Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36d6c13a-506f-35f4-bd0f-1dc00c1a5a87.roa
File:                     36d6c13a-506f-35f4-bd0f-1dc00c1a5a87.roa (raw, json)
Hash identifier:          JCSe07DuYeZcqqOhCqy0/hW2SrYNqggtXgV2/YGr3jk=
Subject key identifier:   C2:4F:CA:DA:D7:49:F7:64:2B:5A:6F:CA:C2:9C:72:01:14:D7:86:E9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D20AF7CC3C1CCE3431AD17180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36d6c13a-506f-35f4-bd0f-1dc00c1a5a87.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.16.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:7c:c3:c1:cc:e3:43:1a:d1:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=35ea51fc-2563-444f-9c27-4aa53b4e6c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:f0:1a:54:45:8b:a0:b2:df:88:1d:34:f8:
                    dc:60:03:6d:aa:6a:7f:bd:2c:ac:de:ca:38:6f:18:
                    39:e3:85:aa:c1:56:0a:16:5f:1c:23:c9:0e:7b:71:
                    8b:23:69:ee:8f:3b:ec:c6:da:4d:a3:60:59:99:81:
                    13:a5:52:e3:29:ab:30:55:ec:0b:3c:0c:2f:a5:de:
                    a0:ed:df:c6:43:64:ad:aa:38:36:99:12:23:e9:2e:
                    ae:9e:38:91:72:3c:06:84:67:d8:e0:8c:a2:9d:54:
                    0f:0d:15:04:e9:71:49:72:a1:6c:fd:8c:2d:4d:db:
                    ac:45:a3:66:d1:da:fa:5b:54:ae:60:19:1d:0c:c3:
                    8a:1d:29:fd:89:10:21:c7:ef:6d:bd:b6:57:36:fe:
                    f0:b8:58:57:48:f4:2c:a6:1c:7e:24:17:a5:04:bf:
                    7f:c2:2e:57:94:87:78:f3:ba:ce:36:b0:75:4f:1e:
                    7d:78:c0:06:31:2f:f5:ee:c1:d0:78:38:bb:92:aa:
                    1f:08:de:56:f2:17:c2:85:1e:f2:52:79:65:d8:f5:
                    fe:d7:7d:a4:ec:9c:97:bb:2d:97:70:05:78:4a:f0:
                    ed:80:69:72:37:b0:bf:a9:66:aa:ba:d5:32:0e:6a:
                    e3:31:7d:30:ae:e3:82:eb:cb:39:f8:1e:4d:ad:23:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4F:CA:DA:D7:49:F7:64:2B:5A:6F:CA:C2:9C:72:01:14:D7:86:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36d6c13a-506f-35f4-bd0f-1dc00c1a5a87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:44:87:9f:77:f5:5b:75:99:a9:8d:0a:5c:ac:64:7d:d4:90:
         70:24:b6:30:aa:55:a1:1d:ad:de:f3:07:b6:57:90:88:3d:82:
         5c:ec:9d:10:11:25:0b:be:67:f3:04:da:e6:c6:7c:a7:d5:9e:
         54:4b:1a:01:e1:ae:4f:6d:91:3e:3f:b9:c9:27:0b:5e:57:11:
         cd:af:a0:11:e6:12:0b:9b:46:25:bc:3a:31:da:c1:1a:00:8d:
         45:7c:0c:75:3f:c1:76:ae:0b:07:8e:03:ac:fc:7f:e7:72:ce:
         05:07:6e:26:d9:9a:8c:46:ed:2c:4f:af:e0:3d:88:17:53:e4:
         59:72:8e:b2:d9:98:3d:a0:df:2a:f6:80:15:06:c5:77:1c:75:
         63:16:5a:0b:6e:49:29:91:4f:f0:0a:55:f9:ba:75:f1:41:66:
         b9:47:ea:a0:e9:0a:b4:e1:12:06:5a:dc:82:0b:e5:51:32:e3:
         1e:34:a8:6c:86:90:d7:a3:67:a4:ed:53:8f:2d:bb:a6:26:6d:
         2a:69:6c:c0:9c:cd:bb:72:5e:97:bf:f4:84:dc:52:f0:d3:b3:
         cf:7a:50:4c:93:15:0e:1f:02:d5:ae:af:23:82:fd:fb:30:3a:
         d4:4b:8f:11:ce:69:f3:7a:a8:cc:ff:83:8f:38:70:19:18:97:
         27:26:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:44:42 2026 by rpki-client