Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fc8b4a72-f9d5-3993-9d8a-1432c9d52654.roa
File:                     fc8b4a72-f9d5-3993-9d8a-1432c9d52654.roa (raw, json)
Hash identifier:          n70o0Kp/ZJr/mLhKfg68uDTjwvBbG9/kLP4NOkCEI64=
Subject key identifier:   84:2B:B5:56:44:6E:78:10:71:5B:95:E3:6E:0E:C6:8B:69:7F:7F:B2
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F50A729AD1A3C736A6144F840
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fc8b4a72-f9d5-3993-9d8a-1432c9d52654.roa
Signing time:             Sun 27 Sep 2026 14:56:56 +0000
ROA not before:           Sun 27 Sep 2026 14:56:56 +0000
ROA not after:            Sat 26 Dec 2026 15:56:56 +0000
asID:                     62904
IP address blocks:        173.44.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:a7:29:ad:1a:3c:73:6a:61:44:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 27 14:56:56 2026 GMT
            Not After : Dec 26 15:56:56 2026 GMT
        Subject: CN=2c8fd40e-56ae-4acc-a39a-eba930a36e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:56:6a:0c:07:c2:ab:e7:72:96:6b:7e:d2:
                    a8:a2:36:79:47:d6:b0:f8:63:84:3e:20:40:f0:dd:
                    c9:55:82:8c:2b:7c:27:f4:bc:c3:62:46:ae:b6:48:
                    32:d5:62:55:b9:5b:6e:8d:91:88:e2:87:f5:43:b8:
                    ee:06:5f:0c:b2:dc:0c:0e:fc:f5:bd:72:f7:8c:20:
                    58:da:3c:23:bb:7d:08:4e:91:37:02:28:d6:0a:55:
                    cc:88:99:42:39:f2:34:df:7c:2c:6d:a5:ba:56:fb:
                    71:60:8e:20:cb:18:48:78:0a:35:f0:af:d7:65:57:
                    1b:06:c5:f0:ed:0b:3c:83:7d:6a:62:50:0f:9d:e3:
                    ea:46:7f:f4:42:a5:84:af:34:cb:3a:06:9c:db:d8:
                    a3:6f:9a:79:ed:6c:01:55:d9:80:ff:db:72:e3:dc:
                    88:e5:93:fe:8d:f7:cf:97:75:51:f7:0c:3c:c2:4b:
                    2f:be:0b:d0:fe:67:79:e5:2e:ec:52:7b:55:4a:3c:
                    5e:7d:47:47:35:35:b6:7a:b1:3c:e1:b9:47:c1:8b:
                    ec:da:08:4d:60:ac:36:96:c1:c1:40:ba:e0:37:ca:
                    bc:d9:16:be:bf:b2:9a:9d:46:0f:9a:e0:92:6b:d4:
                    f0:29:f4:e2:71:61:6b:f6:9d:0d:21:28:b4:86:06:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2B:B5:56:44:6E:78:10:71:5B:95:E3:6E:0E:C6:8B:69:7F:7F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fc8b4a72-f9d5-3993-9d8a-1432c9d52654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:ba:3d:21:b3:3e:24:a6:48:e9:59:ec:7d:73:2d:cc:97:
         8c:93:88:7c:48:f4:61:db:89:dd:e0:c1:05:ce:77:d1:45:1e:
         00:69:ed:fb:e8:27:bb:ec:c7:a2:3d:0c:10:46:d4:69:48:d0:
         8a:50:38:50:77:db:9a:a3:81:34:8d:76:61:fe:c4:4f:69:d5:
         aa:99:e1:91:b0:a0:14:71:bb:16:71:d3:fe:97:cd:18:99:c2:
         80:9e:0f:ef:a4:b3:08:ae:66:0b:1d:b2:91:94:e6:99:00:30:
         fb:15:9b:6b:43:27:2a:d9:31:11:6a:0e:d7:78:c6:4c:e1:64:
         b6:44:a3:1f:e3:a1:1d:e8:58:fe:45:99:71:0b:11:31:4e:47:
         b8:c0:4e:f1:16:ad:8e:9d:91:7e:84:3b:4b:fd:67:b4:37:38:
         1c:38:ab:f6:2b:8c:ca:20:62:db:d6:67:a1:da:83:1e:a5:a4:
         6c:7c:05:5c:b7:73:f9:63:a7:8e:a3:cc:2d:16:08:06:67:b3:
         2d:e9:2a:14:fc:18:04:7b:dc:79:7d:ef:09:60:e2:1c:44:00:
         02:85:0d:37:85:26:42:82:ff:bf:8a:6c:af:61:59:8f:37:c7:
         58:6a:33:13:0a:c1:c1:3c:8a:cf:cf:41:32:2e:a4:e2:ff:4d:
         1b:b7:b9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:45:00 2026 by rpki-client