Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15f3eed0-47a7-3b5d-921a-e9f9594bbf0c.roa
File:                     15f3eed0-47a7-3b5d-921a-e9f9594bbf0c.roa (raw, json)
Hash identifier:          DxQsUO8ssO6/sOgtpeWL5rUnfMM6T1RohFMpmFMApQI=
Subject key identifier:   E9:6C:00:8B:B6:B7:C3:58:5A:D9:81:E7:A9:D3:A0:53:0D:79:85:8D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D0BDCFD1D459A6C7F748E7A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15f3eed0-47a7-3b5d-921a-e9f9594bbf0c.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.19.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dc:fd:1d:45:9a:6c:7f:74:8e:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=18945753-1891-42d9-9cdd-4d56ceb5ddc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:7e:3b:73:78:f9:de:91:52:4a:7b:f9:a9:
                    d8:44:45:0c:e9:74:88:c4:2b:50:11:c3:2e:eb:93:
                    3d:d1:62:30:8f:7b:18:48:f2:8b:8e:e9:be:17:a1:
                    fe:d9:5e:e2:c1:10:a3:04:59:30:c6:9e:38:81:c6:
                    a0:7c:e8:da:f6:31:b5:d0:25:17:ee:c2:cf:ad:35:
                    10:5d:68:df:05:35:9f:15:54:47:1c:08:00:14:88:
                    ad:3f:32:59:7d:50:ca:e5:62:03:03:b8:8a:1d:fa:
                    0c:e5:52:9f:ab:10:9d:76:92:9d:d3:74:d2:9a:aa:
                    52:16:da:a1:95:6b:3a:f9:3e:5a:54:6e:29:51:03:
                    7a:ac:fb:eb:6c:b1:a1:2c:cb:9c:93:6e:a2:48:49:
                    6e:e5:2e:bf:44:68:dc:ee:c4:5d:fe:06:20:52:0c:
                    f2:59:0b:24:65:9d:04:eb:d7:84:0f:51:af:53:30:
                    90:dc:f9:4f:aa:f2:e2:a7:5a:1f:29:a2:d3:6e:f9:
                    0b:61:dd:6b:0d:b8:45:89:0c:41:a1:fc:a9:48:76:
                    2c:87:86:85:76:59:aa:fb:f7:f9:e0:fc:ea:35:17:
                    51:b9:98:27:60:d1:9f:f6:69:30:ed:5e:9a:b7:95:
                    b4:ff:f6:88:4f:74:b3:12:4a:08:57:bb:62:98:7b:
                    ce:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6C:00:8B:B6:B7:C3:58:5A:D9:81:E7:A9:D3:A0:53:0D:79:85:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15f3eed0-47a7-3b5d-921a-e9f9594bbf0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:f2:4b:3c:88:00:26:55:ee:da:e6:63:10:36:ad:fb:8a:
         15:49:90:76:28:3e:29:ef:c9:ff:95:c4:9f:38:56:6c:f0:3a:
         e0:50:07:fa:b9:63:9d:ee:88:c9:15:0c:97:8e:6f:c8:51:60:
         a8:c5:cf:ae:1f:3e:da:25:6c:0b:6c:5a:d2:16:02:58:ac:46:
         65:e7:5a:5d:4d:28:84:60:2b:e3:f6:10:bc:1e:cb:0e:2b:58:
         f4:f2:bf:ba:52:82:4b:77:0c:b4:e8:e2:f6:11:c0:47:1e:82:
         f2:9b:f6:91:1e:57:b1:13:aa:15:4c:4e:74:8a:ef:fa:f7:8d:
         5c:b9:a2:0e:f1:5f:e6:c5:7c:42:04:04:47:c9:9c:76:11:29:
         8c:f2:c0:72:0f:00:9c:66:3f:bd:b0:f2:26:e5:b5:d9:72:1f:
         83:76:f7:fb:38:88:01:b3:b5:b9:e0:fd:13:1f:f8:b5:f2:95:
         f2:33:f0:46:3f:a0:34:20:4e:80:6f:03:8a:a0:b4:80:6e:a3:
         ea:40:c9:ee:1b:e8:f3:fa:2d:c4:56:13:8f:f4:29:0c:3f:28:
         fe:f0:41:f8:a1:e3:32:70:ea:68:c3:5b:b6:f8:64:e4:4d:73:
         78:bf:05:03:a3:d3:22:0c:d2:e4:20:48:66:27:0d:1f:2b:5c:
         c1:58:88:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:42:10 2026 by rpki-client