Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b65639e-e5c9-3c85-9821-209e71096b9c.roa
File:                     3b65639e-e5c9-3c85-9821-209e71096b9c.roa (raw, json)
Hash identifier:          uBHovMLHCYPR6igcpMxKN0D1Eau+yI9UgxrI/Rtsreo=
Subject key identifier:   13:9D:28:4C:83:98:55:77:59:DC:4E:B7:F7:21:AA:5F:73:06:FA:1D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059C6BFD483714D315B2F600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b65639e-e5c9-3c85-9821-209e71096b9c.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.23.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:6b:fd:48:37:14:d3:15:b2:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=95b46336-e278-4645-befe-cce0eb265cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:e0:bc:2d:ee:f0:b7:58:81:b9:6d:20:cc:
                    f8:6a:07:c1:50:c2:54:af:14:7a:71:32:4a:b7:47:
                    74:1a:ec:67:1c:41:21:17:e7:4c:9d:15:fd:1a:93:
                    99:32:8a:9a:d8:9b:c6:43:d3:9b:28:78:ca:e6:0b:
                    2a:02:90:ad:4f:74:39:43:e3:b3:ce:77:45:d7:eb:
                    8b:74:1a:b6:87:b6:4a:3f:d2:50:32:e4:2f:37:17:
                    6a:41:da:80:ca:c4:5c:a0:1e:ff:01:14:67:e1:4a:
                    f6:ef:18:ae:3e:59:18:81:a8:57:f0:4c:64:c2:44:
                    29:23:13:f0:39:1d:f9:ac:11:c5:d0:95:80:e9:9a:
                    a7:18:ee:76:69:23:e4:54:26:1a:09:80:29:fc:c5:
                    e7:0f:e3:c4:56:d5:bb:73:fe:fc:a0:bc:3e:b1:05:
                    25:97:ee:fa:52:15:13:c8:a5:7e:bd:cc:39:6e:63:
                    90:9a:3a:0f:7f:17:b0:8e:89:26:87:58:2d:b7:d2:
                    d3:68:bf:bd:62:a9:dc:8a:c8:4d:72:cc:4c:a9:b6:
                    d9:ce:f4:77:f0:12:21:8a:f4:01:de:03:57:26:14:
                    ac:db:74:9e:68:a1:75:ef:d0:3e:25:9d:1f:5d:1d:
                    9f:dd:3d:a0:89:27:3b:34:b1:1c:12:a9:29:c2:f4:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9D:28:4C:83:98:55:77:59:DC:4E:B7:F7:21:AA:5F:73:06:FA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b65639e-e5c9-3c85-9821-209e71096b9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6b:fa:8e:ad:87:04:ac:a4:b7:38:fd:27:4c:ca:df:46:64:
         cd:25:79:19:95:f6:69:67:54:12:20:a8:5a:9d:ae:94:70:b7:
         d7:06:bd:3f:a3:ea:30:d9:c1:82:87:02:85:2e:44:08:ed:9d:
         98:c2:8d:e5:47:af:e1:03:c8:4d:6a:15:d7:8b:fa:a0:b5:32:
         6b:3e:3f:16:03:12:4d:bd:72:da:9a:e8:aa:be:8d:5c:21:67:
         3f:87:67:e3:73:6e:d5:5e:3e:28:c1:1f:d8:86:ea:86:fb:db:
         48:30:91:33:c4:aa:96:69:30:d4:50:25:70:e6:f2:2e:b5:64:
         50:9d:0c:e3:c6:4a:3e:53:ad:e1:86:16:91:85:17:fa:f7:3c:
         34:00:5c:10:70:3c:d3:8d:c9:42:82:7e:5b:14:5e:65:47:04:
         ea:2c:39:12:5a:e1:c7:44:c6:d9:ee:a2:98:32:ed:9d:81:40:
         6d:98:6f:7d:bf:12:30:69:1c:e9:6d:76:d4:76:0b:1e:65:7d:
         7c:6f:b2:35:10:e6:d3:17:08:46:a5:c4:8d:ab:d8:5b:ba:25:
         71:9a:3b:6e:33:fb:28:36:d8:b8:e4:0a:01:29:b8:a6:b6:17:
         de:6e:a5:ca:ba:e0:41:d8:c8:03:53:35:23:52:da:43:56:0a:
         3f:77:94:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnGv9SDcU0xWy9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
OTViNDYzMzYtZTI3OC00NjQ1LWJlZmUtY2NlMGViMjY1Y2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu3gvC3u8LdYgbltIMz4agfBUMJUrxR6cTJK
t0d0GuxnHEEhF+dMnRX9GpOZMoqa2JvGQ9ObKHjK5gsqApCtT3Q5Q+OzzndF1+uL
dBq2h7ZKP9JQMuQvNxdqQdqAysRcoB7/ARRn4Ur27xiuPlkYgahX8ExkwkQpIxPw
OR35rBHF0JWA6ZqnGO52aSPkVCYaCYAp/MXnD+PEVtW7c/78oLw+sQUll+76UhUT
yKV+vcw5bmOQmjoPfxewjokmh1gtt9LTaL+9YqncishNcsxMqbbZzvR38BIhivQB
3gNXJhSs23SeaKF179A+JZ0fXR2f3T2giSc7NLEcEqkpwvQoPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOdKEyDmFV3WdxOt/chql9zBvodMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2I2NTYzOWUtZTVjOS0z
Yzg1LTk4MjEtMjA5ZTcxMDk2YjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERr+o6thwSspLc4/SdMyt9GZM0leRmV9mlnVBIgqFqdrpRwt9cGvT+j
6jDZwYKHAoUuRAjtnZjCjeVHr+EDyE1qFdeL+qC1Mms+PxYDEk29ctqa6Kq+jVwh
Zz+HZ+NzbtVePijBH9iG6ob720gwkTPEqpZpMNRQJXDm8i61ZFCdDOPGSj5TreGG
FpGFF/r3PDQAXBBwPNONyUKCflsUXmVHBOosORJa4cdExtnuopgy7Z2BQG2Yb32/
EjBpHOltdtR2Cx5lfXxvsjUQ5tMXCEalxI2r2Fu6JXGaO24z+yg22LjkCgEpuKa2
F95upcq64EHYyANTNSNS2kNWCj93lMA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:25 2026 by rpki-client