Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdb6500e-6052-305d-8af3-f713fa90e8e3.roa
File:                     cdb6500e-6052-305d-8af3-f713fa90e8e3.roa (raw, json)
Hash identifier:          jjnirlLi4Ty+Z7V55OuBgO/3a0q+b3963CSDLlXuFcE=
Subject key identifier:   98:56:09:EE:1C:0E:5B:48:9B:B0:22:A0:67:1B:59:D1:30:17:D5:65
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F0D8A93502F383B123A5C91B0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdb6500e-6052-305d-8af3-f713fa90e8e3.roa
Signing time:             Thu 03 Sep 2026 14:00:10 +0000
ROA not before:           Thu 03 Sep 2026 14:00:10 +0000
ROA not after:            Wed 02 Dec 2026 15:00:10 +0000
asID:                     19905
IP address blocks:        173.19.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:8a:93:50:2f:38:3b:12:3a:5c:91:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  3 14:00:10 2026 GMT
            Not After : Dec  2 15:00:10 2026 GMT
        Subject: CN=08e5b1cf-3537-413c-9c82-6833958d0702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:c0:f7:0a:aa:83:c6:d1:7c:86:07:0a:3d:
                    48:b8:1f:4a:d0:2f:47:80:ae:b1:90:71:99:8f:22:
                    ce:a9:f7:e0:f5:7b:8e:c0:6a:11:34:53:4d:4a:ef:
                    f6:06:34:09:59:ca:3b:2b:95:8b:4c:b3:d7:07:ee:
                    b3:4e:cd:58:65:28:1c:34:09:34:dd:93:c3:bc:fa:
                    ab:19:48:ca:c4:de:93:ce:6a:62:7a:c4:87:8f:a3:
                    1c:eb:82:79:89:57:4a:a7:65:9c:e7:21:c2:df:5b:
                    d5:fb:0a:54:18:ce:f4:5f:ba:f9:76:fa:5a:3c:ca:
                    d3:6d:a0:a4:83:9a:fd:c7:c8:26:9d:cf:44:21:33:
                    1a:bc:a9:47:c8:b4:23:20:8e:7f:c8:f0:90:60:0a:
                    00:0d:e1:fb:cb:70:aa:6c:23:02:3d:bf:b1:ad:75:
                    f6:cd:7b:23:26:1a:da:b6:55:6c:3d:92:ba:1e:fd:
                    5c:2c:03:c9:3c:04:fa:96:71:8a:79:a3:9c:af:59:
                    02:99:85:04:0a:42:e0:f3:5f:f0:b1:90:4d:70:94:
                    92:76:81:c2:01:b0:bd:45:1e:77:f5:ca:3d:7f:c9:
                    26:73:a8:be:b3:9c:6d:22:bb:28:c4:cd:a2:73:c6:
                    af:70:e3:8f:fa:6d:d3:9c:b1:9b:46:a8:a7:94:cf:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:56:09:EE:1C:0E:5B:48:9B:B0:22:A0:67:1B:59:D1:30:17:D5:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdb6500e-6052-305d-8af3-f713fa90e8e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:da:22:e9:06:fa:3f:1e:cd:10:5a:28:bf:6b:bb:72:54:aa:
         58:1a:d8:d9:a5:cb:96:7f:34:5c:99:ef:bb:9c:81:9e:17:f6:
         9e:5f:e1:a8:90:25:21:ba:0e:8c:f4:ab:80:6f:aa:a5:0b:57:
         d4:ce:d4:69:91:4b:0a:bb:eb:29:b6:cf:d0:c7:b0:0b:ef:a4:
         48:01:09:5f:3d:0b:3e:4d:02:18:63:76:8b:9e:ee:81:00:14:
         ac:d0:50:a2:cc:6a:21:19:8f:34:a3:fb:35:ac:c5:4e:86:80:
         cc:2b:f3:54:fd:89:b1:34:b1:ee:40:5b:24:a5:e6:ab:81:9d:
         74:eb:e1:16:71:09:0c:93:36:a8:f2:97:82:87:ea:b7:b1:2f:
         06:af:ab:34:af:b3:a0:3c:2d:c1:7d:eb:8f:aa:6b:54:d8:31:
         d5:3e:d2:71:4b:04:a7:86:f6:20:6d:e2:81:76:5b:8a:b4:43:
         7a:55:95:13:cd:3b:f5:d7:a5:49:28:7c:8a:f3:02:a8:03:dc:
         d4:d8:8f:fa:99:e7:43:e9:18:ff:7f:61:21:c1:88:8a:88:78:
         81:91:06:9a:30:9d:4f:b8:06:6f:f3:7b:9c:9d:55:08:e1:e4:
         11:32:d8:76:98:22:13:5c:ae:90:d4:6b:e2:e7:27:bd:e3:49:
         36:1d:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:04:54 2026 by rpki-client