Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8031a644-c9e2-344e-93cb-412def081ade.roa
File:                     8031a644-c9e2-344e-93cb-412def081ade.roa (raw, json)
Hash identifier:          5yNhiUNbm/FuOvYO7MtWtnze398A7MqiiAYk/GCByoU=
Subject key identifier:   F1:7C:D9:4C:AB:2D:49:FA:D6:A2:1B:2B:A6:A0:77:8A:E6:AE:B8:D7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F268CFA5EC8DC6D9B23A03800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8031a644-c9e2-344e-93cb-412def081ade.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     19905
IP address blocks:        173.18.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8c:fa:5e:c8:dc:6d:9b:23:a0:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=4ce0786b-c868-481e-993f-785fe28d1ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:4c:7a:59:ce:da:2c:88:ff:eb:47:23:1c:
                    2b:28:40:f2:7f:be:f2:d3:de:b1:2f:4a:9c:c1:1d:
                    00:e6:71:72:1f:8a:33:ad:2e:ad:cd:c4:0d:c2:99:
                    e0:74:81:aa:25:d4:3a:0c:ac:b4:21:11:b8:9b:a6:
                    d1:ee:64:1b:4c:4c:68:ea:2a:35:fe:0d:f9:02:78:
                    81:e1:ce:12:b3:65:8d:d3:0d:47:7a:81:0d:7c:a4:
                    9e:d7:f9:d1:15:fe:7b:30:97:96:08:7e:36:c7:c2:
                    88:aa:12:23:c9:5d:be:5a:3e:ab:27:91:07:d6:e5:
                    a2:c4:7c:63:aa:3b:4f:5a:9e:04:72:a8:21:f6:4c:
                    af:d3:fe:97:95:dd:9a:5c:1b:15:45:74:0f:d9:1a:
                    d7:89:4e:0a:40:f8:55:ac:12:2c:52:da:fe:13:de:
                    da:33:17:1a:2f:d4:c8:0e:7b:75:84:af:01:a4:1d:
                    b2:85:6c:93:04:b6:df:a1:9a:26:08:f6:6c:7d:a3:
                    29:5e:24:6a:e1:76:e3:54:cc:b4:a9:17:40:d7:0a:
                    1a:98:07:04:7a:ab:26:c1:ee:50:05:ee:04:06:32:
                    5c:ce:67:81:20:d8:59:e2:8d:c7:d3:e8:7a:2a:1f:
                    9b:d8:2d:af:3e:4a:c1:ba:f4:c3:47:ab:3e:f6:2f:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7C:D9:4C:AB:2D:49:FA:D6:A2:1B:2B:A6:A0:77:8A:E6:AE:B8:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8031a644-c9e2-344e-93cb-412def081ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e7:c6:d4:2c:36:49:5b:8c:1d:c2:46:4b:0b:ad:c6:ac:e1:
         8c:f1:5f:1c:b6:79:37:16:97:34:b2:d3:c7:f4:a1:fd:7c:f3:
         4b:04:83:5c:21:f7:b7:c9:bd:91:38:ab:ad:b2:fb:02:cb:5e:
         d9:7a:ec:d4:15:c6:75:45:2c:59:b1:15:15:fa:52:ca:b0:45:
         89:ee:ab:50:33:ca:d8:e4:54:ff:bf:85:30:73:58:10:12:8b:
         df:d9:d7:19:70:8a:f0:6b:30:91:b7:87:01:fa:3e:b6:61:5e:
         11:6b:15:43:01:13:f7:24:52:2c:32:a1:9e:d4:47:f5:af:6a:
         e0:b1:0a:3c:31:70:3f:7c:de:d0:c7:d1:82:0f:ce:b1:7d:56:
         23:88:ff:d1:4b:ff:1a:19:33:49:5c:6a:08:d1:4c:f0:f5:33:
         dd:03:57:1f:8a:04:84:c3:3e:be:28:f4:5d:5e:36:45:ae:40:
         07:51:3a:f0:7d:07:67:04:54:2a:d9:4f:6f:09:cd:b0:37:1d:
         5a:98:54:0b:fd:07:a3:c9:ad:45:a1:0e:a9:6a:c6:e9:15:ef:
         b1:69:f4:3a:59:69:3b:d6:f5:45:6b:6f:5e:7b:09:a3:04:b8:
         55:6d:2f:9c:44:56:1a:a0:eb:b6:71:09:fb:9c:e1:bf:24:be:
         82:60:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:17:46 2026 by rpki-client