Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa
File:                     9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa (raw, json)
Hash identifier:          a+cEt/vW70ysYGvd9hAIC6OXJga9nfHD2WzDiz40XYE=
Subject key identifier:   B6:C0:50:61:96:FE:0F:29:48:6A:81:49:0D:F0:45:97:5D:C2:B8:C2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E086657DA2BA14BC4CF652080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.19.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:57:da:2b:a1:4b:c4:cf:65:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=802b7e3c-2caf-497c-9fab-415d6251852f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:2e:50:95:2e:69:8b:71:cc:8e:dd:b4:4b:
                    0b:56:ca:47:39:ba:4f:01:06:a2:30:a0:46:d8:5c:
                    5b:8b:57:18:80:9b:74:7d:5d:fe:e8:71:ed:ad:7f:
                    ec:76:6e:af:49:f5:24:7b:f6:4d:ea:50:57:de:20:
                    e0:48:a6:50:2f:e7:32:97:ad:ca:96:e6:d2:ac:33:
                    8f:2b:64:57:f9:fe:37:2b:b7:11:52:fd:a3:9f:33:
                    3d:5c:57:a8:bf:b0:3a:b8:7b:59:50:02:90:f9:0e:
                    b3:5b:e7:69:3a:a7:bd:03:12:57:97:57:19:eb:6e:
                    3e:5d:5c:7f:ae:ff:1c:c0:26:60:6c:b5:93:31:79:
                    de:8f:d8:11:74:77:49:c5:71:74:d3:a4:bb:de:7d:
                    3b:ae:5a:23:5f:17:50:91:3a:41:9d:77:44:c9:5b:
                    e6:84:59:f4:4e:56:f4:5b:87:0f:f8:20:63:ad:93:
                    c9:0c:98:ad:e8:46:f7:2f:bd:03:45:fa:b6:91:46:
                    8d:55:e8:80:b2:27:1c:ad:3c:ee:0f:7d:5b:77:2a:
                    62:1c:6e:02:89:c9:e8:2d:56:76:97:55:51:5d:20:
                    2b:81:85:83:73:00:e0:64:19:5f:cc:a0:9d:67:77:
                    16:21:ef:a1:f1:75:56:42:72:0d:21:8d:04:90:c1:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C0:50:61:96:FE:0F:29:48:6A:81:49:0D:F0:45:97:5D:C2:B8:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:95:90:9d:a3:bd:b2:99:e6:19:6d:b4:d9:9f:02:6f:23:fc:
         06:b5:78:e0:db:47:4c:e5:7c:86:6e:a6:6e:fe:6b:7f:26:44:
         68:1d:72:2b:af:2a:9d:33:7e:f0:ca:55:63:3c:5e:80:a5:e1:
         8d:3e:31:ce:f4:e3:53:b4:97:0b:55:64:fa:38:40:58:51:2d:
         8c:83:f6:37:38:96:12:5d:e5:7a:72:ff:27:0f:1f:5e:d2:d0:
         22:e4:39:d1:ef:26:34:ec:ed:6c:ab:db:ac:a9:80:c5:01:32:
         ca:91:bc:69:38:93:58:dd:07:59:da:55:48:a2:65:e8:13:fd:
         74:f6:5c:f7:60:66:f2:80:b0:19:89:fb:75:80:67:ee:8e:2f:
         7a:09:78:68:a4:22:2f:c8:ae:72:f2:bb:a1:9e:da:c7:dd:b3:
         10:71:7a:7f:53:5f:94:59:98:fa:57:ff:68:43:9f:2f:fb:a9:
         d3:86:74:f0:31:6c:50:80:e8:c9:60:e4:15:6f:29:87:69:12:
         0f:c2:7d:25:ad:ad:c8:ba:89:fa:8b:97:4e:39:8f:15:a7:1c:
         62:f8:1a:01:38:72:5d:5c:d6:bc:8c:c8:59:56:45:29:9e:96:
         80:69:f8:8d:4c:a5:ab:b2:b2:fd:3c:f8:33:e4:9c:46:30:01:
         70:5a:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:36:27 2026 by rpki-client