Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdc1830f-096b-308f-9611-fa08a91bfdce.roa
File:                     fdc1830f-096b-308f-9611-fa08a91bfdce.roa (raw, json)
Hash identifier:          z4xQ3YYosFoYOkt8RBQWDsAyot6FEtvzIgnm3zGxR1E=
Subject key identifier:   E2:5C:E6:7F:50:2E:C4:76:4C:29:4B:13:B6:DB:4A:B3:38:9B:F8:DF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CF42216E4773C49C1A127C9E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdc1830f-096b-308f-9611-fa08a91bfdce.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     19905
IP address blocks:        173.24.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:16:e4:77:3c:49:c1:a1:27:c9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=d71c2de9-a82e-4252-89df-a4146f299a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:1b:a4:da:68:2b:97:68:69:51:5c:19:2d:
                    76:4f:8c:04:9e:c2:9c:1a:23:45:da:7f:38:c3:45:
                    63:0a:94:3c:1e:21:1a:89:7b:c7:7d:82:e4:f3:5a:
                    1b:57:38:d0:d2:8d:f3:c1:4e:23:5a:9a:ae:7d:02:
                    bb:24:be:0f:2e:48:1d:47:36:73:18:06:fa:9b:27:
                    ea:20:fa:8b:cc:43:ec:0b:9b:74:31:84:da:f4:46:
                    0a:1b:8c:fc:5b:ce:32:40:e2:15:35:7c:5b:f9:12:
                    54:19:20:a6:6f:fe:a7:b3:84:c0:08:36:85:b8:bc:
                    2e:78:3b:61:0e:51:35:a1:1c:5d:8b:c7:95:d4:63:
                    d8:ff:c6:a7:ee:1d:01:e9:79:78:90:78:9f:fe:c7:
                    41:25:02:30:6f:4f:94:ed:a6:3e:cc:1b:e2:73:87:
                    7d:0f:99:ba:29:ce:e4:b2:99:0a:46:ea:f4:5b:84:
                    7e:0c:0a:67:52:ca:2e:03:10:0e:bf:ea:4d:4d:ec:
                    4d:8e:78:80:11:f6:2a:ed:7d:13:66:28:ff:aa:67:
                    6f:b4:a8:f6:c9:99:b5:44:95:a9:dc:73:31:69:d9:
                    7f:05:72:61:fa:9c:09:2c:7b:ae:96:bb:c0:e7:8c:
                    be:cd:bd:67:4d:04:94:a0:62:ec:0e:cd:df:b8:04:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5C:E6:7F:50:2E:C4:76:4C:29:4B:13:B6:DB:4A:B3:38:9B:F8:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdc1830f-096b-308f-9611-fa08a91bfdce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d8:2d:19:f6:a3:c3:92:27:46:49:18:85:17:57:ae:85:94:
         67:19:72:9a:1c:4b:f9:80:1d:be:94:67:eb:55:47:0d:99:05:
         26:d7:42:d8:8e:1e:11:20:b7:3a:df:0e:1f:45:f1:ba:29:af:
         f5:41:09:80:64:90:14:a4:3a:d6:30:d0:97:bc:5f:56:fc:27:
         8f:ba:32:13:94:f6:32:a8:f2:e8:d9:bb:49:41:27:11:5a:e8:
         b3:68:c1:dd:c9:c1:4f:2c:92:b9:d3:38:bb:d8:c7:b2:69:69:
         bd:0b:78:68:5b:63:64:8b:0c:d9:97:8e:ca:ff:8f:f8:7b:a2:
         53:bc:2b:14:ea:e5:a5:1e:74:f0:f8:89:b2:86:36:68:ea:51:
         6b:5d:32:83:e4:aa:9a:7b:79:06:c9:e2:a1:4a:fd:f8:f5:b3:
         51:7e:17:a2:6e:8a:e2:a8:f0:52:ce:87:78:ff:d4:5d:9a:56:
         e7:f4:eb:8e:3c:32:ab:45:ad:e6:1c:88:39:26:72:bc:69:a8:
         21:e5:85:1f:b8:25:88:25:34:8b:d8:6b:27:37:fa:28:a6:e7:
         96:90:45:ab:43:b1:2d:7a:46:84:8b:e7:89:4f:e3:be:fd:04:
         b0:23:b9:51:65:5a:81:b2:00:a3:b5:4a:25:f2:f4:e4:06:ee:
         c6:73:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:11:39 2026 by rpki-client