Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa
File:                     ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa (raw, json)
Hash identifier:          XcIhlXXZGr0tGxFVJ+73IyI1NS4aW6ogs2eFP5yKQms=
Subject key identifier:   14:AE:E4:0A:42:93:B9:34:0F:A0:8D:06:CA:10:02:38:79:7E:E7:D5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E07009396795803223FE6A000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        173.16.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:93:96:79:58:03:22:3f:e6:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=e9adf954-12cb-4d05-88f2-dddc0f6e5d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:8d:11:38:17:b4:41:de:ce:df:f6:01:92:
                    3b:e4:e9:46:85:4e:0d:72:04:dc:9a:39:77:6d:e7:
                    44:69:c9:b3:92:be:72:14:3a:a3:24:d2:03:90:a9:
                    5c:ed:24:b9:22:89:7a:91:48:e1:0e:c2:86:6e:f7:
                    28:1b:29:19:9b:ba:80:de:72:e5:14:a8:f6:b6:14:
                    16:69:f7:44:26:0f:5b:61:05:04:52:da:a5:16:ed:
                    a7:87:96:1c:8c:88:3b:e7:ee:87:6d:89:33:79:73:
                    c6:cf:ee:4e:fe:8e:2c:7e:4e:5d:0b:5a:d9:95:64:
                    09:c7:c5:54:53:9b:a6:50:d9:43:50:dc:34:1f:ba:
                    10:1c:4c:66:45:7f:0f:33:da:83:b8:cf:66:ee:ff:
                    e2:79:83:b0:91:42:0e:2d:fd:74:cf:50:28:68:b4:
                    bf:e2:46:4e:a1:80:63:33:11:5b:90:c9:be:c2:ae:
                    88:73:4b:aa:f5:69:5e:28:e4:66:3d:fb:f5:ea:4a:
                    a7:1a:db:e2:0d:92:7e:c7:e8:85:a9:b7:c5:3c:b8:
                    7d:50:78:e7:c1:c0:48:fc:bb:17:7c:97:11:1d:bb:
                    1a:62:d2:36:ba:ec:65:9a:50:8d:f7:9e:91:4d:01:
                    68:20:4f:65:4b:0e:8f:1a:69:15:22:6f:ee:22:90:
                    a3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AE:E4:0A:42:93:B9:34:0F:A0:8D:06:CA:10:02:38:79:7E:E7:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:2e:64:4b:5d:d9:9c:06:7b:b6:a8:a9:02:96:53:17:d5:
         91:50:59:54:67:8b:4b:c8:9f:1e:ce:0f:e9:80:5e:cb:99:5d:
         9a:3c:d0:cb:d6:8d:f0:c6:f1:57:de:c7:77:a9:35:44:a6:07:
         a8:1e:eb:33:5a:2b:91:df:53:fb:03:de:7a:3d:6d:35:cd:56:
         04:98:62:ad:f1:53:0e:35:41:08:25:b4:89:f7:b2:47:44:fe:
         59:d7:ad:3c:85:32:16:c0:a4:53:36:53:63:be:c4:95:19:c8:
         52:d4:79:08:94:53:21:a2:f9:09:c2:b3:be:0a:75:5c:f1:de:
         b8:50:d6:a6:20:76:8c:03:7a:f9:f8:cb:be:80:c3:82:98:b5:
         ef:34:28:10:3a:f6:d5:51:32:76:66:4d:33:50:87:35:31:25:
         44:43:0b:9f:11:67:63:27:f3:1a:26:db:bd:35:37:28:bf:14:
         f8:b0:61:25:ed:27:60:91:f8:a4:46:36:b9:7e:f3:af:23:eb:
         c7:06:55:e9:89:17:e5:80:22:b2:09:9d:63:7c:16:0f:f9:3a:
         41:87:df:06:42:e1:21:a8:10:fe:7c:35:27:5c:1e:8f:ce:84:
         05:a1:66:80:9d:ed:73:98:a9:48:59:24:e9:f5:47:c2:db:bf:
         71:41:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:00:40 2026 by rpki-client