Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23983034-5d41-36c9-bbb7-1bf2a31ba475.roa
File:                     23983034-5d41-36c9-bbb7-1bf2a31ba475.roa (raw, json)
Hash identifier:          fGqS0K4WKL00LDlQLIc7wt7SsX/fTgAfPas2kWlZL4g=
Subject key identifier:   B4:42:19:29:24:BB:06:DF:EC:C8:32:5F:6E:CA:C1:3C:7E:DB:B7:CA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E66DA4045F4D8B512D5AE9C40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23983034-5d41-36c9-bbb7-1bf2a31ba475.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        173.29.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:40:45:f4:d8:b5:12:d5:ae:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=b4445968-04b4-4858-967f-26ca17cd1a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5b:aa:19:89:c0:99:70:5f:68:fa:f8:62:4d:
                    45:04:71:05:86:18:30:ce:e6:57:f7:d8:8e:c2:d3:
                    67:52:f4:7a:38:51:13:86:68:c3:27:f0:26:36:1e:
                    63:16:af:48:6b:dc:95:4e:19:57:ad:d0:6b:a0:79:
                    e1:37:06:2d:90:c9:04:39:c8:33:7d:39:8c:00:a9:
                    19:06:ed:ff:51:68:9d:4a:b0:ce:4b:8b:fe:3f:ec:
                    da:81:72:4b:22:3c:07:57:4c:af:e5:13:79:8a:51:
                    86:7f:95:37:02:ec:01:8c:6e:5b:2d:3a:f9:de:17:
                    ea:85:47:e0:f7:57:dc:d4:41:cf:91:ce:ac:97:03:
                    88:2c:61:53:d6:10:72:38:f6:93:e6:aa:7c:ee:68:
                    76:79:b1:9a:bb:df:0b:83:6d:38:de:ef:47:80:08:
                    e8:4d:c1:17:19:57:01:c2:dc:af:1a:83:dc:9d:68:
                    e2:52:1d:52:b5:2b:9d:d3:22:ae:d7:93:ee:51:ff:
                    40:ff:4f:78:e6:8f:3c:6c:8c:5e:83:ca:79:e9:25:
                    b8:e8:61:90:44:c3:80:29:1e:26:4f:04:00:38:0e:
                    58:94:d9:17:0c:ae:57:2c:10:d0:a9:d1:b2:e3:78:
                    6c:e5:71:72:98:cb:b8:95:9a:f1:65:92:6b:8f:30:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:42:19:29:24:BB:06:DF:EC:C8:32:5F:6E:CA:C1:3C:7E:DB:B7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23983034-5d41-36c9-bbb7-1bf2a31ba475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:9a:ae:ff:dc:5e:38:7b:65:7c:c8:16:1f:5b:d7:74:10:e8:
         03:ec:44:d2:20:cd:07:86:b5:e3:30:a4:5f:a0:76:31:45:64:
         04:04:90:9e:40:10:f2:a9:05:d9:b0:c9:50:12:73:b1:c3:72:
         76:94:d2:d7:41:f2:f7:c2:4e:0b:bd:9b:5a:40:c7:32:c9:34:
         76:6d:9e:ae:a1:dd:db:c5:5f:3f:28:2d:09:18:95:2a:b6:3a:
         c7:fd:cf:eb:e9:e0:51:50:3f:01:7a:02:84:53:b7:23:c9:69:
         2f:ce:33:ba:06:33:27:7f:67:a0:8e:0f:84:43:96:a8:d0:fd:
         e0:ea:95:1b:1e:93:0b:d6:84:0c:4d:a3:8f:84:4c:3a:71:38:
         0a:80:fb:45:7a:6c:23:90:43:cf:33:8e:fa:77:8b:e3:53:07:
         fa:06:77:c2:08:72:36:6c:13:a0:f0:45:68:6a:9b:5f:55:90:
         f6:bb:51:c7:9f:ed:7b:17:a3:d2:0d:7c:9f:77:e0:6c:ae:c7:
         e2:e3:f8:a0:25:a8:d0:9f:15:12:09:00:fa:65:7a:82:f4:6e:
         22:48:78:02:3b:29:30:5e:9e:03:ef:d3:f8:ed:4a:6c:99:b0:
         1e:ad:5c:e3:de:9d:f2:78:ed:19:c7:54:19:91:a2:65:93:63:
         83:e3:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:58 2026 by rpki-client