Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0110d5-1eed-3838-8f5e-8b104f8d3d19.roa
File:                     9d0110d5-1eed-3838-8f5e-8b104f8d3d19.roa (raw, json)
Hash identifier:          qfVoj7awQ514reot1Wrps06KqVbBm1+XWfKLDttfVxo=
Subject key identifier:   91:34:5F:9C:ED:5D:8E:EF:75:CF:29:62:F4:02:9B:7E:36:0E:17:1A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA798B97B074625271043A250
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0110d5-1eed-3838-8f5e-8b104f8d3d19.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        173.182.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:b9:7b:07:46:25:27:10:43:a2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bf36e772-1717-42c8-9413-c826091e7ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:04:51:e6:02:eb:3b:a0:6a:da:ae:4b:56:
                    d3:ad:d8:e2:c0:d3:cb:58:30:b4:37:01:3f:dc:b8:
                    f8:c0:2c:b1:ba:e9:4f:e4:74:e6:9c:45:fe:5f:f8:
                    e0:8a:c8:00:22:26:01:98:25:4f:87:f7:b3:d5:a1:
                    f3:5a:cc:3c:c7:ba:e4:b1:de:4e:77:e0:91:4a:87:
                    84:19:51:6f:05:b4:3a:ec:82:1b:ae:98:e3:4a:32:
                    41:98:30:60:2d:31:92:23:80:d2:51:21:d6:74:fc:
                    d9:16:eb:a9:6d:3e:21:38:7d:5c:f4:f0:ec:5a:71:
                    02:00:e1:cf:3f:75:f5:61:10:72:7f:17:45:d1:55:
                    e2:0a:70:0d:e7:1f:9d:eb:7c:eb:9c:fe:c3:f7:15:
                    76:b9:3a:1c:73:7f:30:b4:18:8a:ee:9b:a1:a5:9a:
                    f8:59:3d:12:60:40:1d:42:f5:1d:7f:8a:ca:d9:6d:
                    40:14:70:8d:e4:1b:48:a1:23:a3:7a:8c:50:f2:0a:
                    9d:29:70:c3:7c:52:5a:25:e0:a3:63:3f:90:99:8c:
                    02:88:dd:8c:44:a2:51:91:6d:75:45:36:c3:27:93:
                    bf:4d:b4:a4:38:d1:a1:6c:2e:f1:e8:dc:39:da:00:
                    19:08:36:c4:ed:58:52:4b:ba:a7:f6:34:69:f5:a0:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:34:5F:9C:ED:5D:8E:EF:75:CF:29:62:F4:02:9B:7E:36:0E:17:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0110d5-1eed-3838-8f5e-8b104f8d3d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.182.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:3d:f2:dd:91:5f:d9:7c:5f:8b:67:b4:f3:71:c9:3f:35:
         09:0e:61:3b:96:a7:ba:96:90:93:e2:35:17:8f:ea:e1:5e:82:
         5d:34:70:b8:4f:af:ae:d5:d6:5b:0a:c4:88:73:65:0f:37:3a:
         24:d9:b1:8f:84:c6:04:0c:8c:93:b1:a8:13:40:01:61:a4:7b:
         ca:9f:4c:b9:e1:7f:37:4d:4a:5f:bf:a2:66:de:e0:da:8f:fa:
         f1:62:2d:d9:e9:ca:e2:bd:d3:65:05:4b:6c:60:5a:a2:09:ed:
         64:ff:c7:8a:0a:dc:c5:82:47:a3:25:9e:61:10:b3:67:66:30:
         6b:74:8b:56:81:a5:fb:85:9a:a7:3d:d5:ef:cc:08:82:31:0d:
         a7:45:5a:dd:1e:aa:90:72:c3:d2:f3:19:77:90:ff:aa:a7:6c:
         2a:49:da:1c:9c:b1:e6:ed:61:1f:77:a0:ee:1f:ab:e7:fb:ad:
         87:58:75:e5:d0:c7:23:14:7c:63:3f:59:0e:4e:ec:28:46:18:
         21:d2:18:be:9e:de:e1:7e:85:b9:fa:42:e1:73:9a:9b:ea:ac:
         86:b1:f2:aa:78:85:33:be:d2:95:43:0c:90:c2:25:f0:20:96:
         26:90:60:23:a2:da:14:1d:09:b7:1a:b8:c1:eb:54:30:03:97:
         95:f4:46:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:14:18 2026 by rpki-client