Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c6f9103-df00-3e3a-b9c4-bc2dbfcbb239.roa
File:                     1c6f9103-df00-3e3a-b9c4-bc2dbfcbb239.roa (raw, json)
Hash identifier:          uabxfpvP0Qr/2dJFe1RvQpWfI19nF3Mi4vYRmWCnSbA=
Subject key identifier:   9C:16:C0:D4:5C:BD:2A:80:0B:CB:14:62:5F:28:1B:D4:A4:6C:9D:21
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F55638FDC06C8A1370ECD4A00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c6f9103-df00-3e3a-b9c4-bc2dbfcbb239.roa
Signing time:             Tue 29 Sep 2026 07:39:46 +0000
ROA not before:           Tue 29 Sep 2026 07:39:46 +0000
ROA not after:            Mon 28 Dec 2026 08:39:46 +0000
asID:                     62904
IP address blocks:        173.232.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:55:63:8f:dc:06:c8:a1:37:0e:cd:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 29 07:39:46 2026 GMT
            Not After : Dec 28 08:39:46 2026 GMT
        Subject: CN=7567c79f-9213-4383-bdee-57efe5a52d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:1b:46:21:26:1b:f9:38:45:dc:7a:e7:a2:
                    c3:65:4e:58:14:40:ee:9a:e3:3d:af:ce:c7:97:4d:
                    8c:42:9b:20:35:2d:98:96:72:10:30:a7:13:fa:6a:
                    1c:23:9f:b8:c2:09:7a:74:99:fc:25:0d:2e:db:25:
                    46:23:fb:11:9a:51:e2:5e:d7:03:48:9e:5f:80:7a:
                    21:03:dd:4e:a5:cb:19:38:40:c2:83:79:f1:3d:c0:
                    e4:5a:d3:f9:10:83:28:cb:ac:93:34:9f:48:c4:d0:
                    b3:a9:d4:07:e0:d6:62:2f:70:c2:c0:d1:ef:74:72:
                    dc:3d:79:b1:d7:86:84:41:43:81:4d:a7:c2:d0:ac:
                    26:4e:0f:ed:09:19:2b:ec:2e:bd:63:d0:b9:74:a6:
                    62:01:45:1b:df:99:5b:e7:10:31:3a:59:78:31:95:
                    5a:b9:5e:52:c0:6b:b4:95:30:24:33:d6:1c:54:51:
                    f9:fe:26:a7:66:e6:66:90:c8:a3:8a:d4:57:22:ef:
                    34:7c:57:9e:28:18:b5:b2:fa:c8:3d:7e:e0:89:9b:
                    08:0b:05:a4:ad:b8:ce:b7:ba:78:d9:b5:c9:f7:a9:
                    0b:c3:9c:cb:58:47:23:a8:8c:fe:a7:39:3e:46:05:
                    47:0b:a0:89:2f:36:67:3e:cb:76:4d:93:44:a4:74:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:16:C0:D4:5C:BD:2A:80:0B:CB:14:62:5F:28:1B:D4:A4:6C:9D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c6f9103-df00-3e3a-b9c4-bc2dbfcbb239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f4:1d:00:72:cb:13:31:a0:dc:ad:56:ef:d0:d2:4a:0c:2d:
         22:20:6f:4c:42:84:84:47:4c:4c:34:85:75:09:a7:a0:de:7e:
         f2:77:60:55:58:2f:bd:54:76:a6:ef:8c:1e:2e:09:58:3a:c2:
         98:6a:49:bc:a1:0a:9e:05:ba:77:b4:ba:e4:a6:a4:fe:16:24:
         73:a7:e6:6b:56:33:e0:d5:82:52:8f:39:c1:71:a0:8f:9e:78:
         eb:c8:b3:3f:c4:c3:3d:c8:0e:fb:3b:84:4c:58:f7:4b:d1:6e:
         b1:eb:b9:c3:2d:41:48:8f:6a:31:42:56:f5:c1:d7:e4:f3:03:
         60:33:0a:49:16:ab:e2:fe:5a:06:ef:4a:b0:47:fa:b6:56:8e:
         68:50:ad:c9:9a:cb:69:f6:e5:38:53:b5:b5:c8:94:f1:09:4b:
         cf:02:c7:d0:d3:8d:9e:09:4e:9f:66:47:ed:21:88:25:d6:27:
         81:4d:04:13:aa:54:25:83:df:de:59:d7:b0:30:dd:55:b9:bc:
         69:cc:b6:4b:21:3f:de:c5:fa:cc:b4:be:f0:08:2c:c5:59:26:
         de:a8:61:15:f3:2d:31:d7:5b:3f:f7:8d:5e:e2:50:47:dc:68:
         31:dc:41:d3:ed:71:58:76:1f:ef:21:a2:fb:3d:b5:4f:ad:0d:
         a2:1b:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:43:26 2026 by rpki-client