Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7620fdc4-0d4e-39d4-bbe7-a133f2d5b156.roa
File:                     7620fdc4-0d4e-39d4-bbe7-a133f2d5b156.roa (raw, json)
Hash identifier:          AcyT7Ubi5JQi0WDB4XL0lu+J0WqOGKEBi692536ytpA=
Subject key identifier:   72:9C:31:11:F4:E7:BE:8B:34:83:1E:D7:FF:98:0E:B1:76:AA:0E:B5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584C45A832A28284C82AEC324980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7620fdc4-0d4e-39d4-bbe7-a133f2d5b156.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        173.17.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a8:32:a2:82:84:c8:2a:ec:32:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=f6699d39-8bbe-4f86-9f29-a75ecddaa064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:f7:69:70:c0:7b:16:fc:ba:01:53:c3:66:
                    68:90:4e:4a:70:25:c3:89:f9:be:0d:ef:9a:5b:da:
                    f4:cc:18:72:82:15:d0:1d:88:41:a4:c0:cc:61:ca:
                    b2:27:3c:00:aa:2d:57:fa:c5:44:db:7e:5e:a1:92:
                    d0:bf:b6:1e:95:49:11:15:84:d6:26:42:17:05:ca:
                    33:0c:16:97:4e:c5:b2:e8:48:5f:a2:a9:ec:c3:7a:
                    88:b3:17:de:b2:6d:ff:55:17:fb:41:f8:3d:6e:1e:
                    a5:e5:ac:65:f7:fc:dd:d1:5a:cf:9e:bb:de:5b:36:
                    bd:f2:5f:df:10:8c:96:82:45:01:e6:91:a0:b1:7b:
                    6e:12:68:60:6f:16:ee:ef:9b:4f:0b:47:b1:9a:b8:
                    49:1b:b3:6f:27:1a:3c:ad:01:de:12:5b:f9:c7:48:
                    a7:49:db:f3:86:59:74:98:7e:9b:07:19:48:06:e4:
                    e5:a0:5a:6d:be:be:c5:a5:2c:26:13:38:62:a6:77:
                    aa:35:6b:01:b9:ec:f4:08:56:a6:88:c3:a7:a5:a9:
                    e3:46:45:2a:5d:f2:1e:5c:45:c1:7f:dc:1f:d2:24:
                    80:40:1b:d7:ba:d2:f4:a0:e9:a9:73:42:3d:6f:d2:
                    30:74:bb:96:e1:d4:27:39:c1:e7:0c:b1:00:57:64:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9C:31:11:F4:E7:BE:8B:34:83:1E:D7:FF:98:0E:B1:76:AA:0E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7620fdc4-0d4e-39d4-bbe7-a133f2d5b156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5b:a2:96:83:3d:bf:49:bc:f8:31:dc:f9:23:ef:ec:fc:87:
         ba:bb:7c:8e:34:6e:4d:1d:8a:2a:04:bc:16:41:81:bd:80:34:
         10:f9:c3:62:82:0d:70:53:e2:f0:f1:cb:04:a7:97:5f:15:d3:
         11:dc:e4:68:7e:97:7d:64:7d:20:9f:1e:60:39:e8:e3:31:4b:
         d2:ab:e5:cc:4e:3f:c8:41:99:56:24:b2:b8:62:75:89:aa:33:
         16:cb:1f:9e:29:04:45:00:d5:98:f4:68:00:d0:7f:80:53:31:
         33:43:bb:f7:c5:04:53:b0:c2:8a:90:f1:51:40:04:f8:ed:ab:
         b4:bc:c9:5d:6d:50:28:37:78:6e:60:9f:3c:3d:56:27:4c:7b:
         c6:19:39:4a:2e:05:03:b1:15:ab:6f:21:31:9e:af:8e:c4:a4:
         95:a0:50:44:29:48:da:06:a7:16:27:2a:03:ba:78:28:70:07:
         a5:9f:d8:a8:e0:1f:dd:1a:e9:04:d2:6f:49:41:48:bc:55:be:
         23:e7:7c:63:db:b5:8b:c0:b7:81:60:0c:75:e1:29:53:43:16:
         8e:89:6d:b9:6f:78:9f:69:d1:0d:fb:f0:ac:cc:aa:3f:6b:29:
         c7:a7:b8:37:d9:8c:46:70:38:4a:21:28:60:38:d3:b8:20:9e:
         10:e2:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:59 2026 by rpki-client