Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b9923470-5ee9-30d1-a3eb-d5adc85528b5.roa
File:                     b9923470-5ee9-30d1-a3eb-d5adc85528b5.roa (raw, json)
Hash identifier:          AmBkXYf3qt6XSFtLFHNAu82ARUrKfx/Bb7Qr1sITl9s=
Subject key identifier:   E2:97:8E:F8:30:5E:01:26:D1:89:41:87:1B:C1:EC:C7:24:A6:B1:91
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973F60B5EB792220E109180
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b9923470-5ee9-30d1-a3eb-d5adc85528b5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21723
IP address blocks:        209.53.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f6:0b:5e:b7:92:22:0e:10:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d7b0034b-1c10-46e2-b17e-4bb1efd2fc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:0a:fc:7b:ef:3a:fb:c1:aa:b9:e5:83:1e:
                    4e:0e:fb:3c:71:6d:29:96:b0:18:5d:eb:b2:a4:66:
                    03:63:ca:43:35:8b:1f:66:3b:09:98:8b:62:4d:47:
                    56:88:89:72:bf:bd:02:46:b1:a3:ca:be:34:7e:58:
                    37:4e:25:36:49:c5:8d:8b:6c:5e:f5:31:47:1d:68:
                    4d:56:b2:20:c1:ba:12:b9:a3:be:ea:87:06:c7:f0:
                    bc:0b:a3:d6:45:04:7b:10:17:e4:df:79:fd:4c:e5:
                    44:dd:cc:dd:fa:2c:2d:5c:76:ad:8a:21:93:90:c4:
                    a7:74:bb:52:00:73:eb:e1:8b:d9:31:1b:69:64:23:
                    fd:bd:0c:ca:86:c6:df:a1:ae:82:b4:58:a3:9c:ec:
                    77:9d:d0:22:74:b3:97:5d:dc:58:69:e8:fd:d8:63:
                    4b:8d:91:cb:d3:c6:06:f3:a3:11:89:01:a2:12:49:
                    fc:6b:8f:dc:22:4d:2b:34:43:1c:89:18:3b:37:01:
                    16:8f:b5:8b:4b:34:07:01:f3:81:81:9d:53:b1:77:
                    33:d7:ad:09:29:9a:84:3b:ca:1a:ec:5d:ec:8d:16:
                    3b:bd:92:5d:8d:ab:f7:c2:fe:be:46:81:d8:48:35:
                    4e:ae:6d:dc:b6:43:4f:2b:f9:08:8f:8e:4a:a3:78:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:97:8E:F8:30:5E:01:26:D1:89:41:87:1B:C1:EC:C7:24:A6:B1:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b9923470-5ee9-30d1-a3eb-d5adc85528b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:3c:06:22:87:60:5f:7a:23:69:43:a2:8b:41:d5:86:53:26:
         b5:b4:75:61:3b:1f:8d:8b:9c:df:d8:66:24:a8:10:cc:e3:d3:
         5c:ce:59:84:e0:33:5e:66:63:b9:d7:d7:fa:4b:2a:c1:27:71:
         66:8f:38:51:be:dd:5c:db:66:c7:eb:7a:ec:14:4a:e4:a3:43:
         8e:0b:8f:e8:3d:88:c7:94:f4:3c:52:15:97:be:00:bf:94:7e:
         aa:f7:64:72:19:17:4c:fe:1d:e3:ba:68:68:eb:34:7e:d1:c6:
         c6:4b:cf:e6:e8:0c:f0:60:a3:c1:56:4e:25:c9:24:84:e7:53:
         ae:06:2e:30:b7:9d:d3:59:5e:0a:de:d1:02:57:d9:bf:6b:ec:
         e5:71:19:13:a5:e7:47:90:3e:b0:f4:70:6a:c3:87:4f:0e:6b:
         45:f7:0f:17:d4:35:4c:6f:39:93:e9:9a:55:e4:22:58:74:94:
         33:24:11:42:8e:b7:a6:3f:6e:6c:0d:c6:33:42:4b:36:33:e2:
         4a:4f:33:ba:bb:8a:fc:2f:f4:3a:43:db:04:5b:f1:1d:ca:0e:
         1f:4d:cf:c3:e2:0e:8a:72:9b:f4:2e:9d:04:30:6e:59:3c:27:
         b5:48:ff:bd:9c:fa:e9:00:17:25:33:77:15:53:ef:04:6a:d2:
         80:1c:c9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 07:39:30 2026 by rpki-client