Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08844f1d-cfdb-3621-9514-359f44134294.roa
File:                     08844f1d-cfdb-3621-9514-359f44134294.roa (raw, json)
Hash identifier:          BFH0z+5OOWOZ4yci8k0pX/tnYiL5Y7gUzWZnxWHLFSw=
Subject key identifier:   B1:D1:B3:71:40:2C:85:6A:8C:D2:3E:D3:DB:14:DF:F9:67:43:F6:83
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A3A44A3593782D1C55580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08844f1d-cfdb-3621-9514-359f44134294.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.29.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:3a:44:a3:59:37:82:d1:c5:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=6b074601-9208-45d6-ab55-36256028c480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b0:68:47:5e:6c:ea:38:3a:b5:c0:a1:89:80:
                    2c:db:43:29:80:89:bd:f1:38:15:f4:47:ae:6f:ec:
                    5a:b5:54:e2:09:42:f6:0c:5c:af:3b:d1:f5:30:05:
                    df:34:f6:16:1e:52:0c:28:2c:e7:9b:37:73:38:37:
                    0e:9e:e5:37:6a:6c:2a:d7:f8:41:b9:09:ba:7d:00:
                    3d:20:e8:9b:07:30:6c:39:0d:fb:9c:34:40:38:64:
                    a1:61:7c:b1:37:43:e7:43:29:25:dd:2e:d6:30:9d:
                    c8:c1:0d:a3:48:d4:50:01:e8:e8:1e:f1:81:af:42:
                    b7:e4:08:c8:56:6d:58:06:3a:d5:04:cc:ef:1e:f2:
                    3d:f4:da:d7:de:aa:2f:0c:ed:88:6e:2c:58:a4:0c:
                    7a:75:df:2c:fc:62:bb:f3:ae:1e:2f:de:cf:f1:5f:
                    34:dd:38:26:f1:bc:8c:00:bc:2d:a6:31:d9:e9:95:
                    6b:5f:d2:3c:ab:df:7d:85:cd:a0:00:a6:3f:29:12:
                    64:65:0f:be:82:59:98:ca:14:ed:c2:45:8d:b3:ab:
                    87:9d:08:d2:6b:a2:6f:c1:c1:ae:71:81:b8:f7:64:
                    6b:43:a2:07:b1:75:62:b6:68:42:8a:d8:c9:b1:30:
                    1f:a9:48:b7:e5:03:65:f4:2f:b0:35:a4:b8:ff:37:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D1:B3:71:40:2C:85:6A:8C:D2:3E:D3:DB:14:DF:F9:67:43:F6:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08844f1d-cfdb-3621-9514-359f44134294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:bb:33:91:29:f8:03:d8:a1:fc:15:c8:04:cb:13:d1:a3:d5:
         a8:c4:65:a7:c4:70:fd:e0:7d:e9:a1:6c:71:5f:ee:80:52:df:
         48:3a:a8:a9:78:6f:ad:ed:d4:5d:bb:c5:9b:9b:2d:fd:da:6a:
         4b:af:a0:47:ad:7e:a3:4d:be:8b:5f:dc:60:e0:2b:fd:75:2e:
         2c:32:66:34:0c:25:f2:88:34:5f:6a:68:51:e5:c2:ea:ab:b1:
         eb:9d:52:81:bc:7b:9e:9a:6e:85:9a:55:51:f0:67:c6:67:83:
         26:32:60:00:61:ee:41:16:de:c5:38:57:54:c1:0d:4b:cf:15:
         49:56:bb:f7:e1:b5:4d:b8:ea:71:9b:de:53:fb:89:d4:cb:11:
         ed:68:d8:00:87:75:90:d3:d3:a5:8f:d5:e3:a1:aa:5a:97:d3:
         7a:63:ed:ba:5a:2a:99:cf:bb:9d:70:5c:00:95:0b:3a:87:dd:
         ab:66:b9:2f:43:dd:8d:e9:f4:de:61:17:74:ee:70:65:65:31:
         78:05:9f:d4:e7:fd:be:e3:4a:83:27:df:04:ed:dc:98:de:d9:
         73:cd:7f:3e:2f:fd:51:1c:a6:48:ca:1c:01:e6:8f:8c:71:83:
         37:99:f9:c5:2c:a5:b9:62:a0:72:ac:6e:95:3c:5b:83:cd:ea:
         ea:22:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:45:33 2026 by rpki-client