Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c7651b7-6269-38fc-be0d-4443a7402b0f.roa
File:                     4c7651b7-6269-38fc-be0d-4443a7402b0f.roa (raw, json)
Hash identifier:          oXAs5RNhKjmxucojpVik9EzHGzaXIkoShOqDNXY4tGo=
Subject key identifier:   66:21:00:BE:E4:4D:8B:DC:7E:2C:6D:AB:82:F6:F4:51:1B:02:EE:55
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4987B98283FFDB6E1BC36380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c7651b7-6269-38fc-be0d-4443a7402b0f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.23.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:b9:82:83:ff:db:6e:1b:c3:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e8b43945-c291-4d8c-8c8e-f5e20b0f466e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:47:a6:b3:7f:5d:0a:ab:32:db:1a:8e:d7:1b:
                    2d:de:dc:e7:80:66:df:b8:4b:7a:28:6a:32:76:47:
                    23:27:38:75:ee:cf:e7:aa:9d:cd:e1:e9:00:84:f6:
                    e5:2f:5d:45:cf:ed:9f:6d:0d:f9:f8:6c:0d:4e:9d:
                    d4:01:81:9f:66:f5:f7:c9:43:3c:92:33:44:5e:e2:
                    b2:22:a4:6a:41:21:f2:73:d2:de:04:92:9b:fb:de:
                    65:4b:f4:c5:14:77:ef:c1:81:d1:6e:b5:df:1d:4b:
                    fb:f2:37:13:8c:dc:26:ad:39:74:4a:9e:45:3c:39:
                    56:63:cb:3c:1d:2a:bb:c9:b3:f7:07:4d:88:09:a4:
                    9d:ae:62:88:0e:19:e7:4c:4f:57:19:ef:7c:6f:eb:
                    fe:dd:d0:a1:88:5c:e1:4c:37:4a:c9:c0:3a:43:aa:
                    24:ad:62:99:64:a5:07:61:db:89:ec:4d:93:20:08:
                    d0:83:a0:e4:11:4f:29:7f:38:4b:fe:2f:89:4f:bf:
                    c8:5b:ac:8a:9b:0a:95:bd:c2:74:29:8a:b8:29:6e:
                    13:20:2e:53:34:98:75:26:29:c2:f8:ed:45:9a:b4:
                    f8:2f:fb:3c:ff:55:35:74:61:ff:60:b7:8f:68:ff:
                    94:ef:35:1d:9e:cb:7d:ef:63:2a:9c:7e:35:61:b8:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:21:00:BE:E4:4D:8B:DC:7E:2C:6D:AB:82:F6:F4:51:1B:02:EE:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c7651b7-6269-38fc-be0d-4443a7402b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:56:c1:79:56:78:6e:a4:57:84:e3:8c:5f:96:cc:7c:53:13:
         49:5d:a9:3e:c5:25:80:14:1b:d0:65:73:f1:85:c1:cb:35:9a:
         c1:fa:55:50:f9:42:e7:6c:ff:9d:4f:67:ec:94:5b:47:40:3c:
         23:30:3c:fd:d0:05:aa:f2:80:1f:82:f2:9b:d0:2d:9a:56:ce:
         9f:7d:00:e8:fa:a2:f0:87:84:b5:39:7c:71:3e:d8:f5:23:9f:
         ae:7d:0f:53:e8:d5:20:a3:a9:3b:a1:7d:aa:57:8d:30:d8:8f:
         4a:fa:bb:ad:bd:8c:97:80:31:ab:72:f6:e2:2d:08:df:86:4a:
         84:c4:24:07:12:d6:cc:55:e1:59:d9:55:7e:13:12:2e:ed:b5:
         6b:f0:fb:e2:fd:70:59:91:e7:6e:06:12:f2:df:ce:8d:c8:77:
         a5:39:e6:a6:24:91:e5:94:be:8e:bd:a5:54:55:5f:c1:1d:1b:
         b4:e2:73:15:96:65:3e:73:af:7b:ed:c4:9d:4d:4d:2d:4a:c1:
         3d:20:aa:31:83:be:50:75:84:f6:b9:d4:d4:fc:c3:d2:41:73:
         9b:4b:5d:2d:d0:bf:4d:2c:51:02:ef:81:4b:45:0a:5d:45:21:
         4a:21:47:51:19:60:9a:65:d5:b8:7c:16:f1:f2:84:bd:9e:16:
         cf:d2:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:56:00 2026 by rpki-client