Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/588fdbfa-ce75-35cd-9aca-bc3dace564ca.roa
File:                     588fdbfa-ce75-35cd-9aca-bc3dace564ca.roa (raw, json)
Hash identifier:          U6Qy7FeVUqawRmKUF+rq7DZH+lPvO/qVvQqxGHwjZLA=
Subject key identifier:   4D:5B:55:0F:A8:19:97:54:7D:D9:79:D9:FC:59:8D:E7:67:97:9B:34
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A4EDAEAAC68C2045F7F40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/588fdbfa-ce75-35cd-9aca-bc3dace564ca.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.27.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:4e:da:ea:ac:68:c2:04:5f:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=d6c8f44d-010b-42fb-be4f-2a44fb4206c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:62:c0:ab:10:a8:fe:3a:3b:5a:eb:f8:7b:
                    9a:6a:5c:45:32:ea:4b:67:64:98:4e:2d:6c:b9:65:
                    6c:fb:79:ca:a9:05:d6:84:6d:61:8f:65:93:fc:8a:
                    66:0f:84:8c:3e:d1:1f:bf:e8:ae:73:b8:fb:86:74:
                    3c:d4:72:6f:ce:28:40:de:57:c1:a9:d2:13:d5:da:
                    83:d5:e2:c6:02:7c:08:36:f1:5d:22:82:35:4e:86:
                    43:38:f4:8b:3c:d6:36:01:1e:dc:64:76:23:02:28:
                    10:51:83:30:3b:15:29:6e:3c:99:a7:24:09:3e:a6:
                    c4:3d:77:a5:e7:8f:92:17:48:b9:0e:99:8a:8f:41:
                    75:f4:a8:3f:4d:cd:71:cb:9d:37:43:fc:9f:34:c7:
                    ef:22:db:e1:ca:91:3b:a2:05:35:40:55:ff:1a:76:
                    f7:c7:cb:05:df:6e:47:da:07:0a:e6:7f:6d:80:7e:
                    fe:9f:89:a6:39:ef:f0:2e:89:4d:4a:1f:9f:66:6e:
                    11:12:37:28:9b:94:f0:e3:f9:21:e6:c3:dd:e7:b6:
                    56:d7:dd:fe:cd:0c:8a:37:98:46:2c:f8:35:5a:58:
                    b2:42:cc:26:2e:f9:95:55:cd:72:ac:c4:00:48:8b:
                    f2:6b:90:17:e6:3e:05:c4:98:02:cf:2c:7d:ee:64:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5B:55:0F:A8:19:97:54:7D:D9:79:D9:FC:59:8D:E7:67:97:9B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/588fdbfa-ce75-35cd-9aca-bc3dace564ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:55:a7:95:3f:1d:7c:1d:0b:7e:d5:9d:79:0c:d2:60:35:88:
         1a:2a:51:44:48:32:0e:65:62:b3:9d:1d:2a:e6:59:bb:d5:93:
         c9:9e:90:ba:83:87:43:d7:b2:fb:54:fb:9d:2c:87:f4:35:31:
         8e:04:16:8e:ca:85:4d:e8:59:01:fe:aa:c4:6d:c4:6f:3a:d3:
         47:f8:e2:a2:9e:c9:13:41:28:2c:88:0d:df:79:6d:e2:59:ec:
         b0:70:cd:d8:c0:2a:cf:a6:d4:72:19:8b:bd:2a:5c:2f:9f:0b:
         81:31:07:02:ac:41:2b:35:7b:1e:30:5c:e1:ed:a2:8e:e3:eb:
         1c:30:52:24:3d:87:10:44:61:8d:0b:11:9d:ef:b0:6c:bf:4b:
         2b:7a:9c:2f:39:9f:fb:8b:90:9d:c6:df:7f:60:5a:75:5f:77:
         00:ad:fe:6d:02:e6:06:7f:ae:46:2a:4b:f3:a7:32:79:7a:a0:
         be:97:5f:89:9b:74:76:ff:aa:09:5f:ab:57:a5:12:4a:00:e4:
         8b:87:f3:45:c5:f7:60:92:d7:61:25:8f:c9:2d:24:c5:01:ad:
         71:96:a8:e1:7e:8a:f0:73:c3:69:37:d8:94:04:02:41:46:7b:
         5f:1f:0d:6a:13:1a:ed:ab:da:c9:25:9b:25:3a:f8:b1:64:f6:
         52:3f:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:40:38 2026 by rpki-client