Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f4599d-f96a-34b4-963d-0cd3d90e1ec4.roa
File:                     84f4599d-f96a-34b4-963d-0cd3d90e1ec4.roa (raw, json)
Hash identifier:          ue6f7q4MkDKli5UcU+UDuc6eeX7BBXbIZ4cnRIswEQ4=
Subject key identifier:   A4:87:E7:A8:B2:8A:74:DD:86:9D:D5:D2:72:01:94:A4:7D:C0:C7:5B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4987DA255D44E60D43588C2C
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f4599d-f96a-34b4-963d-0cd3d90e1ec4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.28.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:da:25:5d:44:e6:0d:43:58:8c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b4d83724-479f-4ba7-ac62-cccb5803e3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:a6:a6:42:fd:7c:f6:82:21:5a:58:9c:25:
                    d0:fd:2d:9b:b2:e8:fb:9e:80:8a:e8:c9:98:b0:c4:
                    8f:ff:dc:f9:6c:3f:6e:db:63:7e:6a:21:e1:d1:38:
                    d2:71:f5:3f:d3:a5:f1:a6:81:60:95:e6:2c:c9:0c:
                    86:2c:f0:aa:a2:5c:fe:b0:31:ac:f8:0b:22:c9:17:
                    7c:94:2b:0b:a1:f8:35:1c:90:59:ee:b9:a8:10:0d:
                    90:0e:f0:c2:e2:0f:0e:a3:bd:43:17:d2:76:53:63:
                    e1:da:5b:f3:da:c4:4a:af:d2:94:de:80:82:d5:49:
                    5e:51:04:c3:d6:e5:10:43:96:41:77:9a:40:2a:70:
                    90:b2:27:7b:21:5b:39:7a:37:b1:3a:6b:1a:52:cb:
                    c7:7e:30:40:c9:89:7c:db:de:03:61:39:ba:ec:34:
                    34:cd:3d:74:c8:59:6b:a1:b3:5f:ed:b4:19:68:fc:
                    e0:e3:8f:b2:50:32:a2:6a:7c:ef:48:bd:6e:48:74:
                    50:54:d7:6e:76:1b:a8:b8:fe:52:a8:55:2d:89:07:
                    7b:d4:65:98:3d:eb:85:c3:74:a3:a1:0b:5c:92:48:
                    1d:f7:9d:b3:0c:b5:f1:c9:1c:84:ec:7f:b2:09:75:
                    8a:0e:6b:0d:69:38:be:94:ec:0f:b7:09:3f:f0:70:
                    0b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:87:E7:A8:B2:8A:74:DD:86:9D:D5:D2:72:01:94:A4:7D:C0:C7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f4599d-f96a-34b4-963d-0cd3d90e1ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:af:ad:9e:bc:59:65:ef:b0:c1:ec:1f:d4:7b:3b:00:12:8d:
         32:5b:b2:1d:8f:0d:5e:c6:83:84:87:2d:ea:c7:bb:d3:65:69:
         41:6c:2c:71:74:ab:1e:06:67:9e:ee:4f:0e:17:22:12:53:27:
         4a:32:67:26:1e:f4:06:80:05:8a:cd:8d:fc:78:a6:58:d4:05:
         09:dd:91:17:9d:e6:a3:7a:2e:3e:e4:c2:6a:27:14:f0:f0:fb:
         1a:e0:bd:db:42:84:97:a1:9d:ea:d1:ea:d2:b3:2e:6b:64:12:
         b9:49:08:80:c4:98:cf:6b:d7:e8:ac:7d:0a:81:5b:07:c1:ee:
         63:c3:b1:94:90:97:3e:ad:11:6c:32:00:a9:6a:d5:bc:72:ff:
         ff:7f:35:e5:cb:4c:2a:b4:33:a6:c6:b0:9a:a2:26:8b:39:43:
         bd:cc:bf:0a:03:99:fa:28:70:08:32:47:79:5b:6a:6f:92:ec:
         0b:70:2a:d2:00:de:b1:42:91:07:2c:90:ec:ee:23:5c:96:9c:
         38:e3:ff:53:c0:8c:13:17:50:37:54:46:80:26:0d:66:6c:a0:
         08:f5:1a:61:49:a8:24:79:7e:76:18:c6:d1:44:4d:6a:9a:37:
         6a:1d:47:3d:27:f7:08:bc:37:bf:b4:7f:d7:22:13:0f:d4:b4:
         cc:a5:61:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:40:25 2026 by rpki-client