Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/250aa80d-f64e-3799-b3fc-121af819a450.roa
File:                     250aa80d-f64e-3799-b3fc-121af819a450.roa (raw, json)
Hash identifier:          3fKnsspiih1mLIu8Kdfe+NnEbKjUV7cWRNHDPb+LF6A=
Subject key identifier:   0A:DD:9C:14:02:5E:8D:53:06:18:51:C9:7C:04:8B:0D:99:2D:34:E9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EAA519C894069B7CAF94993B0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/250aa80d-f64e-3799-b3fc-121af819a450.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.18.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:9c:89:40:69:b7:ca:f9:49:93:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=c15c0a1e-6cb0-4fda-8e63-396aa1fe9ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:7e:86:23:7f:bb:00:b0:1b:05:96:9f:94:
                    71:e6:f5:e7:7f:7c:70:2e:89:20:60:1b:31:fc:72:
                    e4:1e:23:bb:b7:d5:b9:13:14:c7:d7:a0:ee:09:11:
                    03:54:ca:5c:ff:95:1f:96:b0:0d:8f:99:b7:81:92:
                    0b:92:86:6a:d9:77:c4:6a:b5:56:89:15:49:ab:fd:
                    4e:fb:37:9d:1f:bc:09:a7:98:a5:0b:80:aa:f3:bb:
                    0a:38:dc:41:4a:1c:69:5c:d2:40:d7:51:76:ed:db:
                    e8:e1:21:b0:38:be:0a:de:a7:51:19:ef:44:9e:22:
                    64:18:f3:b1:df:53:14:05:e4:68:e7:c4:be:87:e6:
                    d6:1b:b6:c1:03:cd:4d:8b:a5:a8:a4:1c:81:d6:b6:
                    a7:71:b2:76:4e:fe:ee:60:53:af:38:0b:a2:87:45:
                    c3:bb:6c:21:e6:16:b0:26:91:96:ad:d9:02:a0:98:
                    e2:42:71:1f:be:f6:69:5b:e9:68:fb:4c:74:1a:36:
                    09:70:0d:8f:c7:c9:45:01:00:f4:4a:1c:0d:45:28:
                    33:cd:fa:3c:a4:9f:c9:7c:eb:f1:9f:da:1e:4a:9a:
                    68:60:2f:6b:0d:ed:b8:9f:58:5c:ba:6e:11:9b:bb:
                    f3:6f:d0:12:ee:13:e3:41:52:dd:c7:33:03:3a:7a:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DD:9C:14:02:5E:8D:53:06:18:51:C9:7C:04:8B:0D:99:2D:34:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/250aa80d-f64e-3799-b3fc-121af819a450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:0e:bd:fb:8e:f2:dc:57:bb:b9:a4:02:b7:41:1f:1b:c1:6f:
         83:54:d0:49:10:95:78:cb:a2:e2:82:45:15:68:bf:6b:54:31:
         6f:e1:8f:8f:bb:2e:8d:56:e0:03:bc:f5:37:2a:28:c7:a0:45:
         1f:d2:ed:78:b2:b5:9b:9b:50:6d:f7:1b:dd:1f:a9:1d:8b:62:
         2a:6e:b8:b4:2b:af:8c:57:f9:9b:a4:92:4a:0d:6f:3f:be:8d:
         5e:ff:5b:66:ff:a3:b1:bb:9a:b6:7c:e2:ba:0d:e9:50:b7:d4:
         a4:4d:35:21:5f:20:7b:ed:29:1b:ce:28:10:d3:e0:89:55:2c:
         bf:6e:22:cf:62:5f:fd:66:e9:29:c2:15:ff:8b:ab:0c:ca:7f:
         15:64:21:21:cd:76:a0:02:ce:b7:49:33:ca:2b:d3:cd:fd:da:
         1b:bc:b6:8c:54:e6:7e:d3:c3:68:64:a0:32:77:19:21:da:83:
         e9:77:33:d4:b0:91:39:0a:f7:78:c8:ad:f8:29:ff:a4:8e:85:
         f3:cf:b7:2d:57:58:4f:2f:2b:49:25:5a:1e:a1:d1:4b:15:4f:
         e4:43:77:3b:ca:1f:08:a2:57:65:c6:6a:80:9e:ff:0d:2f:0d:
         6b:6e:62:2e:0c:00:1e:14:e0:95:aa:22:dc:ef:4a:bc:83:47:
         ab:90:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:29:56 2026 by rpki-client