Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ed35d93-819a-3ee3-b2a9-5ad2a7a2c800.roa
File:                     6ed35d93-819a-3ee3-b2a9-5ad2a7a2c800.roa (raw, json)
Hash identifier:          qzDXjkBrJde3crPly2dsoZK9X2xKEomNA0k/iwz6k1M=
Subject key identifier:   56:F3:F2:9F:FA:6F:FF:4A:0F:FA:FE:DB:71:F2:BA:67:78:9A:28:57
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D55BCBC5AB6D73DA187898480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ed35d93-819a-3ee3-b2a9-5ad2a7a2c800.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        173.29.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:bc:5a:b6:d7:3d:a1:87:89:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=8578afbf-8fdc-4e0c-8f7e-e1fe35eed7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:86:bb:e0:06:1d:0f:cf:a8:af:c1:f1:a8:
                    78:a9:21:b6:8e:43:6d:a7:c2:a1:98:ec:44:fb:d5:
                    4d:7c:0b:9a:00:b2:44:bf:62:bf:8c:fd:14:36:85:
                    9f:ed:25:2f:d1:0d:13:4b:5e:05:f4:93:70:13:b9:
                    75:2e:b6:37:49:4a:84:fe:40:97:65:5d:97:42:d9:
                    a5:3a:b5:e5:29:89:62:ab:5a:58:e6:5f:e8:f7:8d:
                    6f:97:29:8a:c7:8f:e3:fd:82:95:59:f1:16:63:f5:
                    e1:1b:2a:72:99:69:d1:98:bd:c2:b9:38:1b:e3:17:
                    b9:e7:14:b3:ba:cf:ab:92:87:89:e5:5a:3e:75:a1:
                    dd:6a:a6:c7:ab:e7:36:47:85:13:e5:1f:65:6e:45:
                    d8:1d:af:0d:10:ff:e2:ec:32:e9:0c:40:72:dc:ba:
                    fc:64:d9:3d:d0:0e:3a:95:47:88:d1:da:f4:36:d8:
                    4a:73:7e:c0:03:99:71:f1:64:ed:74:94:11:25:f4:
                    61:f6:97:fd:9e:50:34:d3:b5:3f:ed:63:2e:2d:34:
                    83:38:9d:ea:49:b5:3e:b6:99:09:f6:ae:98:fc:4b:
                    01:5b:1b:58:af:11:83:13:7a:30:e1:d1:78:d3:c1:
                    6d:02:50:10:c1:aa:0d:15:c4:82:14:fd:f0:b1:98:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F3:F2:9F:FA:6F:FF:4A:0F:FA:FE:DB:71:F2:BA:67:78:9A:28:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ed35d93-819a-3ee3-b2a9-5ad2a7a2c800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:23:87:c1:e0:b8:c5:d6:d5:ec:55:68:4d:83:7f:43:65:fc:
         8e:e1:fe:ce:49:db:26:53:51:3a:68:ce:5c:5e:84:1e:31:b4:
         8d:bf:37:8b:a4:a3:14:ab:af:ee:83:a0:c4:87:59:0c:8e:82:
         8d:c7:dc:c3:57:43:06:56:d1:c9:85:b9:b6:1e:17:65:ae:76:
         3b:20:e5:c2:cf:61:86:d1:2e:d8:b6:75:2e:e2:59:82:6b:21:
         39:bb:81:08:95:bd:fd:b6:6f:41:c1:ab:94:3e:28:c3:98:ca:
         fa:2d:05:68:ff:eb:75:8e:2a:c2:34:40:65:df:60:98:f9:74:
         c2:af:a1:cd:3b:15:c9:d4:e4:5f:bd:20:3f:11:49:10:29:db:
         71:2d:fe:df:60:8f:d4:03:23:81:2a:e7:7d:5a:54:dc:70:2f:
         4c:2c:70:45:cd:8c:63:70:60:1f:4f:72:56:f2:ae:a8:ae:01:
         ab:43:5f:57:b0:f0:3e:08:7b:ff:51:1c:2c:0b:17:cc:c4:5a:
         63:f4:7b:d9:ad:fa:a3:a6:74:23:c8:3e:c6:7a:ca:fc:e9:5b:
         8f:af:0e:ab:cc:96:31:c8:bf:f8:e5:17:26:dd:a9:93:42:3a:
         fd:97:2b:46:ed:03:10:bd:a2:3a:f3:dd:8c:d8:32:6d:db:64:
         78:de:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:46 2026 by rpki-client