Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa
File:                     3a0f091a-389d-3b3e-9644-f38a94d40195.roa (raw, json)
Hash identifier:          vaX6zYBhyBdDuudsOoh36C8ibHecXFp2XHXajuL7+0I=
Subject key identifier:   B7:00:7D:80:F1:B0:F8:04:71:67:8A:99:19:D5:27:7A:66:EE:DF:0B
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328584DDBBB084662125F12A2E19DC0
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     46562
IP address blocks:        173.0.73.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:08:46:62:12:5f:12:a2:e1:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=2b18b447-b371-491d-b192-baa0b8b098ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:29:61:f6:66:8a:53:32:4c:34:6c:83:e4:
                    ab:2c:b5:36:22:82:52:b0:b9:53:16:47:4c:7d:37:
                    e7:8a:95:c2:a6:e3:35:bb:61:0d:6e:e3:a0:35:ed:
                    f3:29:6f:6a:3e:89:12:32:ff:ba:3c:d8:35:56:c8:
                    5f:d9:6c:79:75:56:4e:56:a3:b8:6b:43:10:e3:a3:
                    59:bf:d8:78:4b:92:5e:52:56:dd:1c:98:00:c7:fb:
                    df:83:9f:93:f1:9d:8a:3a:a4:fb:4e:f8:3a:73:ba:
                    4f:cb:00:b9:41:46:00:16:74:10:50:29:ca:b1:7d:
                    e3:da:6b:3a:79:ca:4f:7b:23:ea:55:0e:28:ed:ae:
                    fb:28:b5:fa:47:c5:1c:97:da:fd:6b:01:df:d9:e7:
                    a1:72:21:f8:eb:df:e6:49:9b:b4:9e:59:8e:a3:09:
                    11:f7:3b:fe:b9:ad:17:1a:d2:df:f7:ce:e1:2a:4d:
                    05:51:da:22:ae:83:f8:3c:83:0a:27:fc:66:d0:32:
                    6f:01:f0:84:fd:3e:61:f6:e5:ad:59:c1:d2:a9:0d:
                    d4:f4:db:3c:24:7e:bf:93:a9:a5:1d:28:f7:eb:b0:
                    6e:6c:77:a5:5d:b5:56:00:bb:21:b9:02:a7:e7:7b:
                    ef:08:28:fe:38:bb:bb:39:48:95:fd:e8:02:68:2d:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:00:7D:80:F1:B0:F8:04:71:67:8A:99:19:D5:27:7A:66:EE:DF:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:29:fd:6f:00:01:63:2f:22:2c:95:b5:b8:8e:3f:c6:b4:
         03:3e:c0:44:bc:ef:6f:4e:ad:5d:eb:6f:1e:5c:dd:28:af:55:
         00:90:18:64:c1:63:95:0b:db:02:80:d6:26:1a:44:c1:1e:11:
         3f:e4:ec:3c:e4:a6:8e:e8:4a:fe:f7:2b:69:ad:f9:eb:50:36:
         13:1e:f6:72:3b:55:99:d0:39:84:ae:0b:0a:92:c4:58:13:55:
         c5:52:59:15:d4:f9:24:83:18:5f:9b:13:3b:11:e6:fe:d4:49:
         53:f8:60:19:d2:7b:14:91:89:04:7b:72:7d:42:99:6b:e3:d1:
         60:f5:36:81:27:79:05:61:92:91:94:18:19:e3:31:09:3e:fd:
         57:9d:2b:cc:cd:32:34:8d:dc:1f:34:7a:00:4a:77:64:45:19:
         35:d0:5a:ab:bd:d9:5e:ce:28:02:1d:cd:c4:7c:8a:82:82:d1:
         ea:23:bb:e7:eb:fa:5e:c8:49:86:de:3a:47:27:08:e7:74:d2:
         71:4f:14:0e:ac:ea:58:48:c0:0a:25:15:4c:a7:7b:f1:6e:c5:
         6d:f3:0b:83:15:69:a9:72:80:b8:16:63:3f:52:cb:0a:ba:23:
         bd:59:63:98:6e:44:72:eb:6d:97:bf:b6:fe:f5:79:69:83:31:
         5e:92:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:10:26 2026 by rpki-client