Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c43c01c-6469-3a83-9e10-dab70df62829.roa
File:                     6c43c01c-6469-3a83-9e10-dab70df62829.roa (raw, json)
Hash identifier:          dLtbzqUZAw8diZrSOkSeMaHTUxK7ikm5oWhTZZHAAZg=
Subject key identifier:   B6:99:C2:2A:22:3B:0E:C5:F0:B9:DE:8A:13:A4:43:9E:76:60:4D:1B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79784E4D9185B77EC9A3D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c43c01c-6469-3a83-9e10-dab70df62829.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.24.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:84:e4:d9:18:5b:77:ec:9a:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aa0a06c7-6413-4a4f-bc5d-8111117431ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:40:b4:b5:f4:f3:72:2c:0a:87:1e:ca:0b:
                    4b:0c:75:b7:1b:34:fd:b6:bc:18:e5:64:4e:62:47:
                    36:2a:93:90:6c:35:3a:19:41:8e:80:83:f0:20:67:
                    ea:24:ad:8b:fc:ff:92:55:59:4e:21:4d:85:a8:71:
                    05:0d:3c:4d:b3:12:76:5e:19:1b:33:64:8d:3f:b8:
                    43:ba:61:b5:d6:0e:dd:6b:69:b2:97:b7:e4:03:3c:
                    4c:25:49:f4:ee:72:7d:e6:34:61:3d:1e:da:37:42:
                    bb:c6:f2:9d:be:2f:dc:65:7d:88:50:c4:6d:73:63:
                    96:8d:57:1a:fc:1d:b9:cc:10:e1:a3:ab:0f:67:b4:
                    f3:fd:c2:e8:c7:d4:5b:54:cb:26:8f:0a:4f:c3:f4:
                    52:65:e0:6e:9c:21:de:ed:eb:e4:95:07:04:6b:71:
                    65:1a:4f:4f:93:57:12:c3:a9:7d:c9:ff:5e:f8:bc:
                    a8:44:3c:7b:04:56:6e:32:e1:42:d0:36:fc:3b:ab:
                    1d:fc:40:0c:26:8c:3c:5d:bb:b7:00:70:3b:60:6e:
                    01:d6:55:4b:37:e8:79:de:f6:ab:4b:0b:6d:2a:ea:
                    8a:98:d8:77:75:14:7f:44:0d:a5:b3:89:2d:42:c8:
                    c7:0e:c0:5f:d1:58:77:a0:6b:c6:61:32:57:b7:51:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:99:C2:2A:22:3B:0E:C5:F0:B9:DE:8A:13:A4:43:9E:76:60:4D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c43c01c-6469-3a83-9e10-dab70df62829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:63:31:2a:e2:9b:fa:6e:e8:c4:8d:0a:ff:47:bb:09:2a:
         1b:86:9f:ed:df:d7:ff:ff:e4:da:ef:73:ad:a7:9a:40:71:3a:
         3b:4a:87:ad:78:bc:06:04:ab:67:f8:f9:47:3e:69:33:a1:83:
         9b:5e:73:7a:ae:ca:77:7e:5c:4b:00:25:4d:b7:d8:69:70:06:
         df:75:34:36:22:d6:d7:41:71:43:b5:9b:16:e7:3c:8e:80:af:
         10:0c:77:bf:74:cd:a9:61:71:b1:5f:d8:28:a5:63:5a:94:98:
         81:6b:0d:a2:99:e0:ce:65:0e:a0:8a:35:77:4c:39:e1:2c:1f:
         bd:b3:6f:6e:16:74:e5:ef:54:5a:1f:41:ca:0e:95:5a:50:02:
         56:0f:77:a2:d6:ef:cf:d3:e1:6f:8a:d4:8f:7c:cb:07:48:d4:
         be:8a:a8:57:4e:18:98:1d:40:22:a5:20:62:d0:c2:0d:92:87:
         7c:ec:52:df:a1:fe:63:4a:c7:95:cf:2d:27:88:ae:5d:d4:c0:
         01:71:5f:0b:21:34:ce:9d:51:17:e8:69:4f:b3:ca:10:6b:55:
         c1:8b:10:b4:9f:92:58:95:d1:3b:5b:46:59:db:fb:73:16:f6:
         96:f9:be:06:68:b9:21:fc:0a:5f:dd:60:5e:ce:10:b5:4e:41:
         6f:4d:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:13 2026 by rpki-client