Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/074258e2-e43c-3767-aae5-1182a0f7de4d.roa
File:                     074258e2-e43c-3767-aae5-1182a0f7de4d.roa (raw, json)
Hash identifier:          DkkfgByj6gi4dWT8zkMH7MWQ58hCTP4TMwcoJojv8lM=
Subject key identifier:   53:23:64:E6:93:D3:72:68:C5:D3:2A:20:C4:68:9C:1B:76:28:80:5D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A02C1F5277605EA5DB0D0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/074258e2-e43c-3767-aae5-1182a0f7de4d.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.23.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:02:c1:f5:27:76:05:ea:5d:b0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=4ffc6cad-1531-426d-8915-4261252bd859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:9f:96:3c:96:a0:8e:d7:1d:4d:26:4d:ab:
                    91:c9:76:d4:84:f3:28:31:42:4f:07:95:13:5a:b1:
                    d6:84:39:f7:43:1f:a7:bc:13:14:4e:c2:c7:ab:86:
                    ec:f4:a3:65:11:ff:35:29:e1:28:e5:ed:64:db:a8:
                    e1:4d:ed:4f:b6:e4:e3:7c:08:da:01:a5:b7:34:75:
                    01:50:7e:70:71:98:23:36:6a:c6:14:f2:9a:13:4a:
                    c8:0f:11:c2:dc:07:67:ec:9e:c8:dc:1d:14:4d:3d:
                    cc:51:f5:52:17:09:fc:3c:30:3c:14:98:fb:4a:51:
                    c5:89:f4:94:cb:44:e0:25:a2:10:bd:9d:e7:2c:6d:
                    42:04:26:68:5f:af:01:5d:d7:26:34:b7:a8:db:38:
                    6c:f5:f4:d4:fc:6b:9f:42:1b:73:50:39:41:ca:ce:
                    94:30:0a:b8:00:af:cd:4c:ac:3a:95:9b:20:77:ef:
                    a0:9c:ab:0c:6c:96:0f:85:e6:a3:34:c5:3e:c3:17:
                    d1:21:79:aa:75:b8:59:ef:fb:c3:0a:92:15:19:50:
                    bf:30:7f:ee:f4:96:93:35:cf:36:cc:1b:83:64:61:
                    66:76:b9:32:e5:fe:41:06:e5:f1:09:e8:6c:d2:28:
                    75:3f:15:0a:73:8f:39:87:d2:fc:bc:7c:c7:e5:de:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:23:64:E6:93:D3:72:68:C5:D3:2A:20:C4:68:9C:1B:76:28:80:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/074258e2-e43c-3767-aae5-1182a0f7de4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0d:eb:c0:61:34:2e:26:58:b4:6e:d5:3e:f9:e3:c1:be:06:
         49:ee:91:3d:a5:3c:4d:a3:b9:54:16:cd:24:17:7c:cd:a8:6d:
         19:4f:90:16:4d:27:78:f3:25:e2:9c:94:c9:e2:17:1c:68:1d:
         3c:38:93:1d:45:2a:40:70:16:43:a9:a0:2f:6e:07:52:af:ad:
         8a:e6:9a:0c:07:2c:33:97:f7:35:9d:a4:99:f2:14:64:cf:1d:
         ea:d1:ff:6e:89:50:e2:5b:d9:ab:33:95:a0:17:e8:20:3d:84:
         79:3c:c3:23:e0:ec:d2:90:cd:87:fb:34:d8:bf:d4:45:5d:8e:
         8c:2d:21:17:78:82:ad:3d:42:0c:ab:c1:07:f5:95:dd:f6:98:
         6e:25:be:8b:5e:64:8d:13:75:3d:a3:29:04:40:69:7f:1b:ca:
         2f:fd:3b:b4:32:37:fe:34:01:9b:9d:ed:b4:e1:cb:af:0e:69:
         bd:7e:64:c4:d0:54:69:bc:4a:3a:be:54:99:62:36:9a:df:3f:
         4a:23:87:fb:e2:90:80:5f:08:fc:4a:8b:e6:91:69:ff:ee:ee:
         01:ec:40:5e:a7:f8:a6:77:74:8a:37:6c:8c:e6:88:dd:2c:ef:
         6d:ed:c2:ab:da:34:8f:4e:e7:a1:ca:23:66:e8:78:0f:43:be:
         ec:27:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:03:18 2026 by rpki-client