Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe80dd29-8b25-3c4b-a10d-e4ba94845537.roa
File:                     fe80dd29-8b25-3c4b-a10d-e4ba94845537.roa (raw, json)
Hash identifier:          Vcu67H+OGbAhFSsknneIkaHLBjRhHPwchLo4YSWpw04=
Subject key identifier:   AD:3F:84:FA:C5:04:8B:1F:5C:69:71:A9:AD:14:4E:60:29:93:BD:30
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EEBECA14673AB9492E0C1CE30
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe80dd29-8b25-3c4b-a10d-e4ba94845537.roa
Signing time:             Sat 22 Aug 2026 13:00:12 +0000
ROA not before:           Sat 22 Aug 2026 13:00:12 +0000
ROA not after:            Fri 20 Nov 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        173.22.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:eb:ec:a1:46:73:ab:94:92:e0:c1:ce:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 22 13:00:12 2026 GMT
            Not After : Nov 20 14:00:12 2026 GMT
        Subject: CN=6931fb62-d854-4033-894e-5dcb18f83ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:91:5d:62:40:61:c4:91:0b:34:ba:23:40:97:
                    a8:16:8f:ca:6e:e5:e8:b2:08:72:84:0c:4d:86:ba:
                    53:20:22:6e:4b:df:ce:c1:bb:db:e5:a1:50:b0:e4:
                    33:54:03:0c:1a:06:5a:d8:09:ca:51:be:c5:56:e6:
                    51:0c:01:92:84:e4:72:de:f7:d9:2b:0e:9c:00:f9:
                    bc:b3:2f:e5:39:32:2d:73:09:f5:e4:e5:2b:66:bc:
                    4f:04:85:3d:02:f2:64:22:18:5e:df:dd:9c:50:2e:
                    5a:87:0c:ea:b9:37:2b:e9:7c:a4:a5:26:60:cb:0c:
                    62:f9:be:06:01:61:c8:62:7d:60:6b:60:54:3c:ea:
                    8b:17:1e:42:39:ed:28:04:c8:ab:a5:ca:bd:b6:68:
                    78:04:13:3c:a6:81:de:db:89:13:37:18:aa:0b:94:
                    e3:fc:70:03:38:a3:4d:08:39:23:5e:26:52:0a:83:
                    65:73:48:4d:e1:c2:3a:4a:b9:97:05:0f:22:1c:9d:
                    41:a7:a1:a3:4a:52:d5:2a:53:50:a5:4b:f5:dc:df:
                    e8:a6:f2:e2:e1:82:20:64:ce:a5:e3:ca:e3:a4:11:
                    37:ca:6f:dc:7b:2a:ea:69:1e:19:79:23:70:29:5e:
                    49:31:6f:0b:86:d6:db:66:da:29:9c:e8:3d:e9:33:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3F:84:FA:C5:04:8B:1F:5C:69:71:A9:AD:14:4E:60:29:93:BD:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe80dd29-8b25-3c4b-a10d-e4ba94845537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:99:60:f7:f6:f8:b5:ee:fa:26:eb:e8:65:82:17:84:96:e8:
         9c:0b:92:e9:03:10:bb:4e:d4:fc:98:83:42:15:19:da:f8:db:
         f5:fe:84:f6:ee:ad:7e:46:6c:27:5d:26:4c:2f:71:92:d7:32:
         51:f0:47:ae:77:b8:c5:6d:3f:96:a9:df:32:e6:a5:92:1a:31:
         2d:c2:df:ee:45:ca:97:4c:1c:06:73:e0:cc:e4:85:c9:8c:8e:
         ec:49:0c:05:55:91:a7:4a:f9:44:ff:16:95:9e:d9:aa:f8:14:
         a7:e8:8e:ff:0b:c8:bb:5d:a3:3d:a9:c2:f7:b6:b3:ca:8d:b7:
         5b:b1:ca:17:bf:54:c6:4b:5f:23:7e:38:92:31:15:bc:07:10:
         57:e4:f5:64:e8:71:c2:33:c0:30:e1:ec:6e:43:c8:64:e8:b9:
         49:78:3d:7a:23:c0:20:75:50:0b:5b:ae:9d:dd:92:2f:df:f7:
         24:50:c5:c5:de:72:52:b5:7d:71:ad:14:59:17:4f:ae:31:34:
         bd:32:18:b8:bf:c5:25:f0:b0:5f:43:b5:2c:86:99:4d:f6:61:
         64:1f:9c:a6:e1:31:98:73:b0:d4:28:5e:64:ef:fd:4e:64:97:
         94:e9:62:83:76:bd:52:21:12:42:35:38:79:5c:bf:1d:2b:aa:
         ad:a6:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:02:30 2026 by rpki-client