Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2bd3bc7-b692-3a98-b750-03944dc48b1b.roa
File:                     d2bd3bc7-b692-3a98-b750-03944dc48b1b.roa (raw, json)
Hash identifier:          0vj+uCjYW2LuLdhSEENLFmPHeHywY74YqsHdV/svHHY=
Subject key identifier:   39:66:C1:C5:C6:72:72:48:FA:4B:4E:60:AE:E6:35:FA:38:D5:8E:F6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EF44CAA752F7C348F02697B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2bd3bc7-b692-3a98-b750-03944dc48b1b.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        173.30.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:aa:75:2f:7c:34:8f:02:69:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=b378fb02-8bf3-40f5-86b8-1d939532c15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c4:92:a7:fd:50:67:2c:aa:63:84:94:f0:21:
                    22:90:db:3c:34:24:5a:1f:2b:23:4e:b9:f8:e2:17:
                    71:4c:cb:d8:be:26:e0:2a:13:a7:ad:8d:5d:03:58:
                    8d:08:f0:94:e2:c4:25:2c:02:76:47:0d:3e:db:82:
                    2b:56:91:59:4f:67:09:c9:a7:e4:de:6e:05:2a:38:
                    32:df:31:fb:47:05:f2:47:66:2a:b9:ae:5f:1c:4a:
                    2f:62:96:44:09:ab:81:46:43:e3:92:70:fb:c6:68:
                    49:20:8a:d5:ba:84:c8:7e:4e:ab:b1:bb:4c:a4:ba:
                    f3:e8:8c:c3:6f:bc:7a:74:f2:e6:91:3a:87:db:e7:
                    c7:b0:58:7c:1d:36:a6:e4:d4:80:ad:54:1e:d0:10:
                    6d:bb:72:a6:8e:bf:d9:77:76:0c:3e:a6:7d:38:36:
                    27:44:7e:92:59:03:04:1e:8e:fa:c9:eb:5a:af:9e:
                    76:8e:9f:a6:ef:f1:d7:2c:d1:ea:24:f7:34:31:e4:
                    f5:09:82:9e:d4:fc:55:2e:1a:43:ee:e0:ad:a7:06:
                    e2:f5:14:ca:e9:a0:3b:9e:f4:46:7d:6c:f0:1f:56:
                    28:c5:31:57:17:99:18:2c:dd:67:4e:32:8d:0f:83:
                    8f:91:6b:f3:a5:da:da:da:89:e3:aa:2e:7e:d3:10:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:66:C1:C5:C6:72:72:48:FA:4B:4E:60:AE:E6:35:FA:38:D5:8E:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2bd3bc7-b692-3a98-b750-03944dc48b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b2:0a:28:5d:bc:71:fb:8a:f9:84:22:8b:6a:52:f9:7e:be:
         e8:c0:b6:c3:bb:26:4d:8f:46:e0:26:50:45:8a:6d:d8:77:ee:
         1f:23:5b:5e:0e:48:cb:f1:b6:93:3b:72:73:a1:7c:f6:83:62:
         c5:75:8e:2c:9d:ab:2d:f4:9b:3e:60:d6:f2:62:ca:5b:8e:78:
         1b:e0:dc:02:67:fe:c2:40:ba:ec:e4:ef:86:cf:cc:85:39:bc:
         f5:4d:85:9d:56:e3:d3:c7:b3:37:af:9a:ab:a1:95:f2:57:b0:
         ff:a4:01:3d:cf:03:37:6e:ce:55:ba:8d:53:50:4b:5a:ac:f1:
         d7:46:29:8f:cd:cf:ce:db:3b:ae:fd:af:5b:17:3d:01:31:ed:
         43:14:85:7c:58:2b:6c:0b:6e:d6:4a:b8:d3:84:20:8b:7a:18:
         be:c0:bf:02:41:f3:ed:b7:d0:9f:7a:38:7a:cd:c9:16:85:4d:
         b5:33:07:66:dd:13:59:5d:44:99:f4:a5:58:79:04:4b:28:7a:
         41:74:98:6d:09:68:77:8a:64:8a:cb:c1:5a:3a:96:27:a4:70:
         06:64:02:f4:be:cf:35:2f:1b:33:d9:34:af:9b:09:ff:05:10:
         7c:55:14:c5:d9:5a:34:c7:ba:d3:33:cd:b0:6f:6e:fd:64:ea:
         c2:2e:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:41:57 2026 by rpki-client