Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/445106ed-b5b7-35bd-a1ad-d14658919fda.roa
File:                     445106ed-b5b7-35bd-a1ad-d14658919fda.roa (raw, json)
Hash identifier:          EjKP52HZ11g42gqFTuSWQ+KcEHgkX4lTRYM5WrXJr7g=
Subject key identifier:   BE:89:A2:6B:F2:A4:70:8F:86:EB:D0:AC:77:D8:2E:1E:B6:61:B5:AF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CBC4C696D25889F77C4EAFA80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/445106ed-b5b7-35bd-a1ad-d14658919fda.roa
Signing time:             Tue 03 Feb 2026 02:00:31 +0000
ROA not before:           Tue 03 Feb 2026 02:00:31 +0000
ROA not after:            Mon 04 May 2026 01:00:31 +0000
asID:                     19905
IP address blocks:        173.23.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bc:4c:69:6d:25:88:9f:77:c4:ea:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 02:00:31 2026 GMT
            Not After : May  4 01:00:31 2026 GMT
        Subject: CN=59cbd6e9-82e7-460d-a66f-458b3f9b3629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:41:6a:ce:62:4c:c4:3c:29:fe:67:8c:55:af:
                    33:aa:67:af:ad:0a:6b:54:0d:57:02:cb:02:81:03:
                    ac:72:50:4c:f9:14:62:95:93:8f:8c:a6:88:e0:00:
                    38:1b:1d:6c:1d:fe:54:31:21:e2:a1:eb:0b:74:5b:
                    de:ba:45:59:64:73:e6:84:5e:d5:8b:60:12:c5:fe:
                    10:15:40:46:48:d7:c2:d3:36:01:e8:e5:1c:e8:a2:
                    39:16:10:6f:d2:2c:be:86:dd:70:f6:46:5a:72:d9:
                    79:20:6e:f2:ec:4a:17:40:d9:ef:11:c9:02:10:67:
                    08:58:d1:8d:fb:90:0b:75:0b:08:40:07:77:12:d5:
                    dd:9a:86:0b:ff:4e:bb:5c:8e:8c:85:93:b1:6d:a2:
                    d1:42:79:c2:b7:c5:1d:cf:79:ab:f6:ce:cd:98:69:
                    9a:e9:ce:28:04:97:c9:c7:b6:e4:37:ae:e2:3a:94:
                    c9:90:ac:ee:5e:fd:7f:c4:cd:ff:3f:b2:3a:72:9b:
                    b2:66:bc:36:f4:1f:83:aa:d2:9e:cd:f1:4c:96:16:
                    6a:1a:08:70:ac:7d:c4:7d:64:f6:cd:d5:b7:21:8c:
                    c7:ed:69:c9:db:4c:85:32:c3:c2:94:32:84:36:a0:
                    9d:10:e6:26:89:9a:70:9c:db:f9:29:c2:af:8d:1f:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:89:A2:6B:F2:A4:70:8F:86:EB:D0:AC:77:D8:2E:1E:B6:61:B5:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/445106ed-b5b7-35bd-a1ad-d14658919fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:2c:8f:c4:36:18:a5:9c:b0:fc:9c:8c:58:04:2b:01:73:
         c0:8d:38:ae:0f:10:54:ad:46:af:a3:fe:ac:a3:23:34:0b:14:
         10:b9:06:8d:40:6a:85:82:6e:a7:0b:aa:11:ed:46:04:97:cb:
         01:02:ca:fa:d6:11:82:36:c3:77:42:b5:bd:2a:49:1e:ba:86:
         09:55:20:d2:f8:51:65:ae:99:b2:eb:4f:49:e8:d2:e8:7e:65:
         b8:19:fe:80:df:5c:6b:59:80:7d:e9:61:91:95:b1:d4:b7:93:
         31:12:3f:70:e1:aa:c5:e8:c9:8c:a1:86:4a:86:36:73:97:2b:
         3c:ca:84:19:35:87:b5:2a:fd:3c:00:d5:16:08:07:3b:53:9e:
         5b:3b:87:50:c8:bb:b1:86:64:b1:1a:60:20:12:ed:b7:49:24:
         7a:8a:c4:d5:d0:ab:ea:45:78:e7:2a:04:5e:75:79:1c:21:ae:
         dc:3d:c9:76:30:5f:81:56:ed:53:6d:ab:fd:9e:0b:db:5a:a1:
         a2:86:3c:28:51:d6:b3:59:1b:39:aa:b9:2a:80:c3:5f:a0:ac:
         01:ce:c7:f9:27:e8:38:0e:b1:d6:c2:84:02:ff:ce:74:42:4c:
         0f:0c:96:7a:11:b2:2d:6c:1e:15:6c:6b:94:ac:25:3f:b5:94:
         3b:64:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:40 2026 by rpki-client