Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56928378-9222-378e-80e6-c5e335cee13c.roa
File:                     56928378-9222-378e-80e6-c5e335cee13c.roa (raw, json)
Hash identifier:          /r8CL92TEGfjoae+CRDFbe7jK69IB5xpZ1ToUZYaoGI=
Subject key identifier:   24:D6:66:D2:8E:E2:69:E4:A3:F2:D5:25:65:AF:D9:47:A9:E2:B7:70
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49737CFA63C05C8BA2899900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56928378-9222-378e-80e6-c5e335cee13c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.23.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:7c:fa:63:c0:5c:8b:a2:89:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ba4c093b-63f6-4c0e-8988-5dfbcc2f98b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:9c:fb:23:98:54:e2:c0:0e:c3:ce:f0:a4:
                    d5:32:87:c8:d3:93:43:3a:8d:6c:81:46:e2:be:11:
                    1d:a9:b6:f1:70:27:e4:92:94:2b:d6:fc:e0:70:1e:
                    d5:65:a9:87:88:85:a3:1f:0f:41:2c:32:07:7d:a8:
                    e7:f5:5f:ee:37:68:e6:17:b3:79:27:cb:a7:5e:01:
                    43:8e:9c:27:b6:0f:04:58:98:3b:c1:a9:f5:fe:cc:
                    94:69:54:9b:52:8a:25:1f:0a:40:a5:41:24:f7:db:
                    d6:aa:32:7e:ae:97:f8:71:71:8c:25:1f:a5:dc:19:
                    68:6c:3c:07:9c:68:e1:b9:0e:1c:a1:c6:1d:d0:c3:
                    1d:f3:a5:a4:94:99:2a:55:b5:89:5c:5c:3d:80:8d:
                    25:83:b8:c2:1c:51:4e:53:cb:f2:ca:2c:6f:cd:f8:
                    42:4c:df:a3:64:75:43:cc:45:d6:36:53:7d:78:6b:
                    8d:a5:fe:ae:6e:f1:81:61:4e:10:8b:0a:43:51:d1:
                    a0:94:36:33:a2:37:75:7e:cb:61:d7:ab:c3:a0:10:
                    55:12:51:c6:e0:22:b0:ff:67:b6:44:84:e2:0c:84:
                    be:29:57:f1:38:e2:3e:dd:24:d4:2d:df:25:59:60:
                    37:85:1a:4b:8a:24:9c:66:29:01:4b:50:f1:22:52:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D6:66:D2:8E:E2:69:E4:A3:F2:D5:25:65:AF:D9:47:A9:E2:B7:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56928378-9222-378e-80e6-c5e335cee13c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:86:11:94:39:80:f5:37:cf:64:2f:5a:92:5d:5e:32:d6:18:
         01:53:8f:6d:05:3c:66:c1:26:c5:1d:29:99:13:47:f6:00:bb:
         98:43:2e:71:a3:50:cb:25:17:7b:bb:53:9b:30:19:ae:8e:9f:
         c8:f9:88:e1:c4:76:cd:39:9c:bf:4a:0a:9e:60:8b:d0:49:db:
         7d:3b:a6:af:30:60:d5:60:43:25:f6:a9:77:35:37:63:9e:41:
         a1:c4:e4:73:74:b2:e2:78:77:e4:03:7c:06:c7:9d:4d:c1:8d:
         c8:b0:5d:54:6b:ba:fe:eb:0d:f8:2e:dc:7b:53:f6:5e:0c:af:
         26:6c:90:30:93:3a:98:61:55:29:4e:58:f0:23:8a:00:9c:0e:
         7e:1e:d3:75:48:3c:c7:50:23:3c:28:07:cc:cb:1c:6d:af:1b:
         d0:24:1e:ff:7e:e2:82:e1:19:40:ca:b7:10:bd:c6:0a:15:e0:
         57:1f:77:ba:64:68:09:8a:cb:61:18:56:3f:41:2a:44:e8:42:
         6d:14:4f:93:a0:1a:67:c5:d3:cb:d3:fd:bb:76:60:84:42:49:
         63:94:20:95:03:b1:ce:96:dd:dc:d5:09:91:d2:00:17:c3:0a:
         67:b0:8a:fb:de:d9:58:3f:82:07:d7:1c:b3:2f:c8:95:4f:0a:
         2f:7d:ca:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:35:08 2026 by rpki-client