Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a21b1582-cc9f-3d4d-99c2-a39383136b22.roa
File:                     a21b1582-cc9f-3d4d-99c2-a39383136b22.roa (raw, json)
Hash identifier:          fhahSFSlk0QzGjB05sE7NGpSSOT76CPe7Yonkg72/wo=
Subject key identifier:   AD:82:6F:87:28:58:45:69:F8:55:D9:DA:1A:58:19:DC:4B:72:EC:53
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CB2871D57324CDDB4E2848840
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a21b1582-cc9f-3d4d-99c2-a39383136b22.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        173.30.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:1d:57:32:4c:dd:b4:e2:84:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=064a4e3c-b921-480c-baca-3c6d1b50725b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:d3:24:3a:62:60:5c:4e:f1:0f:b0:4d:a4:
                    12:3e:95:42:3a:b8:3a:1d:22:d7:4c:b5:06:2b:76:
                    9b:03:65:e0:e1:89:39:50:04:03:72:46:62:d9:53:
                    9c:6a:12:a8:b4:d1:6f:c2:e1:e1:7b:df:86:1c:ab:
                    fa:0a:12:2d:17:29:31:ff:53:e4:e0:2d:88:2f:d1:
                    78:4b:6c:f2:dc:d1:7e:6c:84:c0:e7:e7:07:c3:84:
                    a7:ac:78:0a:e4:de:70:f4:68:6e:49:25:5d:8a:2b:
                    3e:0e:29:75:7f:ab:57:20:76:c7:85:24:ac:47:59:
                    3e:e3:33:db:16:d8:d5:1f:4f:0b:22:d8:3e:42:f5:
                    eb:29:e6:bd:3c:fd:0a:64:f3:98:ad:89:34:d7:24:
                    e5:cd:15:f2:48:33:a0:f0:54:ab:12:06:6b:00:c1:
                    d7:ae:50:da:33:45:e2:c4:63:ad:77:0c:a6:b9:6a:
                    5e:34:97:bf:9c:be:d4:7f:72:22:3c:b3:cb:8e:58:
                    76:09:f2:28:f2:16:b1:d6:df:f9:56:2e:69:41:ef:
                    7f:cb:73:14:99:9f:6a:65:bb:eb:65:df:6a:30:ac:
                    ce:b7:3d:7d:3c:25:79:d9:6f:2a:e7:fe:ef:33:7e:
                    2b:74:35:d2:9a:d2:16:c6:44:cd:7c:ec:d3:9e:8f:
                    34:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:82:6F:87:28:58:45:69:F8:55:D9:DA:1A:58:19:DC:4B:72:EC:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a21b1582-cc9f-3d4d-99c2-a39383136b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:09:d7:d7:c8:0f:7c:aa:59:fa:60:96:2e:91:48:57:4a:72:
         1e:f8:30:1a:c1:4e:ec:4d:f9:c1:34:fa:13:6f:fe:97:c9:d2:
         3e:78:23:8e:47:d6:d9:1a:bc:98:24:be:59:69:fc:28:56:4c:
         4d:8e:0c:87:e5:b2:53:d2:19:24:a6:d6:10:94:5d:a4:c8:97:
         f6:22:f7:74:48:c3:cb:ef:fd:e9:dc:2a:7d:9d:d3:ce:d7:57:
         19:3f:9c:26:49:44:9a:d1:15:a7:c0:43:ce:62:1e:11:80:dd:
         3e:8d:eb:b9:94:4b:a9:42:28:e3:74:a0:35:5b:db:95:5f:ba:
         9d:ee:9f:78:77:0b:9c:09:f8:23:57:d5:c0:9a:60:6f:3b:31:
         80:58:67:a7:aa:3a:23:11:9c:83:3a:f8:f4:85:06:03:e3:07:
         dd:4c:e5:6d:59:c9:2e:76:4a:29:5a:53:74:64:33:15:42:23:
         60:0b:c0:c7:20:3c:00:5e:99:cf:8c:95:74:9d:ad:e1:21:c9:
         87:db:05:31:34:ce:d3:20:3c:8d:b5:a9:af:6f:b2:49:71:f9:
         6e:b1:80:4f:b4:cb:4b:90:7b:0a:50:cf:63:4c:ef:c5:36:a6:
         30:e2:2a:0f:2a:5b:5e:88:81:6e:44:3d:e8:ba:ac:59:78:cc:
         49:83:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:52 2026 by rpki-client