Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f55fd47-c921-39b1-9e26-bea5f1d16bff.roa
File:                     5f55fd47-c921-39b1-9e26-bea5f1d16bff.roa (raw, json)
Hash identifier:          Th8H/TeUmp3AntfnYsTfqNRgjAjpSX3ytsGurBIh84s=
Subject key identifier:   55:D4:BD:02:DB:62:63:54:37:6C:20:2D:67:E4:C5:43:97:1E:1A:BE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D0647A2C44B1344ECB25A60E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f55fd47-c921-39b1-9e26-bea5f1d16bff.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     19905
IP address blocks:        173.18.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:a2:c4:4b:13:44:ec:b2:5a:60:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=f2f5673d-857a-40ed-a9ec-189ad31a34b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:97:73:c3:13:ed:6b:de:42:4d:69:8a:4c:
                    24:0b:ae:13:7a:88:1e:a4:a5:30:80:90:66:82:e3:
                    f3:3f:af:61:77:99:7d:bd:26:78:21:f8:b7:cf:e5:
                    66:5f:aa:00:9b:89:13:6e:57:b1:78:69:25:ab:c8:
                    93:76:ba:ce:71:28:66:f1:f7:d8:24:9b:59:b6:a3:
                    76:12:44:c1:bf:24:b8:e9:67:c3:21:fd:17:55:23:
                    bc:48:14:d4:3f:83:22:68:1c:fb:28:92:af:a3:1e:
                    5b:47:c9:f3:16:f6:8d:e4:20:38:03:53:f0:16:79:
                    45:17:a9:e1:67:0b:e1:4b:5e:e2:c2:48:3b:7e:0d:
                    50:c3:e4:8e:1c:52:38:40:3d:c6:aa:f0:31:f4:6a:
                    36:3e:a0:54:7d:cf:f2:79:73:21:19:b8:ff:ad:40:
                    bd:13:84:8c:45:c9:a8:ef:f2:d8:27:9f:73:ce:57:
                    cc:50:ba:d5:16:dd:4e:fd:6e:f8:77:71:18:9e:08:
                    e1:0a:40:b9:61:42:0e:41:08:93:c0:85:e7:5f:53:
                    43:06:06:b6:dd:51:3b:cb:9a:67:30:08:89:b4:1a:
                    00:82:d7:0f:c9:85:4a:2a:44:11:3b:db:c1:01:15:
                    48:4f:bb:67:bc:62:a5:22:97:c8:02:6b:96:33:19:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D4:BD:02:DB:62:63:54:37:6C:20:2D:67:E4:C5:43:97:1E:1A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f55fd47-c921-39b1-9e26-bea5f1d16bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:0b:b4:a2:b0:4c:cc:3e:f3:06:c2:bb:31:6e:9b:5b:aa:28:
         68:aa:7e:95:85:72:82:71:98:fe:76:d9:11:de:2c:23:98:92:
         3c:3f:1e:01:19:cd:6e:67:3d:14:68:d7:71:29:f9:76:73:74:
         e0:27:1b:86:9b:5b:d8:9e:a3:ce:e5:77:d0:02:5c:5f:56:86:
         14:45:33:3c:d1:2b:ce:bf:6c:58:2c:3b:01:31:df:80:ad:02:
         e6:ef:d8:a4:c7:5d:10:20:98:ac:0a:76:00:1f:f0:9e:06:77:
         36:11:b4:38:d3:44:be:06:6a:0d:c8:9d:74:24:00:5b:47:fc:
         95:b7:7f:28:3f:5f:0a:c6:41:9a:16:c7:53:30:9b:09:0c:46:
         42:1a:44:50:53:40:c4:22:92:90:62:b1:85:29:2e:49:0f:89:
         87:cf:48:c7:eb:98:b2:e6:47:e4:89:e9:8d:f2:51:58:bb:2c:
         8e:96:33:79:fd:39:d3:e7:ad:40:13:a6:03:91:84:b7:7b:48:
         ca:e4:26:60:eb:52:ef:dc:d5:6c:26:23:51:42:13:21:5f:22:
         89:5c:13:31:af:87:30:a3:e0:68:04:10:d0:38:5e:e8:60:ce:
         8f:41:74:35:97:c8:a6:6b:a9:84:8d:cd:19:5f:27:54:ce:ba:
         d9:5f:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:31 2026 by rpki-client