Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a7480c2-e2e1-30a3-beee-d8def4a6da33.roa
File:                     3a7480c2-e2e1-30a3-beee-d8def4a6da33.roa (raw, json)
Hash identifier:          u9/qrrza/hvisvWIm8nFN4F3aMUO8QYz5ekPN7AE1JI=
Subject key identifier:   26:21:F0:C9:50:8B:DA:27:B4:BA:76:D7:29:51:3B:98:F8:08:5F:10
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CA0674A53558700E07DC8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a7480c2-e2e1-30a3-beee-d8def4a6da33.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.24.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:a0:67:4a:53:55:87:00:e0:7d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a9ff10b1-8c2e-4654-bfa6-745a1ba39f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:51:3b:f2:c3:39:0f:a6:f8:7d:0a:86:b0:
                    c9:2c:06:3f:a1:de:4b:db:04:98:11:ff:71:c0:12:
                    2a:31:8c:5f:37:c0:5d:8a:33:8e:ba:9c:cc:81:4e:
                    ce:cf:64:1e:84:66:07:cb:3a:2c:2d:c5:10:ec:a6:
                    0b:3f:6f:e7:35:28:43:0d:d9:fd:5d:92:d5:a4:a2:
                    78:90:ef:2d:f7:f5:fd:0a:52:81:e1:8e:ee:8c:c4:
                    f3:aa:5c:67:61:e0:73:d3:d7:5a:b5:21:b5:44:f0:
                    86:41:08:7e:ce:b1:22:9f:f5:6d:01:2f:32:fb:8b:
                    4d:66:d0:49:05:e9:89:44:8f:9e:0b:37:64:3b:a9:
                    e1:2f:a4:21:db:ad:00:12:1c:38:cf:3f:15:10:8b:
                    52:8b:eb:4f:82:63:bf:d6:a6:9b:63:46:70:f2:a6:
                    1e:05:5a:dc:17:41:75:7b:b8:70:e5:56:b6:36:3e:
                    f0:b8:ed:96:a5:9c:a3:e7:18:34:5e:bc:c7:97:f6:
                    98:af:46:ba:0d:e4:a4:dc:3f:88:b4:ef:a7:fd:99:
                    ab:97:35:ce:af:f8:16:f9:0a:18:44:bb:b4:de:08:
                    38:15:04:f1:ad:5f:fd:b4:05:83:db:3b:50:4c:af:
                    6e:38:a7:fc:cc:97:55:31:06:75:85:a9:a0:84:02:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:21:F0:C9:50:8B:DA:27:B4:BA:76:D7:29:51:3B:98:F8:08:5F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a7480c2-e2e1-30a3-beee-d8def4a6da33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:6c:97:14:e3:33:a6:f0:84:69:6e:94:3a:c4:d7:c8:64:
         e1:34:87:cc:8f:51:b0:1f:12:2f:d4:8c:ec:92:ed:d9:05:66:
         4b:54:36:ec:80:80:3e:43:65:1f:7f:20:59:b1:4e:57:4b:43:
         e2:e7:c7:59:66:23:f7:ed:54:dc:bf:a7:44:b2:02:61:c1:4d:
         36:a2:be:36:f4:7f:2b:09:a2:90:32:96:bc:76:24:25:ab:ef:
         6a:c5:c0:d3:31:34:47:f8:9a:9b:39:28:46:96:08:0d:71:89:
         95:e9:f3:93:68:a4:aa:26:9b:48:42:7e:72:b7:35:cd:d7:f6:
         12:dc:15:0a:a9:be:1f:85:07:3c:56:94:8d:60:b6:55:d0:99:
         3a:8f:57:73:1d:67:b7:4e:99:22:4e:0b:6b:1f:0c:6b:07:6a:
         ef:f3:e0:5e:89:76:6f:78:58:b8:e1:4d:31:30:8f:57:d6:ff:
         d5:e2:3c:36:e3:30:f0:57:4e:6c:26:e7:34:c3:5f:0c:ab:cf:
         3f:8d:aa:67:70:6a:80:ec:df:3c:6f:0c:cd:0f:05:9d:8f:68:
         a2:8c:3e:d7:0c:44:24:fb:5a:dc:ea:4c:5c:fb:07:6f:1c:99:
         ce:72:48:64:4d:ae:07:12:70:0c:b5:ab:c1:1d:df:44:53:69:
         3e:5b:c1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:20 2026 by rpki-client