Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa
File:                     693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa (raw, json)
Hash identifier:          F7elnUDcmVZX2skij48wLP7zmS6yY2B/XHmJpZEYwNE=
Subject key identifier:   71:F3:9D:2D:EA:4E:B3:76:93:D6:E5:50:A4:58:34:02:A8:69:6F:A1
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584F7BB2F5D91B23BB5D9DF95D80
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     25655
IP address blocks:        173.241.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:f5:d9:1b:23:bb:5d:9d:f9:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=26194c2f-8457-40df-9d5d-aafb407549a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0d:60:2c:a3:ff:c0:b3:7c:57:43:1c:eb:16:
                    55:1b:b2:7f:2c:2c:81:a1:4a:0c:87:da:28:08:82:
                    12:63:07:3f:3c:24:21:c6:66:6b:b8:b5:b0:df:f4:
                    ea:d5:7c:14:38:92:ef:62:e4:53:1a:cb:5c:6e:da:
                    83:47:31:74:7b:81:69:8f:a8:79:16:e4:77:52:bf:
                    59:fe:e6:6a:2f:ed:5b:40:79:4a:0a:59:3f:4c:12:
                    6d:d8:63:42:c1:12:13:24:76:3a:65:3e:9d:2d:92:
                    7b:40:0c:d4:93:fa:09:ed:4b:ef:38:ab:d6:e7:1d:
                    6f:55:e2:25:13:12:ef:0f:73:25:aa:51:5b:f3:a9:
                    f0:3d:79:1a:50:ad:6a:8d:1f:be:f4:1a:16:2a:87:
                    92:a9:af:95:9c:5d:50:4e:a2:33:09:61:23:ac:e1:
                    a9:83:eb:99:10:59:ec:59:2d:4f:55:f7:ac:37:cb:
                    6d:5a:1d:41:cd:ca:49:43:40:30:e1:78:c2:a5:0b:
                    f3:1d:8f:6a:89:48:7a:65:a3:a5:8f:02:d6:31:b1:
                    7b:b8:3a:c6:e3:49:36:b0:47:ab:11:fc:7b:2d:a2:
                    13:ad:6f:91:95:3f:37:61:de:28:e2:60:89:b6:dc:
                    b1:6d:43:19:ad:4a:8a:43:f1:84:08:33:0f:ba:3d:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F3:9D:2D:EA:4E:B3:76:93:D6:E5:50:A4:58:34:02:A8:69:6F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5c:92:74:38:cf:47:39:86:72:5b:ef:37:e3:d8:56:a3:bc:
         47:fe:08:ac:02:f2:1d:71:86:c1:65:dd:9b:3e:10:9b:78:93:
         63:8e:c9:d8:48:0c:1a:28:3c:22:76:60:4d:8c:22:57:bc:42:
         2d:5a:d4:9b:5f:5a:23:f3:f1:22:6c:7e:82:cb:40:6a:47:4e:
         10:39:8a:7c:72:95:5b:0e:90:16:ce:f4:9b:9c:07:66:94:9b:
         11:7b:c2:2d:5f:1e:dc:12:8f:2a:2b:87:0c:c2:40:33:ea:21:
         e2:3b:32:10:c9:58:4a:af:88:b8:e6:b6:1e:2a:3b:2a:be:9e:
         80:14:41:57:18:24:3f:6f:1e:cb:6f:62:8c:d1:5e:a6:75:79:
         bd:59:e4:1d:ea:45:2a:f0:f8:b1:87:3c:f9:8e:b9:de:ea:53:
         b1:1c:7d:d5:60:85:4e:8c:90:00:49:53:e4:66:33:a2:14:d0:
         38:54:0c:7d:60:e6:ac:f6:4c:cf:91:a3:19:36:56:0e:94:19:
         a2:a1:b1:1a:65:06:02:1e:72:ee:3e:a8:a6:78:69:a8:a0:7c:
         a5:84:fe:f8:8a:b9:b4:90:25:7e:e7:c9:78:06:f2:85:58:70:
         ed:be:fd:7a:1b:17:cd:d0:2f:f6:2f:6b:6c:f6:54:68:dc:db:
         5a:18:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:42:33 2026 by rpki-client