Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/164a845f-dfc5-3c55-bb4a-4f9464d2c75d.roa
File:                     164a845f-dfc5-3c55-bb4a-4f9464d2c75d.roa (raw, json)
Hash identifier:          YcXaDtMQlkodb5t0C3LvgMuwNPJgUoGa7vMbuZj0x1Q=
Subject key identifier:   0B:87:A4:C6:30:DD:C3:5D:16:18:83:CD:75:BD:56:AA:D8:78:2E:B1
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E0D841CF36805CDCAA5658FE0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/164a845f-dfc5-3c55-bb4a-4f9464d2c75d.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     401783
IP address blocks:        173.44.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:1c:f3:68:05:cd:ca:a5:65:8f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=12530afe-5db7-4218-8ef4-8122cb3e792e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ff:13:3f:4a:6f:ed:95:a6:55:aa:9d:42:99:
                    82:a6:b8:f2:ad:6c:34:f0:d9:fe:6c:c3:c9:1e:43:
                    da:c3:86:99:df:34:c6:6d:3d:af:24:c8:00:77:69:
                    ff:8d:cc:41:33:d5:50:9e:3f:a3:12:f8:da:c1:6d:
                    8d:ca:ca:79:25:ce:ca:41:30:9e:8c:2f:44:66:64:
                    47:05:95:f1:09:8e:e8:c9:b3:4d:21:13:32:01:cd:
                    cc:d3:d4:4a:c2:da:ce:da:ce:15:94:f6:bb:cc:d5:
                    35:4f:c8:e0:7d:ac:23:7b:7e:47:0e:42:4f:f8:57:
                    9a:ca:5c:cb:42:60:2c:47:e1:df:a8:6b:3c:c6:d9:
                    58:1a:0d:e8:3c:c7:e7:18:69:c0:71:3f:66:cd:1d:
                    7d:45:0d:5f:ad:c5:a3:42:12:fa:56:20:91:64:b7:
                    a5:02:2b:c0:ad:e4:a4:7e:8b:78:f9:d1:90:35:dc:
                    3a:bd:ec:e5:13:e4:86:20:19:40:a6:9e:7d:07:9b:
                    f7:d0:a6:a2:d3:21:dc:16:54:e6:7b:67:cd:4c:ed:
                    db:cf:11:5c:c4:b1:ff:d4:8a:36:79:a1:21:3e:0b:
                    e3:4c:14:67:12:cd:71:51:67:99:71:63:4d:4a:5a:
                    e1:e8:f1:03:22:36:b2:e2:85:a3:37:fd:cf:8c:d5:
                    b9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:87:A4:C6:30:DD:C3:5D:16:18:83:CD:75:BD:56:AA:D8:78:2E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/164a845f-dfc5-3c55-bb4a-4f9464d2c75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:55:f9:0c:0c:83:74:b8:72:6a:e9:8a:c2:f2:5b:f7:06:e3:
         72:22:c5:93:a0:77:29:16:bb:0b:23:9c:b1:5f:f0:c0:aa:3b:
         c7:0c:fb:60:83:01:da:ef:0a:b2:61:55:16:c0:96:e5:7a:f2:
         85:83:7f:05:65:b1:02:33:2d:c6:59:4e:de:b1:f9:8c:aa:48:
         53:80:e5:e8:cc:eb:af:aa:70:ed:61:50:43:32:a7:60:b6:87:
         2b:44:3b:03:50:ce:aa:aa:82:81:2b:ce:d2:7b:7f:57:6c:27:
         ad:43:49:f4:e2:79:59:cd:03:e4:ab:92:d3:f5:59:ed:d3:fc:
         29:84:62:4e:a3:c9:71:9d:f3:6c:09:03:79:97:57:ea:28:96:
         31:14:f7:0c:b4:35:0d:d0:16:5a:c3:f5:de:e9:19:1e:b2:3f:
         a6:2b:1d:cd:0f:6d:d6:ea:e5:08:bb:32:48:55:e0:1e:c8:35:
         86:9c:48:3e:b8:a6:db:65:5d:1d:48:08:ad:b6:1d:dc:f7:80:
         0a:97:f8:54:41:2e:b4:17:00:90:a5:e0:b8:c7:9b:53:4b:18:
         b7:36:bd:0c:72:a9:ca:d7:7a:13:0c:9a:d8:5b:0e:bf:45:9d:
         1a:1e:c5:59:cd:27:ce:02:15:e9:18:63:72:05:9c:8c:c2:7a:
         55:a3:72:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:58:06 2026 by rpki-client