Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c5f1f91-b8be-3c4c-93e4-ee5cf3277006.roa
File:                     8c5f1f91-b8be-3c4c-93e4-ee5cf3277006.roa (raw, json)
Hash identifier:          EI7PTOWpb9EB6dSR1G7EyIsl+1GK+MWRinQnl6tPAM4=
Subject key identifier:   33:32:14:0E:89:A4:F0:D8:08:79:97:C8:88:2D:F0:6B:90:26:B8:81
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584ED9C736AB068F691C15638C8E
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c5f1f91-b8be-3c4c-93e4-ee5cf3277006.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     30036
IP address blocks:        173.16.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:36:ab:06:8f:69:1c:15:63:8c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=bd289edf-4a10-4fef-b093-e15341ec8604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:46:83:0f:56:eb:b4:12:ca:35:d3:fa:c5:
                    10:2f:8d:1c:41:e3:18:a3:0c:b2:1d:a5:c0:72:34:
                    b1:5d:e9:73:5a:7c:e0:22:03:9c:c1:84:f5:b0:96:
                    0e:14:0f:dc:2c:0e:31:14:73:1f:4f:bd:1c:2b:3a:
                    92:1f:e4:42:9a:a6:f3:74:5c:6b:13:0d:74:97:46:
                    41:06:63:62:bc:f6:fd:28:62:a4:2e:13:7a:d2:b5:
                    81:7b:3e:c0:a0:f6:f1:d4:ef:96:57:1b:0d:97:ac:
                    9f:42:da:5f:3d:18:74:ca:f7:2c:57:eb:db:c8:0e:
                    20:41:8f:a8:e9:d6:2c:89:93:ed:c2:73:a1:6c:84:
                    9d:e3:67:b5:aa:ea:db:be:b2:ab:5e:50:c7:0d:52:
                    bb:97:f2:ca:ff:a3:c0:b9:a3:4d:df:22:40:1b:13:
                    23:1f:4b:82:05:46:67:36:10:6b:4f:45:73:27:f0:
                    51:13:9c:b1:37:90:04:88:7e:84:f5:28:99:8c:ae:
                    ef:42:0f:22:63:6e:97:93:3b:5d:8b:92:75:64:56:
                    14:52:35:02:cf:52:f6:f3:3f:63:c6:01:1e:9f:c9:
                    9c:db:ba:70:7a:72:ec:59:89:e5:59:16:36:6d:69:
                    1d:23:6f:5d:a7:75:0b:0f:ab:57:1a:b2:8f:31:77:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:32:14:0E:89:A4:F0:D8:08:79:97:C8:88:2D:F0:6B:90:26:B8:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c5f1f91-b8be-3c4c-93e4-ee5cf3277006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:36:21:a9:bd:aa:df:d0:42:f5:44:2e:93:61:e3:e6:79:57:
         9e:d6:6d:9f:d8:1a:3b:84:18:64:f8:c3:8c:4a:94:6a:4e:40:
         4f:4c:82:03:5a:25:55:75:99:1f:3d:49:9b:1a:99:ab:1b:c7:
         63:b6:80:97:e8:22:0a:e9:87:d8:fd:16:24:2f:da:7f:12:a2:
         70:08:3a:d2:ac:9d:28:d3:d0:7f:ab:4a:4f:c5:36:f1:e0:f7:
         be:a1:6c:0c:4c:9a:0b:a8:b2:7a:e4:15:6f:71:07:0c:7d:85:
         0d:89:64:37:a2:83:54:95:e8:8a:f0:32:c1:38:aa:ab:f8:4d:
         f4:67:9b:71:eb:3d:5a:84:90:61:65:65:d2:53:2c:fb:e7:f2:
         77:77:1f:ec:7b:1d:56:e7:e9:56:92:af:af:93:47:33:da:6a:
         50:c9:51:aa:67:bc:9e:91:0a:59:50:7f:65:07:ed:8e:cf:e1:
         0b:ba:ba:59:ac:d2:3b:5b:3c:f0:5d:86:2d:ce:a4:f0:db:23:
         1f:05:38:9d:fa:b7:a8:0f:d2:a4:70:58:d2:ba:7d:4d:2d:53:
         74:f2:7f:90:ac:d0:09:64:24:82:b7:06:e3:f4:b1:93:70:ec:
         79:48:32:b0:23:e9:51:0e:c2:1f:af:66:29:d1:90:15:39:15:
         62:8f:56:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:45:10 2026 by rpki-client