Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97f17b34-51d0-382a-8007-18d4cbd49133.roa
File:                     97f17b34-51d0-382a-8007-18d4cbd49133.roa (raw, json)
Hash identifier:          +zbmIUYXqC12gxWFy37krPimETZZ8x8s3JxOMaFXaBM=
Subject key identifier:   A3:3B:52:99:FC:D0:06:A2:66:97:AD:6E:82:4D:AA:F3:63:0E:54:E0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1B1A6198625EA553EABE9600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97f17b34-51d0-382a-8007-18d4cbd49133.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.18.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:61:98:62:5e:a5:53:ea:be:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=d2e47730-ff34-439b-b441-f2c3863aa5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:b3:a5:bc:c3:d1:99:01:44:27:c1:67:85:
                    9a:8b:07:d5:8d:0c:9f:16:9e:fe:0b:e5:e0:d3:1e:
                    ec:ed:8a:7a:19:b9:5e:71:56:e8:a5:b7:05:f7:8b:
                    b4:99:dc:20:be:c1:49:92:c7:d1:e0:c5:b8:44:00:
                    fb:a0:ce:b1:70:32:2b:c9:fd:c2:a4:8f:c5:4f:e8:
                    14:6d:fa:0b:aa:fa:8d:fc:20:60:fa:4e:c5:ae:9b:
                    1d:ea:d9:5a:58:b1:ad:e7:6b:10:56:54:3b:3d:b6:
                    7c:7e:a4:7c:5a:6c:74:ef:e5:b6:c5:1a:75:0d:f1:
                    b7:08:bf:7e:80:a8:e8:25:6a:53:08:b5:6c:71:86:
                    0f:7f:11:c5:f1:bd:f3:5a:f1:ff:bd:7b:00:0c:53:
                    c6:6b:0f:75:60:b0:45:0c:0c:e0:e6:a2:78:35:59:
                    20:a4:1f:27:01:ae:63:86:ed:50:90:15:f4:63:02:
                    fa:81:9b:7b:e8:fc:72:6c:32:5c:d7:fa:1c:63:2f:
                    b0:90:6b:b3:95:f2:dd:9a:fd:a5:c9:96:e1:bb:0e:
                    ce:f1:83:02:67:00:78:4c:22:0c:9c:25:37:4a:19:
                    44:03:85:c5:f3:3d:2d:17:f0:90:2d:10:0e:d3:8d:
                    a6:5b:27:37:36:3c:45:e5:49:b1:49:e3:d8:81:fe:
                    c0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3B:52:99:FC:D0:06:A2:66:97:AD:6E:82:4D:AA:F3:63:0E:54:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97f17b34-51d0-382a-8007-18d4cbd49133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ee:96:19:1c:ad:f8:13:12:1b:04:2d:ce:bd:95:55:2d:3a:
         fb:f3:b1:6c:1d:ac:2b:9d:20:a0:e7:0a:d6:9e:62:9f:5f:a5:
         ae:c4:3b:d4:48:41:01:19:17:3b:97:f4:94:64:53:44:a8:41:
         0e:52:5d:f1:e2:9b:07:0a:34:7d:98:bf:52:28:d3:9c:b3:08:
         2a:8b:55:bb:fc:9a:8e:57:f4:d6:95:ee:53:32:d3:f4:b6:e2:
         70:75:5f:42:9e:bb:c4:45:6a:d9:31:8e:82:c1:8d:eb:85:f0:
         37:db:2f:d4:31:58:b9:75:cd:41:91:64:5e:c9:a0:dd:64:ba:
         46:7c:9e:b2:42:fd:cc:e8:79:73:19:48:08:ed:9c:ec:6c:01:
         d1:8c:e3:ff:89:e7:f3:55:51:38:c0:36:d4:90:ac:2b:86:a0:
         da:09:ea:00:4e:21:bc:05:43:24:48:0f:90:11:a2:5f:0a:62:
         6a:47:0c:b8:dc:ee:c1:9d:23:4b:db:dc:73:a2:91:ae:ab:75:
         ee:d3:b5:9c:0f:a4:72:83:5c:68:69:dc:57:91:7e:44:94:94:
         da:be:cb:af:9e:66:f0:d5:06:b0:ee:ab:90:cc:30:01:e7:ba:
         44:55:e3:84:67:bc:64:12:77:38:5e:4f:e5:6e:09:72:65:75:
         71:4d:53:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:45:00 2026 by rpki-client