Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/35b3c7ce-8d21-3edd-be31-3367a56d71e0.roa
File:                     35b3c7ce-8d21-3edd-be31-3367a56d71e0.roa (raw, json)
Hash identifier:          xpTi41oagtQ+PdZF+qgIbiHkP/ceCoqvTDIEleJidmg=
Subject key identifier:   BB:94:F3:94:4A:87:01:97:BD:2D:B9:66:EF:35:B0:11:C5:D3:08:EB
Certificate issuer:       /CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
Certificate serial:       010D0C9F4328584F49737947D6CB1B91A52B8760
Authority key identifier: AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/35b3c7ce-8d21-3edd-be31-3367a56d71e0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     17378
IP address blocks:        146.202.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:79:47:d6:cb:1b:91:a5:2b:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b769a25a-f43f-4425-9f3d-1137e6bf47cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e5:c6:aa:b2:bb:66:db:55:10:e6:86:84:7f:
                    c2:32:e3:f3:ef:b8:26:cf:04:93:c9:d7:aa:bc:fb:
                    c1:c9:b3:77:45:a7:d8:75:cd:b4:4e:c3:41:dd:1c:
                    e9:85:e5:a7:99:93:6d:14:0d:6e:db:f8:3f:8e:be:
                    b5:87:00:08:79:c6:d2:4a:45:d8:d1:80:cc:2d:ed:
                    62:74:7a:65:59:86:3a:d2:dd:79:38:7a:ed:e0:60:
                    65:9b:89:7a:8a:c6:16:c9:d8:76:9d:fe:47:71:9a:
                    8e:b8:c1:37:dd:cf:6c:2f:05:86:33:30:08:15:37:
                    bf:1b:3b:0a:d5:22:8b:21:b1:f9:9a:78:a7:5d:5f:
                    1b:76:05:c5:78:0e:a8:3e:9a:87:6e:bd:72:80:08:
                    dc:97:6e:81:7a:65:05:68:57:a8:6b:b0:64:5a:c0:
                    6f:f8:9c:3b:53:f9:f2:9b:37:94:40:33:f9:4f:f3:
                    40:86:2b:ce:0d:ad:c2:47:0d:30:c0:89:ca:3e:b7:
                    59:36:77:65:1a:90:0c:29:e3:08:12:e8:69:c4:1d:
                    18:ee:ee:d1:83:5c:da:2a:45:77:ad:76:6b:d4:ea:
                    f4:2e:a2:ea:bd:ed:08:18:39:cb:d3:6c:3f:1a:76:
                    51:fa:e7:af:a5:6b:8f:1a:19:d5:d3:dd:72:13:38:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:94:F3:94:4A:87:01:97:BD:2D:B9:66:EF:35:B0:11:C5:D3:08:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/35b3c7ce-8d21-3edd-be31-3367a56d71e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.202.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:73:45:66:e4:0e:49:d5:31:33:1c:1d:15:78:e2:5e:c5:57:
         31:2e:a7:48:55:08:aa:74:74:f9:4b:72:20:97:6d:b9:2a:02:
         32:75:32:ba:12:c5:b9:35:d1:ea:7a:3f:3c:0a:3e:5d:81:24:
         ee:7f:4e:b3:7c:27:74:03:b7:4b:45:dd:ae:f9:82:a6:88:c9:
         97:95:47:5a:25:4c:76:41:af:62:f8:dc:3e:34:4f:3d:69:f1:
         e1:f1:a2:90:6c:2c:5c:fb:a8:3b:7f:e5:7a:65:8c:01:e8:dc:
         03:a5:78:26:00:12:91:2b:25:5c:4c:68:3d:de:41:66:ac:49:
         2d:28:74:bc:47:af:54:bf:ab:df:92:89:a1:f4:32:cf:df:60:
         e0:2d:30:fd:9d:20:c9:40:0c:a1:29:5f:16:09:33:67:86:07:
         66:5e:d7:7a:64:49:4b:63:47:cb:2b:70:b7:a8:fa:ea:e1:ad:
         e9:14:38:c9:07:dc:53:45:ee:91:4d:f8:0f:40:32:cc:7a:33:
         51:0b:65:42:cb:64:da:5f:4e:92:0b:a4:62:ef:d8:a8:e5:cd:
         6c:c5:b2:5b:76:a7:50:1a:1a:f9:bf:99:d3:bb:fb:3d:d5:3f:
         11:f3:6e:10:40:4b:a3:a8:8a:ab:be:b4:27:91:fb:68:ce:7e:
         cf:85:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:51:41 2026 by rpki-client