Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/262c6a81-ad7c-3b85-8ce4-c0dad34ac85b.roa
File:                     262c6a81-ad7c-3b85-8ce4-c0dad34ac85b.roa (raw, json)
Hash identifier:          SN3RS7MgzGuvFGkI03KgDlb6vcWx7Ez2CLiPAO+u07Y=
Subject key identifier:   60:C3:46:94:34:4B:BD:11:62:57:6A:91:D7:4C:5F:E8:36:C1:E0:32
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DCDC5D4A0C2CD63EF0C311980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/262c6a81-ad7c-3b85-8ce4-c0dad34ac85b.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        173.20.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:d4:a0:c2:cd:63:ef:0c:31:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=abd394fe-5902-4efc-bf56-b3a01a9367d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:95:39:28:e7:59:e6:1d:11:a5:e8:13:f8:d5:
                    73:46:54:ec:db:80:0a:3e:7f:de:3c:16:36:3b:f0:
                    b7:ed:d0:50:6a:4e:92:b4:89:f2:26:bc:c8:86:c0:
                    6e:54:08:6a:66:1c:1b:67:73:ae:ca:1b:69:23:7c:
                    9a:29:62:12:32:79:2c:3c:7b:ec:6d:57:87:e7:98:
                    b7:23:5d:e2:de:56:3d:dc:09:cd:73:0c:c3:fa:f7:
                    ae:d3:a3:be:2d:06:15:b9:c2:15:db:21:d4:e3:0b:
                    63:76:d8:ce:50:bf:69:ca:b6:2b:14:01:5c:8d:ed:
                    f7:e4:ea:41:fb:73:8c:d9:5d:f0:1c:7b:a6:a5:1c:
                    63:82:9f:bd:e4:d8:2c:06:88:dd:35:98:da:51:57:
                    e3:2a:c1:45:bd:eb:62:35:71:8e:d5:44:d7:78:0d:
                    64:be:25:ac:5b:f5:ac:97:c8:54:a5:40:1f:1d:1d:
                    4e:5a:10:42:9c:73:70:1b:e8:65:5e:3c:37:c3:08:
                    97:e7:51:78:2b:d5:4c:b9:e4:c9:f4:1a:bb:67:b3:
                    70:38:92:d4:ae:89:df:1a:aa:97:da:76:06:93:07:
                    8d:65:b5:86:e9:c5:c8:4b:ee:5a:0d:a6:a0:fe:9c:
                    f6:d7:88:ed:62:94:0b:07:54:21:f5:3d:a3:56:d9:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C3:46:94:34:4B:BD:11:62:57:6A:91:D7:4C:5F:E8:36:C1:E0:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/262c6a81-ad7c-3b85-8ce4-c0dad34ac85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:67:65:e5:e9:79:09:fd:c4:c9:fe:d8:81:f4:ac:b6:b2:
         ec:4f:ae:fa:89:cd:2a:21:46:6c:a6:cf:17:93:42:92:0f:93:
         6c:30:c7:9a:e1:17:1e:e4:b1:2d:b1:28:8c:c0:0f:f6:80:03:
         7c:ea:0b:cb:6e:1b:9f:d8:bc:13:b1:0d:cf:19:3f:f2:71:01:
         3b:8b:dd:38:5e:32:62:f1:82:87:01:e9:da:5f:d7:d5:48:ef:
         a5:d9:da:13:fc:63:3b:72:78:5b:53:9c:ea:47:4a:fb:11:da:
         1c:5e:73:46:4c:26:73:0b:5d:62:a5:48:a0:48:c1:4b:3c:94:
         c5:76:11:ff:49:10:1c:af:82:69:31:d5:31:2b:21:bc:a1:85:
         e0:ca:9f:ab:b3:fb:e3:da:0d:08:70:88:d4:12:6a:62:e6:d3:
         4c:7a:64:8f:7d:13:d3:ec:4f:da:04:fa:8c:1f:5a:c3:7b:98:
         47:cb:45:e9:eb:2a:17:47:d6:dd:a1:60:43:4f:2b:dc:8a:1d:
         0e:05:c3:dd:74:fa:b7:17:32:c0:f1:26:f2:5a:d4:01:31:bd:
         95:b9:b7:83:e4:80:70:8c:54:7a:21:79:8e:0d:2c:bf:3f:6b:
         c5:66:dd:38:66:28:76:45:2a:29:86:39:97:c3:69:bc:a6:13:
         b7:23:64:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxdSgws1j7wwxGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
YWJkMzk0ZmUtNTkwMi00ZWZjLWJmNTYtYjNhMDFhOTM2N2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5U5KOdZ5h0RpegT+NVzRlTs24AKPn/ePBY2
O/C37dBQak6StInyJrzIhsBuVAhqZhwbZ3OuyhtpI3yaKWISMnksPHvsbVeH55i3
I13i3lY93AnNcwzD+veu06O+LQYVucIV2yHU4wtjdtjOUL9pyrYrFAFcje335OpB
+3OM2V3wHHumpRxjgp+95NgsBojdNZjaUVfjKsFFvetiNXGO1UTXeA1kviWsW/Ws
l8hUpUAfHR1OWhBCnHNwG+hlXjw3wwiX51F4K9VMueTJ9Bq7Z7NwOJLUronfGqqX
2nYGkweNZbWG6cXIS+5aDaag/pz214jtYpQLB1Qh9T2jVtkNrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDDRpQ0S70RYldqkddMX+g2weAyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjYyYzZhODEtYWQ3Yy0z
Yjg1LThjZTQtYzBkYWQzNGFjODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpZZ2Xl6XkJ/cTJ/tiB9Ky2suxPrvqJzSohRmymzxeTQpIPk2wwx5rh
Fx7ksS2xKIzAD/aAA3zqC8tuG5/YvBOxDc8ZP/JxATuL3TheMmLxgocB6dpf19VI
76XZ2hP8YztyeFtTnOpHSvsR2hxec0ZMJnMLXWKlSKBIwUs8lMV2Ef9JEByvgmkx
1TErIbyhheDKn6uz++PaDQhwiNQSamLm00x6ZI99E9PsT9oE+owfWsN7mEfLRenr
KhdH1t2hYENPK9yKHQ4Fw910+rcXMsDxJvJa1AExvZW5t4PkgHCMVHoheY4NLL8/
a8Vm3ThmKHZFKimGOZfDabymE7cjZNM=
-----END CERTIFICATE-----
Generated at Wed May 13 10:38:41 2026 by rpki-client