Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d8d4815-ec48-3baf-b760-7fe106a740b0.roa
File:                     3d8d4815-ec48-3baf-b760-7fe106a740b0.roa (raw, json)
Hash identifier:          iSgdU6zVVUt9T3dCVyAXEexM0h+/J6cPh5qoIYb+W6c=
Subject key identifier:   7D:49:53:F1:EF:A1:E5:7F:C4:8A:F3:1A:2B:33:55:BB:63:58:64:C7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CEDCE7C68256731892C63BF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d8d4815-ec48-3baf-b760-7fe106a740b0.roa
Signing time:             Fri 20 Feb 2026 19:37:16 +0000
ROA not before:           Fri 20 Feb 2026 19:37:16 +0000
ROA not after:            Thu 21 May 2026 18:37:16 +0000
asID:                     19905
IP address blocks:        173.31.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:ce:7c:68:25:67:31:89:2c:63:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 20 19:37:16 2026 GMT
            Not After : May 21 18:37:16 2026 GMT
        Subject: CN=bfd113c2-2dee-48a6-866e-68f11c810d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:69:00:a5:69:ea:95:59:1f:6d:b2:6a:44:66:
                    e3:27:d2:e3:78:7b:bf:b6:64:88:0f:12:ae:c9:97:
                    d2:36:d1:41:50:c9:55:c6:c0:5c:df:64:61:06:a7:
                    1e:7d:16:c9:c5:85:8a:89:86:68:17:52:e0:7e:2e:
                    0f:d4:51:fe:5e:eb:c0:1a:da:0b:c0:48:78:ea:27:
                    51:74:b2:be:ca:ab:15:3d:af:0d:37:fe:8f:71:90:
                    91:8d:96:07:ca:87:21:1f:56:9b:c8:65:86:05:84:
                    58:90:76:19:a0:8e:4b:0a:8a:27:b5:f8:75:a9:fe:
                    a8:45:50:63:bc:5c:e0:36:a2:30:ad:a5:65:72:fd:
                    f9:7c:25:54:3c:df:5c:8e:f6:ca:53:55:e6:e8:6d:
                    52:84:b2:68:55:44:e6:93:bd:6c:8c:68:ff:fd:4b:
                    83:82:68:4e:38:ad:37:d4:ce:d0:a7:59:c2:b9:ed:
                    ae:91:7f:92:d7:f4:63:b0:44:43:38:52:8e:d8:02:
                    0b:43:36:a8:0b:0a:74:4a:22:88:de:fa:06:81:a3:
                    07:43:7e:7b:ff:83:6c:11:ec:0e:1d:ef:1b:99:36:
                    9e:4a:b0:f4:8e:66:ea:5f:da:d2:fe:63:86:88:d2:
                    c3:f0:51:b9:fc:d7:d4:1e:48:36:95:16:0d:00:b3:
                    8b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:49:53:F1:EF:A1:E5:7F:C4:8A:F3:1A:2B:33:55:BB:63:58:64:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d8d4815-ec48-3baf-b760-7fe106a740b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:df:e1:9e:42:d9:f4:be:70:05:d0:ed:5a:7b:9f:74:dc:7e:
         80:00:b8:5d:8e:51:5f:96:28:6d:32:21:28:ad:81:02:23:c9:
         e1:bc:51:a5:c9:a2:eb:c9:36:aa:b0:e4:e7:b4:4c:b2:99:6d:
         08:fa:52:b2:17:88:c3:80:d9:65:51:a9:d7:10:4d:61:74:bc:
         15:0b:d5:ea:b2:1a:68:db:f8:6c:d4:6d:d9:56:d4:65:7b:20:
         18:15:53:32:b5:e7:6a:2b:ab:4c:01:ad:4f:9c:5a:80:65:58:
         b6:cf:ac:43:6e:35:2a:eb:3d:97:7b:33:be:38:74:66:e6:bf:
         f5:f3:36:e0:88:a5:f1:c9:ab:a1:47:58:a4:2a:78:3b:33:1b:
         cc:a2:7b:f0:1a:f0:28:21:cd:30:52:8f:51:9c:2a:f7:b9:0d:
         a9:26:4c:36:a4:07:bc:eb:f5:45:4b:c5:27:b4:43:bc:df:7c:
         3a:18:84:ff:9c:27:54:b8:c0:71:96:11:37:09:59:4a:27:25:
         bd:93:1e:db:18:fb:03:6d:fa:c7:a7:23:83:d6:c1:21:2d:44:
         a0:01:fb:36:35:18:9b:bb:2f:43:84:16:6c:5e:c3:ab:4c:d2:
         8a:00:77:87:49:5d:e7:7a:e0:b3:b4:d4:ec:20:f1:08:04:1f:
         57:e4:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:42 2026 by rpki-client