Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa
File:                     3c427830-987a-3e1f-b4e3-0546d0f346af.roa (raw, json)
Hash identifier:          vYyHz0+uYBfzG9ANncV1KGVhUT63Jl/yGVZGRn1MZD8=
Subject key identifier:   7D:E7:52:AC:32:36:78:AF:C9:51:9E:0A:16:F0:FF:B0:42:3A:A4:4E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A4710002A6933643E1080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.23.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:47:10:00:2a:69:33:64:3e:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=579589e6-11df-4a2f-a327-87c8be2b372a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c5:1c:62:cc:fd:08:56:f8:1d:3e:fb:0b:a5:
                    ee:4d:9b:2b:31:53:d4:65:62:06:d4:c9:bd:d2:56:
                    44:c1:77:bc:b1:c8:1a:3f:cd:d6:fc:8f:b0:73:84:
                    58:2f:69:9b:fa:8f:01:84:c5:c2:ce:b0:05:94:d3:
                    0f:b3:0a:e1:fd:ab:9b:10:d1:20:54:3c:36:24:b4:
                    8b:6e:be:23:70:6c:f0:e2:de:70:a2:eb:b7:62:a7:
                    0f:24:08:99:9d:16:59:2d:35:0d:98:61:58:b6:f1:
                    d5:a5:b5:66:1e:58:3c:ab:dc:ba:b8:ad:d4:2d:18:
                    d2:7a:81:4d:69:85:66:b8:17:8a:12:18:1f:2e:6e:
                    b6:0e:7c:b6:9f:4d:19:8f:42:54:8a:87:96:16:89:
                    a4:7d:44:d6:54:64:f1:f8:6f:56:ba:01:00:90:17:
                    66:f8:61:0a:e7:96:3d:77:4f:83:7b:04:77:1a:1d:
                    d6:db:12:75:85:e0:69:05:53:c0:38:9d:09:4b:8d:
                    7b:11:31:92:cf:f6:6e:3b:11:43:06:14:8d:74:5f:
                    b5:8d:8d:95:25:0c:48:27:94:66:a0:c9:28:50:b0:
                    9e:6c:3e:e4:c3:0d:2b:1a:60:6e:58:f5:f8:c2:2c:
                    19:e6:62:cd:d9:47:e1:ca:2f:cb:0f:f8:ae:de:a5:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E7:52:AC:32:36:78:AF:C9:51:9E:0A:16:F0:FF:B0:42:3A:A4:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c427830-987a-3e1f-b4e3-0546d0f346af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:54:7a:e7:a0:cd:98:cf:be:fb:54:64:5c:4b:58:ef:11:5a:
         8a:f3:0b:58:0b:d2:11:c7:c1:33:4f:a0:b4:29:a4:65:3c:b8:
         cb:ee:a5:94:e6:5d:54:16:f0:2e:d2:61:e1:3d:7c:31:bf:45:
         21:f2:b4:3d:7f:2a:65:f6:66:fd:60:40:48:e5:4b:d6:6e:a3:
         94:27:f3:23:af:1c:af:e5:94:6b:b1:ee:a5:41:80:84:3e:56:
         c5:83:32:37:96:29:ba:55:46:11:d8:8f:9b:8f:7b:89:e7:a6:
         02:95:16:af:c0:74:bf:f7:2b:3c:95:eb:21:58:79:12:e4:f4:
         ee:25:ed:6b:7b:66:de:0b:df:19:db:5f:79:90:34:4c:c3:37:
         6e:ec:eb:75:cb:f0:2c:28:10:d5:86:07:97:f5:a1:3c:d8:49:
         bd:06:f1:9c:8a:28:13:9e:9e:93:5f:3a:31:09:0c:96:6d:5e:
         7d:21:b5:36:a5:6a:28:c0:11:73:6f:11:4d:59:df:a9:7d:27:
         23:c2:54:39:17:b7:41:9f:5e:69:6e:db:a2:b0:6c:69:13:d4:
         54:4f:10:3d:8a:cb:2d:d4:2e:e3:e1:db:38:15:74:ed:5a:e9:
         3f:ef:0d:85:c5:67:03:cd:05:96:1f:61:00:17:65:65:74:7d:
         d3:b1:50:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:44:42 2026 by rpki-client