Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a73de463-a352-3cd7-99fb-e3acfa4fbd85.roa
File:                     a73de463-a352-3cd7-99fb-e3acfa4fbd85.roa (raw, json)
Hash identifier:          rCv2eWJRCV/QtBg51xZEz3ergzzfhwMYu1pLo0F5TVY=
Subject key identifier:   45:5B:19:5E:E6:3F:48:D5:F5:F6:2D:28:A6:AB:11:03:FC:6F:4E:37
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D59EA4BCD126DB082550908D0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a73de463-a352-3cd7-99fb-e3acfa4fbd85.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     19905
IP address blocks:        173.26.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:4b:cd:12:6d:b0:82:55:09:08:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=491ed825-2d1e-48e9-bf15-162e9b462c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:04:bf:a4:ed:fe:9b:7b:d3:60:2e:b2:db:
                    38:31:23:55:01:6c:d3:14:53:42:6f:67:8d:80:a4:
                    b9:c8:c2:77:65:aa:c9:37:66:44:47:fe:1c:c3:19:
                    ca:7c:17:fa:92:6b:08:5c:aa:6d:3c:0f:53:56:13:
                    cb:83:50:26:94:fb:18:54:45:ac:0d:4e:28:c1:25:
                    1f:d7:45:df:58:67:62:66:8c:02:04:d6:c4:80:49:
                    9c:7b:e1:76:63:18:3c:3f:41:97:18:9b:e9:e5:ce:
                    75:af:26:2a:8f:e0:ea:53:1e:77:07:a6:62:bd:a2:
                    fc:96:8d:f9:ed:f9:f9:fb:24:36:4c:8a:9f:51:ce:
                    86:fa:c1:99:ad:c4:30:73:0c:05:17:81:cb:c0:f1:
                    e9:4d:df:13:3c:86:11:f4:03:4e:97:1e:fe:42:dd:
                    e9:fb:48:ed:63:1b:ad:fb:cf:21:fc:d1:62:e5:02:
                    3e:9a:90:63:b2:03:2d:fb:b4:60:2b:28:a5:4f:f9:
                    4a:f9:22:dc:ab:83:aa:81:4f:75:fd:ad:77:28:84:
                    b9:a4:ed:07:e0:c6:84:16:d6:9e:28:44:6b:43:e3:
                    04:52:12:77:d4:c0:2d:e2:f2:06:13:e5:d1:5d:a8:
                    4a:df:b1:90:35:95:a3:c9:4a:d7:da:e1:b8:fd:05:
                    07:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5B:19:5E:E6:3F:48:D5:F5:F6:2D:28:A6:AB:11:03:FC:6F:4E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a73de463-a352-3cd7-99fb-e3acfa4fbd85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:df:6a:28:db:34:65:0a:60:d3:d8:60:c1:20:87:77:2b:ab:
         49:d2:f4:f9:31:a5:4d:ce:a6:98:40:36:e8:6b:cf:28:6b:0f:
         f6:af:15:1c:50:17:d2:53:85:a5:7d:80:77:60:dd:7d:38:dc:
         94:b2:60:89:b4:fc:74:98:66:45:76:ee:69:4f:36:a8:ef:e8:
         1b:59:ab:b6:b2:12:61:77:ab:b6:5f:d6:2a:13:2b:82:fe:24:
         c0:aa:81:ef:15:4c:42:03:7c:2e:d9:21:b4:30:4d:00:8c:2e:
         22:21:3c:29:63:88:0d:ff:00:57:d3:b9:84:11:9e:cb:3d:24:
         50:42:c1:e6:fd:6a:dc:7a:07:cd:46:cb:4b:81:c5:b2:d1:ce:
         2c:cd:64:b7:e4:54:89:56:cc:7f:92:55:2c:a3:61:8b:9c:38:
         3b:2b:64:ca:68:4e:5f:6f:c4:ff:85:38:93:17:64:9f:5f:d8:
         b7:25:8a:23:43:68:03:ca:7f:70:19:08:b5:d6:03:df:7a:3f:
         42:ef:4d:90:ab:f1:ff:f3:19:4f:e5:53:e5:d1:49:ca:c1:8e:
         bb:f6:1a:2c:41:17:fe:ac:23:af:d8:c6:ad:47:df:ff:74:8f:
         e2:70:44:41:e3:77:36:86:4e:c8:bd:bd:e1:e4:22:da:68:aa:
         82:a6:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:28 2026 by rpki-client