Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35312948-3447-3e44-94c2-aa43511dd8bf.roa
File:                     35312948-3447-3e44-94c2-aa43511dd8bf.roa (raw, json)
Hash identifier:          mCJ1jj32aupy7/4tNX7nimzhYe8nP23sHgVpq4LC+eQ=
Subject key identifier:   1A:90:11:2D:D7:A8:79:DF:4C:49:24:63:66:85:6D:36:D2:9F:6E:62
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CEDCE75F4E92E30C9BB157B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35312948-3447-3e44-94c2-aa43511dd8bf.roa
Signing time:             Fri 20 Feb 2026 19:37:13 +0000
ROA not before:           Fri 20 Feb 2026 19:37:13 +0000
ROA not after:            Thu 21 May 2026 18:37:13 +0000
asID:                     19905
IP address blocks:        173.22.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:ce:75:f4:e9:2e:30:c9:bb:15:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 20 19:37:13 2026 GMT
            Not After : May 21 18:37:13 2026 GMT
        Subject: CN=eea8440b-007d-4eb9-81d9-ee84026b63ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:5d:42:02:d2:58:be:6a:85:0e:c9:40:6f:
                    77:8a:ef:11:81:a6:28:d7:94:22:61:31:74:fa:63:
                    44:3f:04:af:a7:ef:1b:88:88:be:f0:b5:04:a1:19:
                    fc:23:b4:a3:9b:5c:85:c0:f2:1b:cf:64:03:50:71:
                    29:ba:2c:04:e9:56:1e:a8:7c:c9:2f:41:ce:ca:e1:
                    5e:b5:e0:75:8e:f0:38:2a:cd:b7:9f:ba:ee:80:90:
                    f4:ed:8d:99:3b:06:c8:dd:4f:7b:44:36:c1:38:5c:
                    d5:3b:fa:52:4e:75:5b:35:70:90:17:49:e5:43:85:
                    09:b7:78:cb:50:00:e1:25:5c:b3:66:95:16:6e:b0:
                    35:0b:c3:17:c0:44:f4:45:f1:26:a6:d0:24:be:52:
                    47:be:48:64:46:75:3f:5f:19:b3:48:9d:3a:50:74:
                    81:66:9a:bb:3e:54:94:90:4a:3e:2e:1f:5a:bf:cf:
                    44:16:7f:fd:93:4d:9f:09:0a:69:a4:9d:76:9b:7d:
                    dc:f6:33:86:48:6c:19:a6:53:14:54:74:f6:b9:13:
                    3d:c8:de:e2:29:1c:25:29:78:39:9e:e7:4b:1c:ff:
                    25:4f:72:04:f5:10:2d:6f:dc:a5:dd:38:52:fe:27:
                    50:43:2b:1b:0b:79:aa:01:4d:d6:02:6f:75:41:23:
                    1d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:90:11:2D:D7:A8:79:DF:4C:49:24:63:66:85:6D:36:D2:9F:6E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35312948-3447-3e44-94c2-aa43511dd8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:4d:cf:5e:6e:53:80:e6:26:f5:94:ab:82:81:95:40:90:85:
         e2:ee:4f:df:81:e8:b7:2c:69:c9:05:65:3e:36:3a:2b:ff:df:
         33:d8:89:b9:ee:47:ad:61:69:4b:8d:b2:24:26:82:e3:d3:1f:
         28:fc:ec:ed:74:08:0b:7f:60:bb:11:86:5b:38:58:11:1d:b6:
         fb:ea:59:7e:86:d3:c2:1c:d0:e1:26:6d:b9:ac:97:38:ee:5e:
         cb:c1:f8:a4:06:54:c8:4b:7f:cc:f2:30:14:72:a3:44:44:a0:
         77:31:e2:90:69:60:21:2a:77:06:8a:8c:94:65:f5:fe:84:1c:
         0a:00:1d:cb:7b:dc:57:e7:70:13:17:0b:0d:f8:e9:e2:ba:5d:
         b1:f6:70:8d:52:a8:8d:75:b3:1c:5b:59:44:72:35:96:14:c9:
         ff:67:7f:16:ba:34:09:40:30:05:c9:fe:65:f4:40:1b:5c:ae:
         b7:25:05:91:83:c5:ad:fc:16:dd:50:83:09:cf:51:b0:46:53:
         2d:8e:b4:60:bc:63:2c:32:14:d3:72:1c:80:88:d3:84:d8:d1:
         76:da:86:e4:ac:c4:58:eb:57:6d:c6:26:68:5f:1c:bb:90:70:
         2b:9b:23:a0:0b:ea:3c:72:9c:1b:1a:e0:3d:7f:e0:d6:32:ea:
         63:25:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:58 2026 by rpki-client