Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa
File:                     3a0f091a-389d-3b3e-9644-f38a94d40195.roa (raw, json)
Hash identifier:          UGlUFjlTcrCM4JZXy3R9bNAQi8BPpHq4KkHfgRj3fpg=
Subject key identifier:   25:BE:B7:0C:44:63:30:53:DE:47:88:91:3B:7B:FF:FE:74:05:68:B7
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328584EA788A5E3B803153600845280
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46562
IP address blocks:        173.0.73.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:a5:e3:b8:03:15:36:00:84:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b196555c-a3d3-4176-ac1b-0d31270535a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:f1:90:c6:b0:54:0e:9a:79:64:b0:90:62:
                    d9:f1:40:17:f1:6a:b8:b2:e1:14:77:17:5a:5f:23:
                    3a:11:84:26:cc:28:8d:ca:04:8c:ae:8a:f9:c8:0a:
                    3e:52:dd:88:1e:bd:73:d2:c2:91:28:6b:e8:56:50:
                    7f:c3:88:26:5d:5f:d5:00:0e:96:69:46:d0:94:8a:
                    df:fa:48:95:fa:dc:7e:0d:41:b9:e7:ac:c6:74:c1:
                    80:9e:fd:e1:c2:9e:12:6d:2f:12:74:72:b3:ff:23:
                    94:67:93:db:b4:96:9d:3a:69:c5:97:a5:5c:4e:3e:
                    59:09:94:b6:83:30:48:0a:c5:79:a4:30:bc:c3:38:
                    66:60:e8:13:b7:93:5f:4c:99:1d:3e:30:23:da:f0:
                    f4:f8:14:78:32:fc:47:8e:6a:a0:bd:1f:8c:eb:50:
                    7e:2d:e0:df:f6:a9:af:6f:48:04:da:d0:42:bc:33:
                    d3:b4:b1:56:78:28:a9:fb:c7:03:25:f5:83:4e:b0:
                    b2:8e:75:48:ed:1d:5a:c8:c4:4f:49:27:c7:0f:9b:
                    19:b2:be:3e:93:49:f7:5d:99:cb:08:a6:34:91:2a:
                    cf:9c:08:df:65:76:ab:6a:8f:c4:fe:af:67:c0:e5:
                    11:c6:a7:ab:8b:63:f1:9d:e1:8f:4d:a0:65:e1:d4:
                    ae:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BE:B7:0C:44:63:30:53:DE:47:88:91:3B:7B:FF:FE:74:05:68:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:9c:bf:8c:9c:13:97:ce:ad:34:d9:02:4b:47:1c:d6:a8:d3:
         64:56:5a:16:0a:71:3a:3c:94:c0:c2:5d:80:b6:4e:9c:df:48:
         65:e6:31:86:1a:e5:4e:d1:0f:4d:5a:34:a5:7b:86:06:4b:06:
         a5:e4:ac:40:c1:f1:9a:7a:3d:24:0a:00:0c:04:06:a6:4c:10:
         74:b7:b7:76:6f:a8:d9:77:7f:50:46:7f:54:51:45:27:52:5c:
         1c:0b:95:23:68:e1:52:0f:c0:2f:d6:e6:f3:95:da:c7:0e:b4:
         b6:a3:40:70:0b:6d:bc:c2:4f:da:52:8f:49:0b:c1:a2:5c:ec:
         da:30:dc:de:98:0a:ca:8a:85:ae:06:0f:67:61:97:3b:1e:62:
         05:ee:d3:c7:1e:85:9c:dd:93:d7:bb:ae:77:ab:56:4e:46:74:
         4c:1a:dd:61:74:5e:df:7a:6d:c3:67:9c:82:fc:c7:99:19:b5:
         5a:f1:38:4c:5b:15:79:a9:c1:da:e5:a9:d2:6d:ee:9d:b1:20:
         e3:9e:ce:04:bc:95:6c:3a:ae:b6:5b:e7:51:00:6d:74:7d:ba:
         c2:49:4a:0a:62:74:6d:42:10:5a:7e:80:c6:41:41:06:98:94:
         72:8c:f0:1c:42:2e:3d:98:ef:2d:05:10:64:a8:97:26:86:66:
         18:f2:29:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:59:12 2026 by rpki-client