Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f7646bc-6592-3cd5-9347-184e8785764e.roa
File:                     4f7646bc-6592-3cd5-9347-184e8785764e.roa (raw, json)
Hash identifier:          fk4A8KDhq3Ubiu0wsw55RBzHR3FUaEdxbmg5P75hzPY=
Subject key identifier:   52:AD:02:65:94:7A:BE:D0:A3:07:EE:36:CC:11:62:C2:34:51:3E:09
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A255F2B0D3C95165FC680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f7646bc-6592-3cd5-9347-184e8785764e.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.29.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:25:5f:2b:0d:3c:95:16:5f:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=ed56a62f-5ae8-4e66-a926-7c66692f365c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:3b:3f:d7:83:82:f1:d2:c0:46:22:29:83:
                    ff:ea:8a:a4:e2:21:bb:c5:04:ea:02:2f:49:74:ea:
                    a1:ad:ca:10:21:18:47:21:36:ea:a0:29:c7:74:df:
                    56:71:61:d8:4c:50:0c:b7:c2:be:71:db:6d:3c:97:
                    df:69:b4:0b:7d:b7:1c:33:d6:e7:7c:c1:2f:6a:6e:
                    26:31:8b:21:89:60:bd:82:ea:98:ee:45:e3:8e:83:
                    cb:fd:f6:93:c8:d2:c8:6a:d4:b5:2b:23:49:50:28:
                    65:9f:de:5b:42:9d:af:f8:53:51:c0:0f:92:3e:25:
                    9e:d3:6c:32:32:97:1a:5c:4c:c9:7a:ed:ba:5e:6f:
                    7a:76:cf:fa:bf:86:82:cc:5c:f9:89:45:ac:18:6d:
                    85:5c:67:03:ed:69:40:d1:c7:8f:f9:6d:2a:ca:3b:
                    6d:20:b9:7e:31:6e:b3:25:67:72:bf:8a:ff:54:d0:
                    ee:9e:56:36:1b:54:0e:06:07:8e:dd:5f:cb:04:26:
                    7a:03:90:59:d2:5b:e5:3b:3b:36:7f:3a:d5:75:84:
                    58:b9:e0:3b:82:fd:34:79:05:54:91:5e:39:d4:5d:
                    de:0c:11:6c:77:2c:79:eb:15:a6:3f:35:03:68:64:
                    81:72:87:3b:8a:c4:f7:6d:01:69:c0:0a:ff:6f:d8:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AD:02:65:94:7A:BE:D0:A3:07:EE:36:CC:11:62:C2:34:51:3E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f7646bc-6592-3cd5-9347-184e8785764e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:19:17:6b:95:9d:28:12:72:7c:13:2b:04:e6:a2:e8:4c:68:
         ca:15:a5:d3:47:60:cc:f9:32:65:92:ba:5e:b3:08:c1:1d:4d:
         37:0a:c8:1e:c5:8a:f7:0e:32:f6:e7:74:9e:21:46:22:25:85:
         c0:a6:4b:3c:f8:5e:c7:81:dd:c1:9a:e3:81:2a:e9:75:a0:94:
         bf:b7:75:b9:65:02:90:4d:fa:eb:4c:7c:08:5d:5f:09:4f:34:
         b7:57:e5:b8:74:03:67:23:ae:38:35:8b:a3:52:9c:03:f2:a9:
         f3:c5:0e:bd:20:7b:43:25:dd:be:2b:20:4c:36:9c:3c:00:e5:
         c1:93:c0:35:0f:d1:91:d4:bc:9b:cf:ca:25:93:bb:f5:45:6e:
         21:96:5b:d0:0b:0d:01:a2:37:25:e2:5f:be:7e:1a:2c:5f:65:
         48:eb:00:bf:34:a4:a1:b6:c5:e4:9a:9b:a8:85:99:82:a0:91:
         c1:53:c0:b8:04:76:97:c3:4f:ae:e8:19:a9:3d:27:cd:a8:80:
         d4:66:9a:69:7e:f5:0a:ae:24:d7:44:de:ae:cb:d4:d9:9b:a2:
         8b:41:f7:76:37:83:e3:d9:2d:68:8d:fa:cc:5a:96:8d:4b:d3:
         85:e9:67:3e:9b:20:30:4f:71:8b:70:36:b5:17:a9:0a:67:86:
         16:22:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:07:32 2026 by rpki-client