Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/033e24be-eb1c-3363-b5a4-e034656160a1.roa
File:                     033e24be-eb1c-3363-b5a4-e034656160a1.roa (raw, json)
Hash identifier:          iOvl5YaxnJxcBzS0RA9GIO1vw7UKZ4u4a2szqh1X5Z8=
Subject key identifier:   46:1D:4C:99:07:94:84:5E:1C:C8:06:21:AF:85:6E:D1:E7:B1:7F:CC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49872D585162809A20ECAEC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/033e24be-eb1c-3363-b5a4-e034656160a1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.26.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:2d:58:51:62:80:9a:20:ec:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7dcdb1a4-e857-4333-abc4-c4bb2a78c1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:6f:eb:a0:19:01:96:b7:7b:84:43:28:d0:
                    92:6e:12:6e:10:85:25:17:37:d6:0e:23:ad:cc:81:
                    e4:1a:30:22:1a:d6:17:88:81:86:f0:3f:5a:cd:76:
                    18:1f:4c:20:3c:b6:4a:69:6f:f0:3a:4d:e4:4c:6b:
                    41:d5:63:4e:a3:b6:4b:31:ce:fa:9a:65:a7:4c:5f:
                    de:57:e3:1b:e1:d4:b4:95:9d:ae:4b:6c:81:bf:7f:
                    ef:ac:d9:fd:56:5b:1e:95:91:ae:0d:97:59:4f:dd:
                    75:64:2b:28:d7:32:7f:1d:36:9a:95:5e:b0:3a:85:
                    8c:1b:ac:f5:d6:af:30:0d:de:06:59:bb:94:ac:14:
                    ca:a3:05:0a:cd:6b:68:16:f1:1c:af:53:e4:5e:2d:
                    f0:ba:08:48:32:11:27:45:0b:5f:87:46:eb:b9:b1:
                    5f:7a:4f:2c:5a:1c:70:13:6a:c6:e9:20:5d:9c:33:
                    2f:23:fd:9c:f0:f9:3c:14:e0:95:f2:d0:89:ee:50:
                    3d:4e:29:b1:f8:85:d0:44:fb:31:a8:55:25:3a:bb:
                    03:d0:1b:a7:65:22:d8:40:65:7b:97:4a:74:5a:d0:
                    0d:66:df:d0:69:25:83:59:91:40:f2:cc:1a:4d:e6:
                    34:c4:5d:15:90:42:dc:3b:4a:1b:12:b3:4e:49:f3:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1D:4C:99:07:94:84:5E:1C:C8:06:21:AF:85:6E:D1:E7:B1:7F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/033e24be-eb1c-3363-b5a4-e034656160a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:17:b6:68:9d:f2:7c:df:cd:6e:06:6f:6e:5c:d5:1a:95:df:
         6a:d1:bc:cc:16:e2:00:18:07:33:88:78:54:0e:e9:74:9d:f6:
         1a:c4:91:19:66:a6:57:f0:26:3d:8c:67:e1:83:9a:48:80:47:
         18:0e:cc:66:08:b9:e5:95:dd:bc:54:e3:7d:00:0d:52:94:23:
         19:f2:4a:60:29:27:f8:65:2c:d4:ce:ac:a7:cc:b8:ed:bb:4b:
         4b:87:34:e7:18:53:95:d1:d4:dd:36:82:65:ef:82:a8:24:71:
         af:12:c9:7b:f1:08:4a:0a:d4:8f:13:eb:db:51:7f:34:b7:90:
         95:5a:8a:f4:40:90:55:3c:73:f5:6a:2e:69:1b:4b:85:1d:f1:
         30:31:8e:7e:66:bd:11:1f:ef:3e:ac:97:cb:07:af:4e:70:83:
         8d:6f:3f:41:95:b0:ba:fc:4b:39:94:a7:ac:e8:2c:08:64:ad:
         12:bf:e1:f8:97:90:ee:3f:d8:c1:2a:cb:53:f7:a1:06:6c:f4:
         7a:3a:12:6f:1d:5a:0c:34:bd:17:2d:99:3b:3e:18:52:65:30:
         f9:d3:d0:cb:ed:1c:01:e6:9f:67:d6:bc:4c:3a:e6:16:4c:8a:
         3c:70:31:75:d7:e1:29:c7:48:9b:a8:59:4d:df:a2:3f:b4:eb:
         6d:a6:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:44:30 2026 by rpki-client