Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/6d5d7577-5155-35d9-b258-dd1881db3057.roa
File:                     6d5d7577-5155-35d9-b258-dd1881db3057.roa (raw, json)
Hash identifier:          XKtNzHePmfOAV27zApHqnKI9Af5CCFcyeh2KIHV/dJo=
Subject key identifier:   24:C3:B7:85:14:B5:DE:7A:1D:F7:4F:09:D7:26:3F:5B:E7:B6:FC:47
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584ED9C73B8EC8276995DFBCD780
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/6d5d7577-5155-35d9-b258-dd1881db3057.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     25655
IP address blocks:        173.241.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:3b:8e:c8:27:69:95:df:bc:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=78d312f8-9756-4d83-80c6-4f62a985e0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f7:66:b9:dc:52:50:e9:b8:9b:cd:fc:8a:8d:
                    e0:eb:d2:97:a3:05:16:82:e9:f6:53:ff:db:f1:eb:
                    49:53:3e:b6:f1:75:66:be:97:29:36:11:80:8a:3c:
                    59:28:96:b4:f2:ef:a3:d1:8b:d6:7c:fa:72:11:4f:
                    ae:cb:63:2b:a3:43:1c:49:21:a2:0f:79:d4:d4:c8:
                    4d:14:c3:d4:9f:80:c4:a8:74:78:a1:7f:14:4f:f5:
                    81:32:c3:3b:6d:92:88:e5:fc:07:f1:69:c6:02:29:
                    10:b2:70:c4:39:fd:2e:17:ff:6d:1b:1a:db:e2:f6:
                    d6:89:64:ec:39:3b:a1:5f:86:2a:8a:ee:8b:0b:a8:
                    9b:42:f0:83:b2:40:dc:04:f8:5b:e2:a0:5c:b6:72:
                    51:13:3e:9a:1c:84:a9:87:a2:94:77:ba:71:5a:3c:
                    40:fa:82:b1:83:88:b1:2e:43:b3:27:e4:3f:6a:c9:
                    9f:89:ed:69:4c:c4:56:dc:88:f2:41:38:bb:f4:a0:
                    38:ad:d0:1a:d4:87:18:cf:d9:12:b1:c7:1a:46:d0:
                    b8:72:99:c6:dd:8b:c5:8c:30:f3:8e:23:4a:d1:61:
                    0c:d1:cc:9b:cc:ad:54:6f:b4:2b:1d:d1:1b:ba:4a:
                    3b:3b:21:a7:45:4e:cd:d0:79:83:48:92:0c:4a:4f:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C3:B7:85:14:B5:DE:7A:1D:F7:4F:09:D7:26:3F:5B:E7:B6:FC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/6d5d7577-5155-35d9-b258-dd1881db3057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:58:b7:ff:c0:40:ba:75:38:4e:0a:a0:2e:59:b5:56:4a:ea:
         fe:2e:30:fc:3e:c8:77:4b:c4:c1:51:73:f2:09:45:86:97:25:
         a6:27:e3:59:37:d2:66:c7:7c:8c:71:f6:07:30:2c:18:40:6d:
         43:c4:e8:7f:10:1e:9e:7b:01:39:8d:02:c5:c4:93:4c:50:22:
         5e:00:8d:78:03:ae:cd:37:60:0d:c7:af:c5:01:f1:a5:0b:cf:
         49:7a:0d:82:0d:10:a7:4b:6c:1b:f4:32:21:f9:8a:66:72:7f:
         c3:ee:61:8d:90:18:de:ef:21:94:cb:2d:35:3a:a1:43:d1:c5:
         8d:09:88:8c:65:9b:4e:fe:8c:6c:79:30:5f:62:b9:25:08:93:
         64:31:18:46:40:40:ad:da:92:e7:20:79:f2:40:30:d7:4a:5a:
         86:b7:7e:b5:ee:19:9e:ab:d5:52:4e:b5:25:16:e3:ef:34:bc:
         53:bd:ae:4b:94:48:f8:05:26:ac:44:a3:b3:4c:6d:df:71:29:
         b7:98:34:24:1b:88:1e:95:f6:31:3c:82:86:05:b8:32:86:72:
         fb:02:ca:e6:b8:5b:d7:bf:cb:20:d9:62:c1:c1:ea:cc:7b:37:
         1e:45:5e:4e:83:83:19:e1:86:82:24:20:4d:bd:65:27:ce:4d:
         ee:dd:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:38:06 2026 by rpki-client