Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f224b0d3-4510-3f89-826c-e939a66b2874.roa
File:                     f224b0d3-4510-3f89-826c-e939a66b2874.roa (raw, json)
Hash identifier:          7uupHgJo5FH8GQ4ZBKc2RXTBX6phf0Jh32i7eJaqGs4=
Subject key identifier:   3C:B0:94:48:FF:26:91:64:A2:35:09:BA:F1:E4:F0:45:E6:E1:9C:DB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F3052732CD848B1654D42D180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f224b0d3-4510-3f89-826c-e939a66b2874.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.17.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:73:2c:d8:48:b1:65:4d:42:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=aab7fdfc-696c-4fa2-b162-a4399678f83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:1d:b5:ab:67:a3:a1:9d:64:a3:86:68:6c:
                    74:b5:a9:b0:66:14:49:49:78:65:e3:8c:45:4e:5c:
                    79:47:12:0e:b7:af:08:25:69:81:a5:db:93:45:24:
                    0b:92:88:95:67:d6:c6:45:96:f0:cb:d1:cb:44:81:
                    a8:45:25:a9:0c:43:41:2e:0e:97:c2:60:8b:a8:9c:
                    16:1b:58:6d:fd:03:17:eb:c6:bd:76:5f:37:51:cc:
                    8c:d4:ea:91:ac:c6:56:a0:89:7b:b9:f8:b1:c8:09:
                    86:ac:d8:33:fd:7f:41:6a:48:26:27:43:d7:14:1c:
                    ad:66:5e:4e:8f:b6:ea:8b:70:95:a7:b7:b5:8c:cc:
                    00:7c:5e:7d:e5:20:c6:e0:76:76:51:2c:92:4a:f5:
                    a0:68:4b:75:21:30:16:80:ce:e1:8e:98:61:dc:ca:
                    bb:af:53:af:6f:54:6b:47:03:e6:ed:a6:ab:3c:cf:
                    f3:6f:06:77:b4:a3:53:60:34:5d:a1:0b:4f:11:5b:
                    fe:6b:b1:b1:ee:0a:68:4b:f6:d3:d0:37:78:e3:aa:
                    98:6a:2b:3d:9f:51:fd:c8:57:a8:e7:25:8b:f3:00:
                    66:3e:a9:e2:15:77:b8:23:a5:82:26:f8:39:be:b6:
                    29:f0:a8:e3:42:9f:fc:a8:c6:b1:9d:32:5b:67:58:
                    36:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B0:94:48:FF:26:91:64:A2:35:09:BA:F1:E4:F0:45:E6:E1:9C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f224b0d3-4510-3f89-826c-e939a66b2874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:00:80:bb:dd:2f:f9:4f:e1:93:66:ef:fd:76:a8:18:e3:30:
         8f:a9:52:91:da:30:2b:eb:66:f5:5e:f6:45:f8:18:8b:a3:a2:
         c1:71:b6:c7:52:7b:3c:0b:b4:e9:80:fb:5e:32:ac:c4:db:16:
         b4:3d:3e:3e:05:19:25:62:e9:e1:de:e8:15:59:9c:f8:1e:29:
         58:70:5d:ba:18:25:ce:e0:b2:70:ee:6e:42:1a:b4:18:cb:bd:
         fb:17:cf:e1:56:4f:f5:27:4e:4f:98:3c:9c:5c:1f:cd:8f:64:
         2c:2c:3c:ce:c7:d0:eb:09:ea:a3:aa:44:f2:1f:33:53:60:9a:
         52:76:59:45:89:27:7c:de:0f:cd:2a:8c:59:90:78:14:dc:10:
         82:54:57:24:39:91:09:1e:82:28:17:24:f6:19:1a:e7:03:2d:
         01:07:cb:60:f0:f6:43:51:fa:61:c7:95:9e:e7:15:70:48:35:
         2e:6d:38:b1:29:7c:9c:e6:f1:3a:01:58:e5:82:0a:5d:94:43:
         6f:f7:4e:87:85:8b:12:46:20:12:a4:3b:9c:d1:b0:f8:b2:7e:
         aa:5c:14:93:bd:a6:cb:20:9e:cc:80:cf:8e:a9:47:ac:ed:22:
         e7:f0:48:30:9c:dd:5d:00:ff:03:ad:fb:97:56:05:33:fe:a3:
         a2:f8:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:52:19 2026 by rpki-client