Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/18f439f9-58b7-3eac-9324-5ec7a561eb53.roa
File:                     18f439f9-58b7-3eac-9324-5ec7a561eb53.roa (raw, json)
Hash identifier:          PH5inOnw/TCSYI+ltGE0MVRjyDRxrCFr9qpjMBTnKhw=
Subject key identifier:   5E:B7:AD:00:81:E5:3E:E8:6A:EF:A0:D3:E9:AC:7B:FE:DD:39:73:2B
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F556FDE23DF8FDD8A989796A0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/18f439f9-58b7-3eac-9324-5ec7a561eb53.roa
Signing time:             Tue 29 Sep 2026 08:04:34 +0000
ROA not before:           Tue 29 Sep 2026 08:04:34 +0000
ROA not after:            Mon 28 Dec 2026 09:04:34 +0000
asID:                     62904
IP address blocks:        173.232.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:55:6f:de:23:df:8f:dd:8a:98:97:96:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 29 08:04:34 2026 GMT
            Not After : Dec 28 09:04:34 2026 GMT
        Subject: CN=dc51f017-4bc5-4aa6-a3cc-12ac0c563e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:14:7b:be:19:d3:9b:6b:68:7f:00:96:a2:
                    f1:b2:16:53:56:4b:4d:d0:ff:9e:96:7f:1e:45:b6:
                    b9:b5:f4:16:4d:e7:9f:c4:e5:56:69:84:bb:5e:b4:
                    12:7a:e5:f5:80:76:35:62:3e:c4:c2:1c:63:7c:2e:
                    2a:cf:7f:b8:b5:17:d4:5f:64:6b:23:95:bf:58:48:
                    4f:44:96:eb:6f:db:68:3b:6d:db:1b:d5:55:17:e1:
                    97:39:1a:d7:54:17:26:9f:7c:71:88:c5:8b:59:2f:
                    22:7f:21:b6:bb:12:e0:72:f2:63:bc:c5:3c:70:75:
                    c2:e2:6e:2a:5c:53:41:55:a1:d5:08:8d:30:6b:6f:
                    5b:cd:dc:ea:92:8e:db:4d:a1:31:eb:0b:63:a2:ae:
                    e2:8e:51:b3:6f:f4:20:6e:9e:aa:1b:e4:6c:56:4f:
                    45:17:c7:8d:83:fc:79:61:0c:51:27:b2:29:f3:12:
                    84:fb:c3:93:27:e7:02:37:a1:1b:2d:8c:73:51:97:
                    31:f0:cc:20:40:b0:35:a0:71:73:25:63:d5:da:72:
                    24:17:03:fc:85:1c:3c:86:66:b2:a7:b5:28:da:71:
                    3f:b1:d2:e6:99:70:25:69:7b:7c:7e:48:eb:7e:a1:
                    af:25:e0:d6:63:91:5b:c3:da:20:8b:52:42:3e:1d:
                    fa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B7:AD:00:81:E5:3E:E8:6A:EF:A0:D3:E9:AC:7B:FE:DD:39:73:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/18f439f9-58b7-3eac-9324-5ec7a561eb53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:19:5c:62:6e:ad:04:08:56:61:ad:0d:04:96:d8:bd:88:d0:
         22:00:fc:4a:2a:78:cc:6f:6a:eb:af:d2:c6:48:82:66:c9:89:
         47:f9:e2:68:cc:55:ac:f8:88:a2:89:24:ec:a2:79:2e:48:bc:
         5c:0f:e3:dd:be:04:c9:7a:39:1b:ba:53:56:8f:d8:37:ec:f5:
         d8:ad:61:23:d8:de:d0:ea:15:4e:aa:ff:a3:ff:21:b5:fc:08:
         47:fe:45:38:af:08:26:60:8f:8c:54:82:77:37:a2:72:26:f6:
         b7:26:bc:1d:93:32:f2:d6:90:1f:91:cb:44:bc:4f:1d:f9:c7:
         e7:1d:9b:80:9c:b5:40:db:59:af:e1:d9:e6:20:40:af:c2:40:
         d1:9f:39:90:53:a4:53:2e:8c:59:d7:d7:e2:34:c0:64:bf:1c:
         cb:a1:11:67:df:5f:da:a3:62:4c:67:19:ae:85:80:26:e8:86:
         c3:c7:6d:98:31:9f:f2:14:55:69:7b:b7:b5:f5:41:66:cf:17:
         0a:49:cb:93:9e:57:95:50:57:d1:fe:6f:ae:4a:61:75:dd:55:
         ae:ca:3b:d1:dd:b8:5e:d8:f4:88:43:ec:6b:94:b5:f5:14:03:
         5b:97:40:86:1d:55:cd:14:76:0d:84:c3:97:24:df:3a:2d:13:
         5a:de:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:26:58 2026 by rpki-client