Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86da828e-fdbb-3b3b-adc1-a894a26dddab.roa
File:                     86da828e-fdbb-3b3b-adc1-a894a26dddab.roa (raw, json)
Hash identifier:          Uaghj43cUQiOYxGFQ8oGclwn5zkgzSyvOuT4i3HHvRE=
Subject key identifier:   6C:BD:92:B1:51:9B:9C:D8:C2:E4:C1:E8:CC:22:46:D7:70:EB:47:BC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F71ED7EB40530CC157B7E8100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86da828e-fdbb-3b3b-adc1-a894a26dddab.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     30036
IP address blocks:        173.27.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:7e:b4:05:30:cc:15:7b:7e:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=7a6cce9f-ee5b-42ac-a81e-18114aca1dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:81:ec:76:d5:68:3d:dd:b8:2e:0b:ca:b7:
                    fc:b8:35:05:36:60:0e:df:91:42:2b:bc:06:99:51:
                    02:70:78:8c:73:74:e7:fe:a8:a7:92:b4:62:50:7f:
                    65:6d:51:57:ca:60:d2:1f:56:a4:fc:35:39:57:5e:
                    5c:2e:0b:26:f1:64:63:36:3c:c2:81:e0:4f:da:39:
                    b3:f0:55:2f:22:ab:ba:76:80:d4:f9:b6:9c:03:36:
                    68:59:fa:c1:e5:7a:a0:25:7d:9f:1c:33:3b:cf:36:
                    fe:a0:bb:68:3b:dd:79:0e:d8:b7:b6:0f:48:f3:39:
                    0d:6a:26:5e:4b:e1:65:bc:78:53:9e:83:49:76:5a:
                    34:e0:0a:3a:34:95:9a:cf:77:9f:8e:e9:e8:57:64:
                    16:0d:94:30:9f:75:21:24:a0:33:ed:b8:ff:3b:16:
                    12:19:e5:72:c5:b3:45:16:75:e1:3b:83:6d:3c:65:
                    2c:52:64:78:79:dd:89:42:e5:8f:ea:dd:ef:a0:b9:
                    78:40:0e:6b:f5:e4:e7:43:21:8c:92:4c:7a:f5:9b:
                    75:ae:09:d7:01:fa:92:71:46:77:15:08:1e:08:bc:
                    ca:8d:2f:8b:ec:bb:8d:61:2a:65:7f:3e:93:4f:37:
                    55:a0:62:da:62:10:08:84:f4:70:b5:8c:a8:b5:08:
                    de:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BD:92:B1:51:9B:9C:D8:C2:E4:C1:E8:CC:22:46:D7:70:EB:47:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86da828e-fdbb-3b3b-adc1-a894a26dddab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b3:99:69:ca:14:5f:7d:c0:22:91:76:62:4c:16:dd:d2:4f:
         97:28:c8:ea:71:e1:f4:16:d9:82:8f:28:53:fd:86:99:b6:03:
         06:a7:bd:b0:5c:19:9c:46:b9:e5:62:c9:ec:84:8b:e3:7d:6d:
         84:e1:f0:cd:9e:5a:04:c8:b7:31:f2:cc:0b:3a:20:e0:45:cd:
         cf:42:dc:08:40:a6:da:cb:19:69:77:a0:0f:2d:a4:ca:c9:52:
         74:08:9d:ab:08:ac:ad:77:75:59:13:45:3b:16:bf:4f:6e:1b:
         4c:10:7b:3e:93:15:b4:cc:70:cf:e6:2f:b4:15:5e:4c:28:2b:
         47:78:70:8a:49:e1:52:3e:dc:6e:73:a8:22:00:8a:8d:57:af:
         1b:f6:a2:4e:ad:70:9b:56:10:7d:64:e1:d7:cb:e2:f7:0c:46:
         b5:6e:ab:76:0c:49:76:ea:e6:5e:a2:eb:fa:b7:44:99:85:d4:
         c8:70:b7:01:3f:f7:31:7e:87:a1:fe:41:65:ad:60:ad:84:73:
         f4:69:c4:27:f9:90:a0:77:43:c8:d5:dc:0f:c7:ac:aa:3e:2c:
         81:92:b5:03:82:7c:45:72:2e:f7:c4:32:c0:b5:f5:aa:9d:f2:
         41:36:e2:74:4b:24:2e:ee:9a:15:35:06:e7:82:b3:dd:78:52:
         40:86:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:04:57 2026 by rpki-client