Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/923d10f4-214a-3d9d-bdd9-d06f363baa32.roa
File:                     923d10f4-214a-3d9d-bdd9-d06f363baa32.roa (raw, json)
Hash identifier:          OnqHoYuorNiyjITp9ukE/A9tXwk15Rvdzm9uQQetaqw=
Subject key identifier:   58:B5:16:76:E9:67:22:3C:A6:B1:78:0D:19:58:01:E5:5B:29:EE:03
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F43DD2F92897BA3D540DE1500
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/923d10f4-214a-3d9d-bdd9-d06f363baa32.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     3257
IP address blocks:        173.44.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:2f:92:89:7b:a3:d5:40:de:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=6e1d2ce6-cd3f-46de-99a1-97420bd97ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dc:5e:ec:bd:97:12:f4:1a:78:c5:09:60:77:
                    57:4b:ca:d8:c3:34:50:40:70:63:fe:0d:e3:46:0a:
                    de:6f:10:99:74:a3:bd:e8:32:c3:57:19:ec:85:77:
                    ba:8f:9f:5c:8d:03:5a:73:43:89:5e:db:df:33:82:
                    89:ba:80:13:85:cc:fa:f8:f6:a6:5d:6a:ae:b4:cc:
                    58:94:f9:fe:a4:3d:87:89:cf:61:a7:33:e5:25:06:
                    dd:b9:89:ef:a7:23:ca:ee:49:d8:a1:53:35:12:15:
                    53:5d:1c:94:ca:c9:f8:ee:b7:5f:f7:16:15:7c:ef:
                    cd:88:c3:df:b2:c7:c9:b4:ba:ac:27:c8:06:20:7d:
                    2f:6f:29:9d:ff:56:9a:26:98:d6:d3:2b:6d:3b:a2:
                    3b:fd:4e:52:81:13:f9:3d:17:a4:8b:cb:7e:02:73:
                    a9:3b:3c:19:b9:d4:23:f9:81:57:84:58:d9:5e:92:
                    3c:8a:89:cc:a5:fc:15:1e:49:bd:51:89:97:ef:8c:
                    ca:44:72:1c:1c:1a:bb:72:77:59:b1:2f:e5:47:6f:
                    a8:81:02:32:31:28:66:25:f1:08:59:f9:bf:69:6f:
                    46:4a:42:af:88:06:0e:de:a9:72:47:f8:db:c8:c1:
                    66:b0:37:00:77:a0:10:8a:19:82:77:2f:c1:de:95:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B5:16:76:E9:67:22:3C:A6:B1:78:0D:19:58:01:E5:5B:29:EE:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/923d10f4-214a-3d9d-bdd9-d06f363baa32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:cd:ba:de:80:47:26:a4:52:df:d7:57:3d:4f:3c:7f:af:59:
         59:76:40:51:09:a6:6e:06:d9:77:0d:0c:e5:dc:dd:09:19:a8:
         c9:8e:40:37:5a:99:f2:80:81:01:b1:e3:0c:90:e4:34:8a:4c:
         07:97:58:5b:9b:fb:b2:8b:e0:4e:10:6f:1d:7b:bc:4e:87:c2:
         b5:60:49:41:08:d5:9e:3d:2c:5b:2a:cd:62:4b:8e:a8:17:7d:
         5d:d0:36:f9:9c:95:1f:6b:b7:24:cb:58:e6:d0:0e:46:54:6f:
         ff:e2:ea:ff:65:49:b1:6d:21:66:99:77:03:a0:75:a7:67:4c:
         92:8b:aa:b8:84:f0:9a:be:00:e9:ea:7d:9b:c9:59:92:b3:ec:
         e0:e7:af:e3:76:70:40:f3:f3:b3:f3:91:7e:ec:39:29:13:d1:
         9d:89:18:24:1b:3e:7b:1e:cd:13:45:a0:76:fb:60:9d:4d:af:
         1e:8b:ea:d5:8b:be:b5:64:b7:0f:c1:cf:ec:42:a3:b7:47:e7:
         65:9d:c2:0e:a1:5c:b6:d3:bd:09:c9:50:79:28:c3:6e:90:8f:
         97:b8:2b:44:98:1c:2e:c6:48:14:8d:e9:b6:cc:9c:a8:d7:62:
         65:88:40:87:2e:e8:58:9f:47:92:54:fd:f6:13:82:fb:cc:a9:
         23:0e:34:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3S+SiXuj1UDeFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NmUxZDJjZTYtY2QzZi00NmRlLTk5YTEtOTc0MjBiZDk3ZGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9xe7L2XEvQaeMUJYHdXS8rYwzRQQHBj/g3j
RgrebxCZdKO96DLDVxnshXe6j59cjQNac0OJXtvfM4KJuoAThcz6+PamXWqutMxY
lPn+pD2Hic9hpzPlJQbduYnvpyPK7knYoVM1EhVTXRyUysn47rdf9xYVfO/NiMPf
ssfJtLqsJ8gGIH0vbymd/1aaJpjW0yttO6I7/U5SgRP5PReki8t+AnOpOzwZudQj
+YFXhFjZXpI8ionMpfwVHkm9UYmX74zKRHIcHBq7cndZsS/lR2+ogQIyMShmJfEI
Wfm/aW9GSkKviAYO3qlyR/jbyMFmsDcAd6AQihmCdy/B3pXmqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFi1FnbpZyI8prF4DRlYAeVbKe4DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTIzZDEwZjQtMjE0YS0z
ZDlkLWJkZDktZDA2ZjM2M2JhYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArSzLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPNut6ARyakUt/XVz1PPH+vWVl2QFEJpm4G2XcNDOXc3QkZqMmOQDda
mfKAgQGx4wyQ5DSKTAeXWFub+7KL4E4Qbx17vE6HwrVgSUEI1Z49LFsqzWJLjqgX
fV3QNvmclR9rtyTLWObQDkZUb//i6v9lSbFtIWaZdwOgdadnTJKLqriE8Jq+AOnq
fZvJWZKz7ODnr+N2cEDz87PzkX7sOSkT0Z2JGCQbPnsezRNFoHb7YJ1Nrx6L6tWL
vrVktw/Bz+xCo7dH52Wdwg6hXLbTvQnJUHkow26Qj5e4K0SYHC7GSBSN6bbMnKjX
YmWIQIcu6FifR5JU/fYTgvvMqSMONKo=
-----END CERTIFICATE-----
Generated at Sun Oct 4 23:11:21 2026 by rpki-client