Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acf3aa00-55a8-33eb-9eda-a16e2f92a062.roa
File:                     acf3aa00-55a8-33eb-9eda-a16e2f92a062.roa (raw, json)
Hash identifier:          wYN5HPn/pu0GOZYNZpIDO9QJjYAS63om3+X5qmf8ejw=
Subject key identifier:   91:AE:21:9A:03:D8:8F:85:1A:D4:0E:92:37:3E:69:B5:37:BF:28:76
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F497348209F9EC1FC4037A500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acf3aa00-55a8-33eb-9eda-a16e2f92a062.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.19.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:48:20:9f:9e:c1:fc:40:37:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=da684796-5047-4210-921c-ef36d2f2779f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:db:d6:f2:5c:63:2b:b7:a8:15:ed:3d:e9:
                    7f:b6:99:fa:27:ac:1d:4f:fe:00:74:bf:9b:04:12:
                    8f:48:d2:6b:a8:29:f5:9a:ac:e2:e2:b0:b6:27:4f:
                    98:0b:5a:1b:92:88:4b:5c:7a:74:a9:8b:cb:79:17:
                    12:ef:77:3d:7c:5c:78:e3:eb:03:08:06:de:30:eb:
                    80:ee:18:10:8d:38:4f:95:6b:bc:60:9f:93:15:3d:
                    10:58:94:04:69:41:49:1d:4c:f5:8e:1a:4b:51:7b:
                    22:57:12:c1:2f:ba:e1:74:f0:94:7f:c7:0e:e8:f9:
                    c2:b1:41:bc:98:b7:c5:c8:92:50:34:77:6d:a6:aa:
                    20:47:84:60:08:91:65:bc:0d:5b:65:ec:6b:9b:53:
                    51:c4:f1:0b:05:ac:23:d1:4f:00:20:05:93:b6:6c:
                    2b:e5:55:a8:dc:70:ee:6b:5b:f2:86:cd:e6:a9:a8:
                    65:bc:c2:78:b3:bb:72:76:6a:65:b4:a8:11:c5:23:
                    b9:57:cc:75:93:2b:d0:39:74:3f:65:1a:16:8a:c4:
                    39:1f:8c:96:fd:dd:5a:b5:e6:ba:82:5e:77:da:de:
                    d8:de:20:13:e8:33:28:de:7f:bd:a4:5a:47:27:59:
                    fa:09:e8:c0:3e:06:a7:8d:33:d8:51:59:d0:23:7e:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AE:21:9A:03:D8:8F:85:1A:D4:0E:92:37:3E:69:B5:37:BF:28:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acf3aa00-55a8-33eb-9eda-a16e2f92a062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2d:d0:36:d3:15:fb:b3:91:7e:09:2b:bf:86:df:22:e2:73:
         76:75:51:08:51:57:38:17:c3:56:54:a0:14:ff:67:aa:4e:5f:
         6e:8b:2b:3b:c1:68:6f:e7:5c:dd:73:9e:a8:12:06:bc:dd:9b:
         82:79:2f:74:71:55:9b:ed:4b:b4:72:ce:cb:d0:28:0f:81:ee:
         a9:22:3d:03:95:bc:b7:1d:dc:a0:ec:b0:5d:16:d1:c0:91:ba:
         d1:1d:5c:dc:24:91:14:c8:56:74:70:90:58:8a:ba:47:a0:15:
         2e:ed:6d:64:1d:35:a9:7a:6b:bc:eb:4d:a0:a9:8d:71:c0:c1:
         21:b3:34:e2:6f:2a:76:15:d0:84:20:46:1c:91:fe:b1:b9:19:
         85:01:19:5c:0a:2a:fb:2c:7d:e1:bc:0e:58:a6:ec:f7:97:2e:
         9e:68:97:12:fc:01:d4:76:28:b6:08:72:70:88:8b:27:2e:9a:
         2c:cd:13:c7:ba:94:18:7a:2c:61:32:db:02:d3:e8:fb:10:51:
         8c:13:5b:7d:4f:43:04:24:7f:0b:4d:03:c7:72:10:6d:c3:24:
         9c:d0:e4:ee:d0:5e:72:c5:6c:75:ba:33:31:d5:e4:7a:e8:bc:
         4c:b4:f2:5f:7a:2f:c7:bc:2d:ea:9b:dd:62:24:52:8b:94:ff:
         d1:0d:97:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:53:10 2026 by rpki-client