Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/355c2de8-0117-3773-bad1-d686f6a53499.roa
File:                     355c2de8-0117-3773-bad1-d686f6a53499.roa (raw, json)
Hash identifier:          SaDufid67kVZXIrYYaw4yWBUM3ZD2qXqOdKi1qxZZRs=
Subject key identifier:   DB:9B:24:80:FB:AC:3D:C7:A5:BF:02:AA:3D:88:6B:E7:91:9D:25:98
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3D6EA6C05BB56ED664686C
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/355c2de8-0117-3773-bad1-d686f6a53499.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        173.31.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:6e:a6:c0:5b:b5:6e:d6:64:68:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=be868ac5-c2d9-4a1a-b79e-e3e58ce0b2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:56:cd:55:e6:a5:70:b4:56:72:25:a8:5d:
                    cd:cb:f6:66:e9:64:26:00:cc:1e:79:56:1d:45:8c:
                    49:5b:83:c6:50:e1:a5:7d:30:c7:f5:6a:0a:04:6e:
                    f5:ba:41:fa:59:42:4e:e1:d1:c9:f3:3c:62:83:e8:
                    6e:09:ed:cc:b1:10:99:ba:29:5f:a7:57:c6:ed:03:
                    e6:0c:6b:aa:20:27:75:5c:0f:19:fb:59:32:26:88:
                    5b:fb:96:30:d0:37:cc:b3:8e:91:11:2a:d9:49:85:
                    51:0a:44:e8:df:8a:ee:b3:ab:0a:c9:7d:89:a6:d2:
                    43:64:f5:b9:cb:e5:85:0b:b8:26:fb:37:14:55:52:
                    c5:e0:e1:90:27:5c:45:bf:9c:f3:73:14:cf:aa:a3:
                    5e:1f:8e:54:e8:a2:44:36:2b:dc:12:8c:88:66:e7:
                    11:e1:fb:ea:b8:1e:91:05:13:60:be:76:60:f0:6e:
                    21:a4:52:b3:ba:25:83:44:93:db:6c:1a:13:75:98:
                    83:da:1b:b9:a4:3e:93:0f:10:11:15:bb:7a:5c:54:
                    e8:b2:43:96:d7:bd:d7:72:1c:64:91:99:09:b1:2a:
                    0f:c3:0a:1b:56:c0:25:dc:c3:8c:c1:41:66:68:49:
                    88:a7:9d:b3:67:6c:32:ed:63:d5:e7:43:b5:cd:db:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9B:24:80:FB:AC:3D:C7:A5:BF:02:AA:3D:88:6B:E7:91:9D:25:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/355c2de8-0117-3773-bad1-d686f6a53499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f7:41:dd:5a:dd:92:83:ad:bb:60:74:5d:dc:c8:2c:df:75:
         26:1c:54:e8:26:22:55:17:26:e8:da:24:43:14:e5:e9:dc:9e:
         2b:c6:6b:5b:37:41:60:29:43:5b:88:67:d2:a2:d2:dd:6d:07:
         80:fe:61:55:d5:05:8a:92:1d:ff:13:cf:2b:37:80:fe:a0:47:
         c7:6d:47:1a:74:a9:f6:c6:6a:b4:78:ab:6f:ef:de:43:4e:4b:
         63:34:1c:bb:5e:17:42:42:49:ad:da:01:57:0a:a9:63:20:c5:
         c7:19:9e:3f:91:f8:d2:21:2d:a1:5e:5e:84:c5:1d:81:4f:df:
         53:9b:12:80:bb:32:83:9f:35:f9:f9:20:f0:05:fa:a7:77:4e:
         e3:ec:08:8b:e8:db:46:d9:39:e0:3a:b6:c6:b4:26:fc:1a:67:
         b4:19:84:8b:c2:af:a1:aa:2c:c0:f6:5d:0c:20:f8:4a:7b:c5:
         81:a2:ea:ab:d4:a0:e7:f0:69:71:eb:1a:c1:73:ec:e0:f3:0c:
         f9:e2:dd:05:cc:67:77:86:7b:70:0c:4e:4d:c9:55:8e:f6:b8:
         91:c4:58:7d:ad:d4:0f:71:b4:0f:18:f8:f9:e0:5e:30:4a:9d:
         c0:2f:c8:76:c9:0c:43:62:69:84:cd:82:cf:de:86:76:39:99:
         e8:1b:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:37:12 2026 by rpki-client