Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa
File:                     d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa (raw, json)
Hash identifier:          EC/t9FHowllX8DaRjvxp2hJiwh//uQQgIvKg2YpQ7dU=
Subject key identifier:   1F:E3:99:1C:41:A2:7F:C4:BA:A6:CD:1C:DA:67:55:33:0B:5F:FE:1E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D83E140280CD4C2EFB412A144
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa
Signing time:             Wed 15 Apr 2026 13:46:19 +0000
ROA not before:           Wed 15 Apr 2026 13:46:19 +0000
ROA not after:            Tue 14 Jul 2026 13:46:19 +0000
asID:                     19905
IP address blocks:        173.25.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:e1:40:28:0c:d4:c2:ef:b4:12:a1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 15 13:46:19 2026 GMT
            Not After : Jul 14 13:46:19 2026 GMT
        Subject: CN=6b17a9ec-8cb7-4127-86fc-a156b8da2f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:29:71:b4:16:db:fc:c5:32:06:bc:f7:d3:
                    91:9f:c4:7f:31:ba:2e:8f:be:3b:45:55:ba:a6:3a:
                    a7:f9:fe:e5:a7:18:3b:6f:37:45:a2:26:3f:99:bc:
                    5f:05:ac:77:b8:5d:3c:13:23:13:9b:7a:33:e9:70:
                    24:df:f1:42:78:45:97:ac:ac:1b:4b:b6:4c:32:50:
                    59:04:94:26:1a:bf:92:0f:c2:bc:34:87:d3:b1:b5:
                    b0:05:65:7c:1d:02:4e:80:65:2f:39:4d:7d:a4:0f:
                    0a:65:90:49:2e:de:65:43:73:75:a7:c7:ec:b0:59:
                    09:1e:5a:c3:d6:3b:0e:55:a9:81:3b:53:10:42:b0:
                    2e:3c:81:6d:67:51:19:98:cf:bb:28:e0:a1:d2:28:
                    f0:e5:0f:26:0f:03:e9:6d:2c:72:c2:ed:49:de:ec:
                    17:92:31:e6:b0:c8:0b:cc:78:3d:81:2b:55:d4:59:
                    e3:d3:98:42:cc:dc:ce:79:6d:9e:40:a4:25:8b:ae:
                    43:40:72:cb:fd:07:c2:ed:4d:d4:e7:6a:95:03:e4:
                    57:20:9b:02:fe:68:ff:0f:b5:60:29:6c:28:0f:43:
                    9d:06:66:28:de:cc:bf:e2:02:65:9c:94:0f:17:bf:
                    34:71:9b:c6:1b:9b:98:68:23:8f:9c:75:d2:09:4a:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E3:99:1C:41:A2:7F:C4:BA:A6:CD:1C:DA:67:55:33:0B:5F:FE:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d697bf8b-c12d-3bfd-a0f8-8f1b8304bfa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:83:9f:c4:40:be:c4:a4:ed:a9:84:f3:84:e9:dd:52:66:9e:
         00:7a:50:75:2d:23:ff:9d:f8:7e:52:21:03:6d:f2:32:56:c3:
         e7:ea:2a:9e:43:4b:59:7d:34:45:df:03:5e:d7:8b:2d:9a:ed:
         c7:f4:9c:b5:67:dc:22:1b:6b:56:bf:bb:d4:38:0a:33:45:95:
         e7:47:df:50:5c:b9:00:4b:39:e4:03:ec:c5:ff:ad:fb:67:09:
         c1:71:ba:f7:91:c8:94:dc:50:4c:ed:75:46:57:31:0b:3b:26:
         4e:f1:82:76:aa:4f:1b:84:96:36:73:d5:ad:21:8e:b9:43:0f:
         7d:9c:f0:09:2f:fb:b8:65:57:f0:d2:f0:82:b9:10:1c:6b:2e:
         2e:1c:5f:52:88:04:16:3e:bb:a3:e1:ca:da:e5:36:40:5a:5e:
         0b:2d:e4:c6:b2:5a:84:59:26:a0:f0:cd:1d:da:aa:23:83:19:
         2a:67:a9:d4:1a:4d:96:8b:e6:ab:e0:68:93:95:8d:b0:25:9c:
         bd:3d:7a:7a:20:8c:88:88:73:9b:65:f9:d0:ed:93:76:34:76:
         71:07:84:bf:64:b5:4a:54:09:43:66:76:c8:25:9e:14:19:20:
         cd:c5:4f:9d:11:3e:4e:b9:1f:2b:0b:f9:86:dd:bf:ec:49:61:
         ca:23:27:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:28 2026 by rpki-client