Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/61fc8063-de28-3b41-9190-b476378921a2.roa
File:                     61fc8063-de28-3b41-9190-b476378921a2.roa (raw, json)
Hash identifier:          CycIGoRHW56MCvTulCGvHAw1OTaUG4Dx1iMflFcVXTI=
Subject key identifier:   85:CE:8D:E0:C6:35:16:8F:A6:9F:A7:B4:8E:37:89:D3:65:48:C3:A3
Certificate issuer:       /CN=1cca3c9b-1147-4e91-8480-37ed1becb13e
Certificate serial:       010D0C9F4328584D202FFE431E3A7C09D4AB9880
Authority key identifier: E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/61fc8063-de28-3b41-9190-b476378921a2.roa
Signing time:             Tue 10 Mar 2026 20:44:09 +0000
ROA not before:           Tue 10 Mar 2026 20:44:09 +0000
ROA not after:            Mon 08 Jun 2026 20:44:09 +0000
asID:                     20014
IP address blocks:        192.173.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:2f:fe:43:1e:3a:7c:09:d4:ab:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cca3c9b-1147-4e91-8480-37ed1becb13e
        Validity
            Not Before: Mar 10 20:44:09 2026 GMT
            Not After : Jun  8 20:44:09 2026 GMT
        Subject: CN=5b67db08-d6c5-4159-85eb-2bc7633d44e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:22:d2:41:55:66:42:83:80:42:6f:dc:77:62:
                    f8:0e:d2:82:11:7a:01:99:ee:bc:56:3f:9a:06:44:
                    10:6b:b0:d5:e9:82:1b:69:df:a2:67:24:cf:77:76:
                    f4:5a:29:ab:77:3d:ae:1a:cb:e4:c5:d0:60:6f:be:
                    15:0a:c1:11:c5:ef:e6:ee:97:cd:fb:4f:bf:39:60:
                    cb:d2:7f:fe:df:d6:9d:62:9f:05:4a:5f:08:16:99:
                    13:01:37:79:7a:e3:9e:90:59:c1:75:25:23:6c:8b:
                    10:43:f0:a0:8c:24:46:f5:fd:11:63:fe:ed:e7:da:
                    f8:31:7e:a6:b2:5d:67:13:eb:5c:10:d8:ff:2b:9f:
                    ce:5c:6d:b1:17:13:d6:88:c4:6a:75:ba:f3:0f:fa:
                    12:dd:05:8d:93:d2:54:1d:7e:69:10:6f:28:bc:82:
                    31:af:4a:a1:d4:2e:93:c1:50:4e:96:17:4c:74:7d:
                    b6:79:4a:3f:50:27:f7:fe:01:66:01:04:7c:fd:d4:
                    44:63:6d:2c:49:09:fc:6d:6d:04:9e:37:0f:ed:e6:
                    72:22:3a:a0:72:e9:03:8c:b7:86:fe:fb:b2:c7:79:
                    e5:10:3e:fe:32:10:46:bf:60:0e:b0:d1:cd:e2:4a:
                    6f:0d:64:f1:13:51:c6:9d:9f:85:ba:7e:3e:e3:b1:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CE:8D:E0:C6:35:16:8F:A6:9F:A7:B4:8E:37:89:D3:65:48:C3:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/61fc8063-de28-3b41-9190-b476378921a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl

            X509v3 Authority Key Identifier:
                keyid:E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.173.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b6:f9:f8:5b:9f:19:09:d1:77:f1:33:3b:ce:a6:fa:f6:d9:
         be:62:cc:26:46:8b:16:8a:35:6b:05:17:b7:8e:8f:ab:ee:90:
         ea:65:8d:56:ca:66:d0:2d:fe:20:f5:07:b5:c2:b2:bf:b6:3f:
         a5:13:bb:53:18:5f:b0:71:19:2a:15:05:29:18:c7:51:99:da:
         ca:52:11:fd:5c:8e:36:c9:dc:e9:6f:3f:48:79:07:81:0f:14:
         68:ce:94:c9:49:61:a7:32:a6:df:e0:1e:b6:50:55:a0:3a:9c:
         53:b2:bc:79:a4:df:4a:39:60:08:b0:25:de:55:f1:f9:ed:58:
         1c:88:8f:27:bd:b3:b7:00:28:a8:9f:6b:66:dd:d1:9c:f7:1f:
         61:1b:32:8f:61:1e:25:24:77:f7:f9:57:cc:f1:ad:30:dd:f9:
         a9:75:46:50:67:50:e2:9c:22:30:b6:9a:5a:e1:aa:62:4a:d0:
         ba:6e:2d:b6:17:2e:f8:d9:74:94:fb:6b:6f:99:22:84:6b:ce:
         c4:46:58:54:57:99:ff:f1:5a:a5:68:bd:e4:a1:35:16:59:6e:
         45:e6:bb:21:c4:fb:8f:b3:a6:f5:6c:a4:20:fe:aa:ad:d5:db:
         98:e2:c3:b7:6b:38:1d:6d:67:fe:70:ac:43:3e:0c:da:df:b7:
         90:9b:1e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:58:01 2026 by rpki-client