Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9c42e37-0387-35e2-b596-fa8472f67cf0.roa
File:                     c9c42e37-0387-35e2-b596-fa8472f67cf0.roa (raw, json)
Hash identifier:          auyOjM+JohuCi1iT3Ie7m1fYPhPvpt3F+1zQjdtpDmA=
Subject key identifier:   0C:83:19:83:13:A0:47:30:6A:E3:DF:8B:7F:64:94:53:BF:F1:92:13
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E1E443DD4EBEB6F0B5022C3C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9c42e37-0387-35e2-b596-fa8472f67cf0.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        173.28.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:3d:d4:eb:eb:6f:0b:50:22:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=8ce2936b-49f6-4a10-8dbb-287d93d5949a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:25:e1:1b:90:e6:f3:a5:59:10:d9:e9:73:
                    7c:98:1f:1c:e0:bc:40:7d:06:59:91:50:73:dd:e7:
                    27:1b:48:48:b0:9a:9c:d7:97:e5:a8:71:6e:7e:3f:
                    84:b4:11:8e:65:fc:52:49:0e:8a:69:04:18:76:24:
                    db:21:56:58:1f:7f:61:ae:0c:88:cd:8a:df:e8:6c:
                    d5:17:1a:3b:c2:24:ff:25:97:d1:9b:52:12:51:ca:
                    31:35:f4:98:ff:b9:9d:8a:60:d9:68:39:95:f1:e6:
                    70:2e:55:a4:f3:7f:7f:9a:b6:58:44:d8:3a:5c:01:
                    dc:1b:e1:60:fa:66:94:ba:c9:23:84:68:7a:28:c1:
                    78:35:a9:b2:f6:60:7a:ed:d5:f7:af:09:25:bb:0f:
                    2c:5b:d8:1e:88:0e:19:35:05:b1:5d:1e:7c:97:73:
                    c2:b3:bd:ad:06:69:59:16:70:43:c1:04:0c:03:a4:
                    7e:50:77:40:80:c5:8e:eb:4a:26:0d:d6:2f:b1:63:
                    3e:74:2b:2b:6e:0d:e2:2c:c4:14:f6:e7:9b:e8:00:
                    52:d1:5d:3f:6f:98:9e:d4:64:f1:96:c2:97:1c:b3:
                    83:12:cb:6c:6c:3c:7d:cd:1c:53:54:51:60:8e:2f:
                    25:76:fb:4a:e0:46:67:65:1b:38:2a:48:99:92:c4:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:19:83:13:A0:47:30:6A:E3:DF:8B:7F:64:94:53:BF:F1:92:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9c42e37-0387-35e2-b596-fa8472f67cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ca:b1:79:c2:29:b2:e0:ed:3c:f2:d7:70:ba:69:47:0b:6b:
         7b:e2:bb:f0:75:f4:37:2b:5a:a2:60:a9:e2:c5:3b:74:f1:0a:
         d2:d0:62:b7:42:0f:fc:1f:e5:cc:4f:e4:2e:c1:e9:76:09:ed:
         11:8a:27:46:b1:a1:5c:b4:3a:f6:bd:ed:06:a6:ba:17:c8:10:
         da:82:6c:3d:1e:04:05:b2:b7:40:4c:10:53:3f:cb:be:24:04:
         b4:06:eb:5c:1f:62:3b:5d:b0:d2:af:b1:25:ea:ca:00:40:39:
         dd:0a:84:9a:83:64:08:aa:25:e1:2c:31:e2:be:37:7c:2f:3c:
         e1:df:64:ee:bc:24:41:ed:86:9e:48:b3:e6:0c:14:1b:41:e5:
         a6:82:63:a3:f0:80:67:aa:a4:23:35:53:7b:db:14:bc:24:37:
         be:8f:17:30:5c:68:d8:47:00:ea:1c:8d:de:b9:3b:99:03:68:
         00:95:04:af:ce:06:0b:36:2e:b2:b6:0d:cb:2b:71:c7:03:70:
         ba:9a:db:c6:39:10:84:62:8b:c7:37:f8:cf:82:cb:51:64:89:
         a6:cb:dd:eb:5d:f2:32:6a:dd:92:13:59:8b:96:c7:c3:a2:e4:
         ac:d3:33:3f:0d:94:57:36:6b:29:0b:a4:a2:61:49:5c:c7:ab:
         86:4b:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:13 2026 by rpki-client