Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6ac28a8-ab40-357a-9bf4-ef6a643997fe.roa
File:                     e6ac28a8-ab40-357a-9bf4-ef6a643997fe.roa (raw, json)
Hash identifier:          0Qmezpdyuc8Ep9gVlsvRfMTxFLCZDn7TeOAGZXuB7ao=
Subject key identifier:   88:F8:47:E5:F3:5C:C0:94:3A:DD:E5:99:D7:C7:8F:2A:4E:06:BA:E7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E08665A900BC9ADDCBB2F78C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6ac28a8-ab40-357a-9bf4-ef6a643997fe.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.18.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:5a:90:0b:c9:ad:dc:bb:2f:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=8e3e4cf4-5973-4381-99d7-2021a2d6ce55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7b:a8:cc:16:22:32:bf:3e:a6:72:79:2d:3e:
                    a0:29:7a:f0:de:70:f7:d8:27:c8:1f:46:a5:75:63:
                    11:28:0c:db:92:2b:49:0d:4e:83:20:4f:f9:3b:34:
                    3d:98:62:fc:94:6f:02:b7:ce:49:8c:b3:da:40:96:
                    6b:c2:dc:5d:cd:ab:29:b2:2f:f3:a8:e2:07:8e:ee:
                    00:81:76:18:3a:c7:ea:6e:8b:24:50:b4:05:43:cd:
                    60:00:5e:94:cd:45:33:1a:1b:f6:d6:01:2e:61:f0:
                    8b:77:20:98:e8:f0:7e:88:2c:8d:bb:98:0d:35:7b:
                    1e:ef:84:36:f3:29:8f:54:15:fd:65:1d:78:7c:e0:
                    f5:ae:7f:08:eb:8f:9a:8c:86:e0:20:54:4e:85:ab:
                    72:00:29:8e:9f:27:3f:50:42:4c:1c:90:0b:e5:cd:
                    de:48:c5:a4:ea:f8:e8:38:5d:ea:d0:f4:f8:63:4e:
                    df:7a:0b:bb:83:d7:87:ac:95:ac:0e:76:54:c6:42:
                    a4:4f:3d:7d:c7:b5:7d:0e:ea:bf:49:d8:61:60:57:
                    0d:85:c7:c5:0b:c0:1c:4d:9f:1c:18:b7:77:ab:e4:
                    79:75:16:a0:b6:c9:2e:0d:5c:95:4f:91:76:6b:22:
                    c7:ed:e6:6a:15:d1:d9:79:5f:59:20:af:a6:3c:8c:
                    b0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F8:47:E5:F3:5C:C0:94:3A:DD:E5:99:D7:C7:8F:2A:4E:06:BA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6ac28a8-ab40-357a-9bf4-ef6a643997fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:0c:47:94:c5:00:db:63:7a:da:84:62:4a:7f:20:c7:91:d7:
         a4:b9:ae:d9:c4:30:e1:a1:68:c3:cf:b3:48:e8:0a:d4:d0:ed:
         25:55:43:50:f8:14:25:37:ca:c5:89:9d:22:77:77:72:fc:42:
         5a:24:9c:c4:ca:16:2f:f6:04:33:e6:a7:e6:08:6f:22:9c:2b:
         24:0a:9b:4d:c8:f2:48:28:d4:f9:5a:17:9e:ff:6b:2e:ae:42:
         f4:7a:a4:0c:0e:0e:6d:f7:fc:6f:13:9f:73:58:e6:91:3a:3e:
         aa:5b:e3:33:9a:a4:ae:bd:aa:33:f9:5b:71:5c:ee:1f:1d:f7:
         e0:15:08:ce:0b:2d:47:1d:9a:4a:78:ff:38:38:24:c1:51:88:
         2a:29:2b:4b:7f:ea:a4:72:b7:96:3a:e6:1a:76:6c:19:64:80:
         6e:40:4b:cc:5d:f2:f2:51:51:2f:7d:85:30:18:5e:15:bb:30:
         7d:75:01:71:fd:2a:7c:c4:8c:c7:d4:cb:14:32:2e:a8:cb:8d:
         8e:46:0e:c1:62:7d:dd:bd:46:07:c6:3a:dd:f0:bb:4b:d3:95:
         b0:33:11:97:a3:99:b5:8a:30:24:20:14:e8:f3:ff:b7:88:a3:
         93:64:54:7d:65:12:67:4a:62:99:0c:7c:2d:26:7a:d3:68:e7:
         1b:7d:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:30:58 2026 by rpki-client