Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a091430f-829a-37b8-bc79-d18b3f2ce285.roa
File:                     a091430f-829a-37b8-bc79-d18b3f2ce285.roa (raw, json)
Hash identifier:          vr11dZMXC1h3iZEoouDXjCkKoT7Z2/awMM10zZ1c9F8=
Subject key identifier:   09:1C:DD:A5:D7:A0:9E:EB:D7:DD:2F:E6:D0:57:1A:AA:76:3E:57:96
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F331D2AFC08B666A5591BA4C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a091430f-829a-37b8-bc79-d18b3f2ce285.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     19905
IP address blocks:        173.26.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:2a:fc:08:b6:66:a5:59:1b:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=a9daf604-afb3-40e0-913d-86f3ee662562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:65:ea:d0:95:4e:be:98:bd:6c:26:87:37:
                    db:56:88:fd:cc:53:9e:0f:6d:ea:7b:23:7b:ef:98:
                    83:68:03:ca:21:df:d5:93:2c:87:02:48:9d:a3:96:
                    b7:4b:d3:c5:dd:6a:6e:fd:c1:db:7b:be:cf:78:85:
                    fb:7b:ac:5d:ae:d4:62:7f:bb:6e:a6:d9:dc:be:00:
                    45:6b:e1:80:c8:7f:c0:9c:0d:35:c0:72:8e:1b:f0:
                    e9:46:47:1b:42:c4:18:e8:5a:a1:a0:d8:b4:b9:25:
                    25:d4:81:52:39:db:58:1a:1f:2f:41:02:ac:85:d5:
                    6e:c3:f2:3e:d0:97:67:5e:7f:81:82:f7:80:2f:5f:
                    ee:d9:54:05:e9:5b:b9:6b:50:e3:4d:7a:0e:e6:36:
                    f5:95:71:52:50:98:f6:6b:2d:a3:ac:07:c8:4f:f0:
                    1d:50:ff:08:d3:36:5c:8f:2b:89:8a:f9:31:03:12:
                    a5:b2:42:d3:f9:68:fe:45:41:aa:68:b2:8f:f8:9e:
                    e2:ad:ef:89:b6:75:89:88:67:2c:26:58:13:5e:7d:
                    6b:65:ec:0b:7d:fb:38:b1:4b:be:c8:b0:39:6f:21:
                    e2:f0:4a:f6:a7:2f:57:ea:c0:f8:65:c1:07:12:77:
                    85:8e:2d:17:47:11:50:76:60:7f:21:48:e9:fd:8e:
                    e4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1C:DD:A5:D7:A0:9E:EB:D7:DD:2F:E6:D0:57:1A:AA:76:3E:57:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a091430f-829a-37b8-bc79-d18b3f2ce285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:7d:7a:21:91:ed:6f:a9:fa:25:e3:79:d9:d1:b7:48:5a:fd:
         f6:6d:41:1a:51:7a:cd:39:8e:93:3b:42:9b:bb:d3:32:5f:e2:
         5b:c1:05:93:a1:f6:d8:1a:47:2b:83:55:72:14:cb:58:1b:8b:
         e2:d0:fd:cf:e3:ed:ee:f3:df:90:dd:87:0f:6c:fe:f8:58:37:
         e4:3f:7b:11:d3:67:9b:8e:42:8e:45:fc:ec:13:45:81:74:d9:
         9b:4e:99:86:26:cb:c4:60:0f:56:bf:7a:9e:28:8a:c9:62:f7:
         6d:78:38:47:65:70:41:7e:ee:76:90:cd:f6:8b:9e:41:06:bd:
         e6:08:ff:05:39:b7:ee:10:69:36:d4:fc:43:de:ac:8f:f4:9c:
         6b:20:3b:0b:7d:74:21:3a:7c:1c:b2:ad:bf:67:be:6e:5c:b4:
         1d:62:13:93:fa:7b:27:4c:29:59:6f:eb:1d:10:e3:d0:8c:cd:
         1f:f5:51:ea:d0:b3:e4:94:fc:3a:5a:29:55:c2:3d:29:ad:49:
         ee:8e:87:b9:42:88:17:2c:cf:25:96:bb:e8:e4:8a:18:16:24:
         66:38:c9:8d:4e:a9:ed:57:38:93:23:cb:73:b7:30:56:18:d6:
         fb:be:12:e6:1c:eb:94:03:1b:a7:70:1b:ee:15:17:a9:51:10:
         71:dd:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:11:26 2026 by rpki-client