Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bef6690b-afb0-3fee-af74-eb26790247da.roa
File:                     bef6690b-afb0-3fee-af74-eb26790247da.roa (raw, json)
Hash identifier:          6BlPj2GoqIapbJopXRpz27fN0cvqIFys61Hb2w6/8sI=
Subject key identifier:   50:57:BD:F3:E0:39:9D:D8:3F:C9:1E:64:A4:B7:4A:91:72:98:03:CC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059C606D6EC4DF2E2D893A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bef6690b-afb0-3fee-af74-eb26790247da.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.23.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:60:6d:6e:c4:df:2e:2d:89:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=710a80c1-5317-4016-90e6-60489748c933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:fc:ca:a9:31:58:ce:57:4f:b2:f9:cc:c8:
                    3f:72:d9:92:41:f9:01:09:41:ba:3b:98:f8:78:d5:
                    46:a5:5c:98:d5:8b:9e:22:01:f2:1a:73:e2:fb:7d:
                    ff:7c:85:83:8a:f2:9f:d3:ce:15:44:fa:68:8f:6c:
                    1f:eb:84:e7:5f:5a:86:29:8e:52:c3:44:8b:f7:a1:
                    7d:94:38:6b:c6:a5:e0:b1:c4:dc:a6:6f:8d:78:01:
                    03:bd:51:15:d2:bd:23:ec:3a:6c:49:da:e2:37:2d:
                    a3:1e:33:b6:65:3e:87:44:7a:4a:1c:08:61:6c:40:
                    85:c6:e8:5e:7b:17:10:27:a3:9b:59:a3:40:e6:0a:
                    46:e4:43:03:8c:56:ad:90:d9:d8:63:a0:57:25:00:
                    d9:b8:dc:be:9b:ad:90:10:af:11:17:1d:67:f3:01:
                    6e:a9:31:e1:95:64:99:40:44:a3:60:49:12:f8:86:
                    ae:72:0a:f9:a4:da:eb:93:4e:fd:24:e5:63:41:3b:
                    f3:5f:1d:ea:3f:14:ac:e6:79:64:51:3a:7c:75:18:
                    b3:ac:75:15:6a:ec:30:e5:f4:ca:51:0a:8b:ce:ee:
                    f1:cc:dd:18:a3:44:6a:d4:35:55:b0:db:22:82:bb:
                    58:7c:fb:fc:80:1e:25:8c:5a:ec:72:12:4e:34:fa:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:57:BD:F3:E0:39:9D:D8:3F:C9:1E:64:A4:B7:4A:91:72:98:03:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bef6690b-afb0-3fee-af74-eb26790247da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f3:09:7d:eb:a8:4e:22:7f:51:fb:70:37:8e:f1:c0:4a:aa:
         fd:02:05:dc:90:31:56:6d:6f:16:9e:6e:58:81:29:bd:58:93:
         93:f0:cd:bd:eb:49:07:73:1e:4d:b3:00:80:a8:2e:7b:1f:3c:
         7d:15:d5:8a:f7:6e:6b:dc:90:50:e8:1b:8a:e3:56:f9:3e:22:
         df:10:7b:f2:04:17:4f:b0:f7:09:25:f3:a3:87:07:b0:56:7b:
         24:73:ac:f3:79:d4:1f:d6:cf:20:d8:70:1f:16:f0:4d:e3:8d:
         f5:4b:2a:a9:55:08:8e:5a:7d:ae:dc:27:2c:b9:18:45:09:8c:
         27:ef:94:56:e9:cf:89:76:bc:8b:85:da:2d:78:b8:72:d8:7b:
         88:79:10:fd:bd:0b:36:a0:94:0b:21:c0:0a:42:bb:4f:f6:65:
         4a:16:19:35:26:b1:64:ad:8c:54:bc:e4:fb:32:b6:3d:7c:97:
         41:9a:62:1e:6e:58:7c:a8:e2:1a:ed:9a:7d:60:9b:bf:50:c6:
         f5:93:22:78:05:e7:cf:26:71:82:b7:dc:b6:24:37:26:b5:97:
         6c:7a:9e:74:32:86:a8:6d:ba:4d:13:c3:b7:32:04:a2:5e:42:
         f8:ce:98:48:99:07:32:92:6e:f9:9e:6e:0c:25:80:b1:d4:f5:
         2a:e4:ce:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:12:42 2026 by rpki-client