Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de7274f9-afcb-3b3e-8e0f-cf8001e05542.roa
File:                     de7274f9-afcb-3b3e-8e0f-cf8001e05542.roa (raw, json)
Hash identifier:          GfJnghl2BjbgSXnFWCoWmU7l+uG3uGIBZMWnwitij88=
Subject key identifier:   B0:3D:7F:BC:43:74:E2:C5:52:9B:27:EF:0C:33:FE:18:F4:C2:64:A5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059C712072B6F331140EE080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de7274f9-afcb-3b3e-8e0f-cf8001e05542.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.23.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:71:20:72:b6:f3:31:14:0e:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=49b69bc8-6c46-497d-817e-9774ac640e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2a:d4:07:e7:57:a9:45:76:49:f5:36:04:ad:
                    b2:6b:bd:f2:0e:9c:ea:1d:9c:25:10:60:b8:77:fc:
                    63:1a:d2:2b:ed:b7:fd:87:d2:7b:44:85:db:9c:f8:
                    d2:a9:e5:23:74:71:67:88:e2:c0:94:e6:f1:60:01:
                    bf:be:80:62:eb:09:25:59:1e:05:b0:4b:1c:76:f0:
                    12:42:f5:cb:44:71:49:01:0a:2c:1c:10:21:be:5d:
                    83:d3:2d:bf:95:dc:e6:34:bf:5d:d0:4a:f1:a2:8b:
                    3b:04:ba:0d:2a:ce:e5:43:5c:4a:6c:4b:e2:d1:51:
                    88:92:eb:9c:70:96:5b:24:d9:da:e3:0c:a5:13:19:
                    b7:66:8c:7a:c3:5d:be:8d:28:15:dd:bb:24:87:8e:
                    62:c9:6e:e2:d0:e2:3c:e6:29:5f:23:be:30:4f:69:
                    23:a5:d7:48:cf:bb:be:3c:3f:71:56:c9:d8:81:3d:
                    1e:e3:9a:de:45:88:1a:8a:84:38:fd:14:e3:1d:1e:
                    5d:18:0b:f1:d7:5a:83:2b:84:e4:22:2e:f2:64:1f:
                    f7:d5:0d:b5:83:30:56:b8:fc:9a:e0:c3:da:20:b6:
                    61:3a:68:b3:17:2f:af:ee:97:43:19:ce:d2:72:ca:
                    04:91:45:41:20:2a:7f:1d:d3:37:fd:11:11:d8:57:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3D:7F:BC:43:74:E2:C5:52:9B:27:EF:0C:33:FE:18:F4:C2:64:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de7274f9-afcb-3b3e-8e0f-cf8001e05542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:bf:a3:d7:3c:74:af:6a:bf:b1:60:af:8c:fc:a2:40:f3:4b:
         97:01:61:de:39:8d:28:88:06:2c:fe:a3:08:1d:33:7c:3b:80:
         5c:7f:d6:e5:c9:23:09:ae:30:b6:cd:b1:d7:44:61:63:c4:b2:
         af:96:51:9d:cb:21:b3:07:dd:38:f1:46:25:18:96:fa:94:57:
         b9:d2:4b:f3:8e:3e:b7:7f:5c:b5:6d:62:b1:5d:f3:bc:bd:39:
         a5:d3:e1:ec:5f:61:a3:c2:7c:35:27:42:a6:db:ab:3e:a7:22:
         c6:9e:f2:16:83:4a:7c:7d:fe:4c:94:67:92:ba:19:c7:c8:11:
         92:5d:35:44:2d:53:7c:61:51:5d:28:49:d8:aa:e6:92:5a:02:
         fc:0f:97:99:66:c1:c8:e4:9d:93:32:a1:ab:90:67:26:49:16:
         64:ee:ad:bd:04:61:69:e3:39:87:fb:0a:69:25:75:18:2d:b9:
         36:d4:7c:fe:43:a5:17:bc:75:cb:e9:5e:c1:7d:cc:35:56:32:
         57:18:75:3c:f6:f6:ae:f0:4c:ef:8c:08:d0:bc:04:dc:cf:ae:
         89:81:99:e5:06:05:39:30:88:0f:fc:57:34:26:77:cd:9d:9f:
         d4:d8:32:92:f0:3d:53:11:71:ab:31:29:42:9e:17:11:1a:f0:
         23:66:ed:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:37:01 2026 by rpki-client