Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/d6db3ecf-dd02-3aa0-887b-b14be6ed0ad9.roa
File:                     d6db3ecf-dd02-3aa0-887b-b14be6ed0ad9.roa (raw, json)
Hash identifier:          QkGaz2NxKN6w9u6ctNrL7XZ9tjYTKYLCQ8Tc2TT1GPc=
Subject key identifier:   1B:DE:80:3A:73:53:A8:C8:C5:A5:D6:A1:4E:7B:1D:A5:4E:0F:1D:6A
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F4328584F9E9882214BE97FF1EB249300
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/d6db3ecf-dd02-3aa0-887b-b14be6ed0ad9.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     36666
IP address blocks:        173.209.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:82:21:4b:e9:7f:f1:eb:24:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=8b987172-03b7-4bdc-8745-86d99467a400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:9e:3e:38:2c:87:a4:50:89:e3:7b:57:8f:
                    aa:bc:ca:5a:4e:7d:66:d6:f5:1b:f1:62:39:82:71:
                    ca:40:f9:e8:3f:97:a6:77:d0:a1:02:aa:84:fa:fe:
                    de:a3:03:0f:09:c8:0e:c1:a8:68:15:5c:86:80:9e:
                    bd:1f:d7:de:1b:f5:72:ac:ca:ea:bb:1d:6a:e3:e7:
                    37:32:cd:ff:4b:0d:f3:6d:fc:a3:86:80:65:7b:ad:
                    b2:b4:36:1d:23:4f:ab:87:7e:6b:a6:02:d4:9e:60:
                    73:c0:d3:b7:73:51:51:09:2c:ab:b1:42:7d:c8:f1:
                    79:8f:9f:95:eb:80:68:61:58:c2:aa:b0:69:69:74:
                    f4:29:d7:45:58:65:3d:b6:22:ef:c7:34:4b:bf:bb:
                    61:b3:c9:16:3e:17:30:85:5d:28:bc:6a:8b:01:52:
                    35:71:1d:af:3f:75:6c:1d:2f:82:c3:9a:f4:25:75:
                    b4:ef:30:1f:cb:b1:5c:d3:9d:ed:83:82:12:0e:bd:
                    e1:ed:6a:65:cb:ba:80:09:da:f9:41:0c:30:16:d4:
                    7b:66:d7:18:e7:63:2d:2f:03:1f:c4:c1:d4:5a:74:
                    2a:46:7d:f7:cd:b2:cb:5f:bd:53:c0:71:16:2e:78:
                    b1:0e:2d:48:56:8d:84:8f:13:a9:68:15:05:d9:a1:
                    74:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DE:80:3A:73:53:A8:C8:C5:A5:D6:A1:4E:7B:1D:A5:4E:0F:1D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/d6db3ecf-dd02-3aa0-887b-b14be6ed0ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.209.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:89:5d:57:09:6f:ca:c5:f1:8a:40:e8:4a:c9:af:12:4c:
         95:50:94:b3:c4:3b:9d:75:04:9b:26:19:cb:4f:6f:dc:2d:fe:
         f3:47:29:06:a8:f7:93:01:b0:3c:1d:c0:7c:da:a6:81:d3:d0:
         38:8d:f4:ea:c8:d7:9f:a4:6d:88:b5:44:ad:8a:b6:f1:7d:52:
         d5:2e:6b:9b:1c:1f:d6:0f:8d:2b:6a:78:63:8b:ae:55:41:04:
         f2:30:46:e7:44:c2:14:a5:a6:3f:b0:53:40:c0:9a:62:42:0d:
         be:5c:46:74:7a:92:05:6c:23:a5:c2:67:f8:3a:48:9c:e3:fd:
         eb:ae:a2:fb:6e:7d:33:fd:d6:35:b1:1c:52:27:4a:4c:89:c7:
         18:5a:9f:07:b0:46:78:c7:1b:9b:22:13:f2:1b:c9:42:ad:a5:
         3f:37:c0:76:6b:91:6a:db:31:90:0f:2b:ba:e4:33:38:a2:22:
         fd:ce:8e:88:76:6c:20:a1:bb:7a:43:5a:46:99:5f:9f:f7:57:
         73:31:5d:26:fa:47:74:9c:17:6b:9d:e0:91:29:c1:ce:32:db:
         46:37:38:2a:e1:38:2c:20:0c:8b:40:f6:3d:ce:ae:44:5d:5b:
         99:b8:71:36:cf:29:26:f5:f3:1b:7e:ce:d3:a7:d0:2a:76:70:
         e9:c8:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:25 2026 by rpki-client