Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dab50542-2835-3a6a-9072-fac087ccebce.roa
File:                     dab50542-2835-3a6a-9072-fac087ccebce.roa (raw, json)
Hash identifier:          X5YHL+qN8+lNKMxPv7ibrx8oaPnryQ18UUk4Vs+yROQ=
Subject key identifier:   42:4F:A3:A2:6E:71:5B:6B:5F:D1:99:49:A8:E4:A6:2C:00:06:02:1E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D6C0FB3F0F605448168FBA0C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dab50542-2835-3a6a-9072-fac087ccebce.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     19905
IP address blocks:        173.31.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b3:f0:f6:05:44:81:68:fb:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=d1a0b183-a478-4fdb-a13e-dcd1bf59792a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:c2:92:12:a1:94:1c:a8:84:a9:74:45:42:
                    f9:ec:18:fe:bc:77:03:37:5c:8d:c2:4d:12:35:4d:
                    39:3a:01:54:e8:23:aa:57:7a:af:0f:41:82:27:93:
                    e6:69:c5:31:6e:c5:ce:2a:8d:8c:a1:39:14:4e:1e:
                    af:48:d7:dd:89:9e:a2:93:a8:26:a5:8c:06:1e:35:
                    ec:95:3b:ef:ed:7a:03:e3:77:6a:2b:68:43:bd:66:
                    c1:56:48:26:6d:e4:f7:b2:2c:ed:c9:da:74:44:00:
                    b8:c6:54:c9:b2:d7:f1:72:22:da:25:37:2b:a0:57:
                    32:1d:99:fc:be:0a:a6:8f:35:d6:92:17:32:c2:69:
                    31:e1:d8:ef:6e:e5:f9:cb:f2:4e:9f:2f:e8:9f:65:
                    b6:04:50:5a:e8:d7:7d:09:12:c0:09:24:82:6e:4d:
                    0d:70:01:98:50:fc:27:c8:0b:78:fb:6d:ee:99:25:
                    3a:8e:41:a9:a2:08:f9:2c:02:c9:4f:d9:f3:45:c5:
                    e6:9b:b4:6a:8f:c0:07:9e:f2:53:5e:e8:8d:08:c2:
                    a2:8a:95:c6:c1:71:26:4c:2d:8e:02:ed:53:d7:d6:
                    52:c8:6e:b6:43:ce:dd:96:24:36:d2:14:50:72:67:
                    c7:c7:8d:6e:70:48:70:d6:16:3a:32:71:e8:c7:84:
                    06:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4F:A3:A2:6E:71:5B:6B:5F:D1:99:49:A8:E4:A6:2C:00:06:02:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dab50542-2835-3a6a-9072-fac087ccebce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a2:a3:2b:13:2a:ef:26:4b:4c:36:ce:01:d0:bd:d1:6c:4f:
         c7:bb:93:60:07:74:61:24:db:4f:7a:ec:9f:04:de:8e:7a:55:
         c2:8a:f4:ce:2f:1b:63:55:76:02:22:a8:6c:3f:63:5b:98:db:
         63:5d:74:88:22:3a:f7:80:f0:3b:6e:38:ba:0f:20:62:a6:e0:
         aa:cb:9c:bc:0a:47:e7:a7:bf:1c:dd:cb:a2:02:07:90:dc:de:
         8d:a0:d7:ae:6d:1b:b1:7e:06:fa:a5:ed:6a:63:27:0c:a5:67:
         3d:5c:59:0d:95:50:51:e5:a4:89:e6:5a:f6:0b:f1:96:83:c8:
         93:3c:e2:37:23:54:72:e8:be:e0:8a:96:20:b4:d0:89:a5:89:
         16:4f:c1:81:9c:04:62:96:65:5e:e9:9b:7a:55:1b:59:51:1c:
         8e:28:30:94:b0:3f:ab:ab:ac:d4:e8:1c:48:c0:c3:96:1c:9a:
         ed:2b:6e:0b:03:8b:2e:be:3e:c1:bb:6f:3f:d6:4a:65:88:6f:
         12:9f:3d:d0:39:51:bd:a0:01:45:dd:21:35:29:70:3b:aa:22:
         6c:45:f7:d2:e9:81:7c:da:c9:45:5c:64:1f:23:35:9f:a9:0c:
         33:ca:cb:ae:b7:29:83:47:32:2e:32:15:b0:14:ae:11:0e:f5:
         95:d1:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:32 2026 by rpki-client