Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/847fe289-8ca5-3e57-9003-f9d9c9878bfd.roa
File:                     847fe289-8ca5-3e57-9003-f9d9c9878bfd.roa (raw, json)
Hash identifier:          X8nLKCSkPCWVDelp3KZ0Nn8Qw25Xfql9P4hDoc+Xtng=
Subject key identifier:   CB:EC:F6:C2:6E:62:3F:D3:53:56:02:BF:FF:C0:5C:A0:B3:C6:C0:62
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EE4F1FBB935C8E8B291C7DB40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/847fe289-8ca5-3e57-9003-f9d9c9878bfd.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.16.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:fb:b9:35:c8:e8:b2:91:c7:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=13153e93-ee4c-4050-a6fb-3e6abf48292a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:40:82:8c:97:e7:bc:96:81:4d:2f:3a:ea:3a:
                    a8:bd:85:1b:4e:f1:ce:8d:d7:59:de:a5:3e:8c:93:
                    d6:27:54:73:e9:80:a4:59:61:0e:48:4e:c0:f1:39:
                    f9:17:47:36:0b:6d:d3:49:35:4e:c5:d3:39:e1:01:
                    36:6b:01:77:a3:21:e4:a5:78:54:6a:44:e1:9b:c3:
                    e0:2a:be:15:cb:62:e4:e6:0d:41:ed:de:fa:24:d9:
                    e6:1d:78:0e:97:7b:72:aa:0c:78:8d:a9:fe:f5:b7:
                    ea:9e:bc:49:2c:5d:d6:67:58:54:9e:53:9f:49:c2:
                    fa:60:9b:9c:67:41:22:7b:1d:88:a0:94:07:ff:4c:
                    b7:3c:d6:67:65:f2:0b:dd:90:91:0d:7b:ae:0f:38:
                    d7:bc:21:fc:28:e5:6d:41:19:30:98:fc:d9:7e:08:
                    fb:cc:10:20:00:ac:e1:65:60:35:3c:fd:75:80:86:
                    5e:af:02:e4:c3:4f:ae:90:5e:cf:39:66:28:16:8a:
                    00:32:05:a6:b5:3a:22:dc:11:57:27:4b:0b:3b:d4:
                    ea:a7:d4:e2:5d:17:9f:30:ae:fe:5e:4e:37:cc:ca:
                    5c:a5:8b:8b:07:b9:f8:0c:99:41:e9:2a:3b:27:c8:
                    ac:46:3a:28:39:b4:02:01:a6:e5:e8:3c:b2:ac:eb:
                    b2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EC:F6:C2:6E:62:3F:D3:53:56:02:BF:FF:C0:5C:A0:B3:C6:C0:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/847fe289-8ca5-3e57-9003-f9d9c9878bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:83:39:c9:67:26:4e:ae:37:ee:ae:cc:de:c2:30:40:dc:
         96:f5:5f:8d:dc:f4:e3:1e:5c:26:77:89:51:45:94:78:c2:c4:
         e2:9f:de:7c:58:18:13:fa:06:cb:46:ff:69:ad:b2:9b:40:cb:
         ea:9e:dd:ce:7d:d5:00:3e:c8:74:76:fd:5b:b7:24:a3:a4:88:
         8d:da:e9:6b:4c:bd:95:c2:f1:e7:9a:9f:25:03:a3:40:3b:eb:
         0b:03:ce:41:52:4b:3f:07:5d:40:49:ac:b9:28:cd:3a:d8:0a:
         5c:99:3f:3a:ec:38:03:b0:c6:40:81:8a:24:b9:fe:fb:d9:37:
         b7:b1:cd:83:c0:3e:0e:0b:b3:62:00:88:be:e2:ff:39:ac:40:
         5b:cf:64:e3:f1:2a:49:2a:25:61:ea:a5:9a:ad:99:23:86:0c:
         9e:2c:b5:37:85:5e:fc:37:5e:04:a7:ee:c2:5a:fc:e4:2a:fc:
         a6:c4:bd:ae:10:06:2c:1e:df:9e:11:78:a6:87:99:7e:3b:67:
         d3:61:f6:e5:22:26:c0:ee:b0:ea:b9:1a:42:ae:37:e1:8e:92:
         e7:0d:56:ad:33:74:09:f4:23:47:5a:c9:cd:e5:d4:f8:e0:4e:
         98:4b:06:bf:0e:87:a8:b1:c8:8f:9a:cb:44:4a:b5:3b:1d:4c:
         91:1e:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:48:39 2026 by rpki-client