Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba4c534e-c145-3caa-abb1-ccd8778393d1.roa
File:                     ba4c534e-c145-3caa-abb1-ccd8778393d1.roa (raw, json)
Hash identifier:          8xRgv11FkUtsJLU/C2LjDS8+bGFUCYWN4DrD8OIZx5s=
Subject key identifier:   6C:75:5D:21:61:16:D0:8F:2A:96:16:A2:FC:D1:8C:6B:62:D9:82:5D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059C60FD17296236A43C7E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba4c534e-c145-3caa-abb1-ccd8778393d1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.29.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:60:fd:17:29:62:36:a4:3c:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8e9a59d3-8ea0-4c7b-a824-140202492cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:91:1f:4f:d8:1e:08:23:62:44:37:95:8b:1a:
                    69:d6:e0:62:2a:bb:76:b0:13:a5:8f:fe:36:d8:dd:
                    b5:bd:ba:23:02:da:9a:13:b4:ba:df:57:6e:11:4e:
                    cb:b9:ce:1a:c5:e2:27:6f:93:33:98:d5:ff:24:a4:
                    30:a0:db:21:c9:b4:c2:ef:d9:a4:bd:19:be:b1:22:
                    08:36:4b:96:23:0d:d7:c0:39:c8:96:b6:07:47:3d:
                    7b:f2:ad:0a:53:68:fa:41:e3:47:7f:7a:b3:8b:a2:
                    3d:c5:9d:13:ce:04:0e:32:d3:88:cc:8d:65:b2:b6:
                    a1:53:d9:66:95:cb:b2:23:9e:63:c5:01:68:16:18:
                    0d:e4:2c:da:c3:d5:7c:07:5e:f4:57:f1:eb:62:56:
                    cc:ff:cb:85:18:77:01:15:74:2e:dd:73:ae:37:e7:
                    e2:c3:36:c4:96:3f:5e:4b:45:aa:e6:36:c7:81:a1:
                    fa:b0:15:a1:b4:94:9a:60:37:d4:57:e2:10:03:f3:
                    8e:ed:07:06:64:02:79:6c:3e:65:9e:7b:4e:dc:3f:
                    41:e8:38:25:15:7a:e3:63:09:0f:8d:ef:80:17:7b:
                    e0:46:33:d0:14:b9:6b:34:0b:46:69:ba:2f:de:71:
                    ee:67:e7:13:90:c1:3a:4d:7b:85:bc:1f:a0:87:5f:
                    b5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:75:5D:21:61:16:D0:8F:2A:96:16:A2:FC:D1:8C:6B:62:D9:82:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba4c534e-c145-3caa-abb1-ccd8778393d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b8:4e:43:4e:6a:eb:08:9d:0b:e4:06:b8:33:ee:4d:6d:f9:
         3a:9c:ca:ff:a4:d9:56:a2:6c:fd:f1:5f:f5:7e:47:fb:55:ca:
         5a:d3:71:49:9e:c4:07:71:fc:21:8e:3f:37:fb:46:89:cd:a3:
         98:9f:84:ad:16:f4:77:ef:3d:b6:bb:7a:0f:af:15:18:b4:78:
         2c:56:96:1e:4b:09:92:0e:cb:95:05:2e:5f:50:2c:a9:4f:e8:
         1d:58:fe:60:56:72:d3:f3:43:31:11:37:b8:50:d3:04:d2:c2:
         49:b7:d1:ba:cc:8f:39:92:e7:f5:ea:29:be:72:5e:4a:49:e4:
         53:12:bd:aa:53:df:04:32:6c:17:f0:e7:a4:35:70:b8:2d:10:
         ec:a6:a8:2a:aa:f3:47:d7:f0:d9:b0:45:71:56:72:c8:0f:ab:
         24:40:89:4d:ec:58:56:7b:53:13:ba:67:58:9d:9e:b8:b2:c5:
         56:4c:b5:88:7f:5a:39:42:ce:b5:6e:95:56:da:84:97:bc:1e:
         30:61:9b:95:00:d5:e9:86:01:5f:4d:4f:6d:9c:06:ca:e0:32:
         2d:15:a3:80:3c:6c:88:51:16:0f:fa:3a:31:8f:1d:16:c7:bb:
         9b:70:a8:a4:6f:a9:4c:c2:6f:c3:91:2c:1d:40:17:3b:19:6f:
         c9:d5:f0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:30 2026 by rpki-client