Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f3c42396-9313-3285-b28e-595dbc2007c0.roa
File:                     f3c42396-9313-3285-b28e-595dbc2007c0.roa (raw, json)
Hash identifier:          6gxrRjXpHoQTHSVuvwEjrjFzBniMUi3P9c6R0xFVkVI=
Subject key identifier:   F4:31:58:F8:07:F6:E5:BC:17:64:5C:9D:24:60:AB:6A:C3:A7:9A:AC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA5AA949A9A239825448E9910
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f3c42396-9313-3285-b28e-595dbc2007c0.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     19905
IP address blocks:        173.30.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:94:9a:9a:23:98:25:44:8e:99:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=a8d1a554-5409-4a55-9e16-a2d24ec99bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:6e:b9:e6:23:16:2f:88:e8:96:a6:58:cc:
                    35:05:46:f5:9f:da:92:49:f6:aa:6c:b0:6f:80:81:
                    b8:aa:8f:3a:f4:37:c0:09:50:1e:7f:57:b8:22:3b:
                    ab:12:9b:d2:74:b3:e5:60:18:41:d3:78:5e:33:76:
                    e9:32:25:c1:c3:68:ac:bc:b9:10:68:69:e4:1c:68:
                    98:b3:7c:5e:d6:b9:3b:55:09:fa:11:70:4d:47:ee:
                    e8:2c:e5:e0:37:b1:33:2b:d0:3a:ee:fd:36:67:81:
                    8f:25:47:33:f3:33:3f:ad:11:7f:49:dd:ff:d5:98:
                    a3:04:90:ac:c6:b7:d2:ff:00:1a:ef:fa:f0:0c:13:
                    f1:bc:fc:32:50:0d:8d:08:af:60:5f:90:48:42:1a:
                    7c:ec:ab:b5:a8:c1:23:6e:98:8f:35:3d:ac:b9:43:
                    64:e3:c6:ca:7b:64:84:22:6a:12:2a:d4:83:5b:99:
                    63:8d:b8:00:62:86:f4:13:9e:4c:cd:1f:83:1e:de:
                    ae:7f:d5:2e:24:42:2e:87:3a:23:5b:a7:81:08:ee:
                    f0:7e:60:81:93:1f:f0:47:0b:78:3d:6f:54:92:21:
                    cf:20:c2:1b:25:b7:60:e3:cc:a7:6f:b9:e7:75:66:
                    f3:cc:e2:26:81:c2:2d:b9:19:df:6f:ce:38:20:db:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:31:58:F8:07:F6:E5:BC:17:64:5C:9D:24:60:AB:6A:C3:A7:9A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f3c42396-9313-3285-b28e-595dbc2007c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b1:b6:a5:02:8e:df:89:66:26:b4:79:cf:07:f3:18:ab:f1:
         9c:37:b2:7d:49:a9:8d:2f:3a:c4:56:d2:38:03:55:6a:43:f7:
         b4:7a:55:48:d9:b4:ba:bb:23:6b:f0:89:31:1e:09:d0:00:f8:
         d0:33:77:7f:16:bc:4c:2d:49:8d:33:12:f1:c5:ba:b2:0c:c6:
         85:c3:fb:ce:0d:67:61:30:d7:e4:88:35:3f:a5:4d:2d:0b:97:
         e0:f6:17:8f:83:21:dc:79:c6:1b:4f:07:9c:b8:0b:2e:95:ad:
         61:b6:4d:16:cd:89:67:1a:3a:2f:c4:3d:42:12:b7:33:b1:85:
         6a:48:3c:3b:3f:ed:30:db:8b:92:8b:cd:3a:d8:44:a8:9f:1c:
         e8:93:30:30:67:64:5f:b8:44:61:22:58:70:fb:3d:bd:b3:be:
         8c:58:3e:be:ae:65:43:59:76:4a:2d:c5:e1:f7:84:38:d4:85:
         f2:f8:30:93:6b:e4:4a:5a:fe:57:48:b3:0a:69:6c:b9:73:8d:
         a2:72:aa:ac:a7:4e:fb:62:f5:af:24:b1:12:8f:84:fc:10:b3:
         f2:56:33:aa:8c:78:0b:27:3b:51:14:3e:b8:b3:9a:4c:54:96:
         a7:88:72:37:42:d9:70:c1:d3:11:2b:ed:46:0e:ab:b3:4a:d2:
         66:31:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:10:46 2026 by rpki-client