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584ED9C73BC9D5F088C3F98530A0
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     25655
IP address blocks:        173.241.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:3b:c9:d5:f0:88:c3:f9:85:30:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=47961b22-827c-44a3-ae1e-9324e7ab634d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:b9:1f:89:8e:0f:6a:a2:28:92:38:c5:34:
                    87:24:45:00:17:b4:a7:96:8b:7b:23:4a:fb:60:a1:
                    81:a3:e1:f4:4f:41:e4:88:d7:3a:d2:b3:67:ee:63:
                    aa:4f:a0:75:c4:2f:55:2d:cd:cf:b6:c6:68:a7:80:
                    f0:90:2a:08:49:e6:76:be:12:e4:62:92:56:b0:d0:
                    0f:8c:88:3f:80:3c:e9:ad:f6:71:85:7c:09:4c:3b:
                    83:71:55:8a:75:48:cb:eb:99:4b:90:b0:09:7c:d6:
                    fd:a9:bc:15:6e:6d:97:29:c6:66:03:bc:0d:a2:4f:
                    bd:c8:69:7a:9e:3e:f7:6e:ce:f1:78:af:3e:df:34:
                    ce:a7:fe:ea:f2:58:94:d2:5d:2a:37:1a:c7:ac:70:
                    e3:25:3c:0c:15:f8:04:5d:b4:ae:54:b8:6e:6b:43:
                    09:7a:cd:78:33:53:c0:d7:a2:e0:89:e4:ca:60:81:
                    80:8f:4f:a0:21:50:0d:4f:c1:82:ef:d2:6c:85:2d:
                    59:fd:eb:50:86:7c:f9:42:36:f5:8f:9f:9a:d1:37:
                    d3:56:a3:ae:58:37:d4:6d:8c:a2:93:99:68:f1:77:
                    66:bf:a3:d2:b3:9a:3d:c9:0d:79:4b:a3:05:86:84:
                    12:29:0e:eb:c0:4e:85:e6:53:ff:2c:0f:4c:99:c2:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8C:0C:CF:53:46:5E:8E:33:98:5B:92:11:DD:29:B3:84:14:ED:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f6:0d:65:5d:f8:cc:37:25:d7:12:32:70:b8:6e:26:62:ab:
         e1:4f:e9:1c:f4:ec:90:2d:08:79:3e:c0:00:3f:9c:26:0c:cb:
         22:87:52:16:85:a1:11:7d:3e:eb:49:91:c8:b6:95:c7:a6:28:
         fc:aa:e5:ac:60:56:1b:ba:c0:c2:32:dd:49:91:0f:ce:6e:e5:
         a5:37:20:9c:5e:2f:0d:ac:6b:65:37:aa:15:a4:26:1d:3d:61:
         e7:f9:93:30:d4:35:20:e8:7f:99:b6:8a:6f:c1:0e:ec:fb:be:
         1a:8a:16:b3:8f:65:ff:c7:d8:32:d4:a2:a0:30:a1:40:bf:9d:
         f8:ae:b3:20:f4:9c:73:f1:71:d4:41:ed:42:d2:d2:34:f3:a5:
         7b:95:52:0d:3a:62:71:d3:a7:3c:22:e6:d1:7f:55:3c:5d:c4:
         f6:c0:32:11:35:83:26:17:91:23:1f:b6:98:7a:03:f6:9d:4c:
         1a:d1:88:66:05:92:2c:bf:0d:c5:04:e2:46:18:c9:36:dd:1e:
         ae:c8:7e:2d:13:49:dc:6b:39:8b:3c:7f:f8:6c:7a:bf:b6:0c:
         d4:d5:95:e0:b7:44:b0:4d:33:d8:63:84:fb:4e:42:19:54:c8:
         ff:3d:a4:b4:6f:91:c1:7c:05:66:7e:64:69:01:bd:d9:4b:0b:
         6b:c5:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 09:04:25 2026 by rpki-client