Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa
File:                     ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa (raw, json)
Hash identifier:          k6VfF0fdjpu1A+s68NMycBrP+S6U5nHqMgEgZ3Vqos4=
Subject key identifier:   4C:02:7C:13:6C:78:9D:57:75:44:C5:A7:1D:08:DE:DD:F3:B3:B2:84
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CD35F254CC9B3926592C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.18.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:d3:5f:25:4c:c9:b3:92:65:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9a7aae94-f58f-438c-b6a7-913d3984ddaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e5:b9:6c:a5:7c:57:db:43:99:35:ca:cf:63:
                    28:8f:9e:21:9a:c3:da:19:ab:fe:b0:f4:a9:56:9c:
                    d7:50:34:7d:df:44:9b:45:06:1c:e0:39:8b:ef:ee:
                    e9:72:74:72:09:15:a0:8c:98:9d:15:fa:b5:2c:b1:
                    cd:99:59:fc:c0:40:d8:17:09:c9:bc:e9:32:a7:54:
                    0c:0f:7b:c6:e9:c1:0f:af:29:ee:11:da:34:a1:a1:
                    82:d2:dd:da:7e:47:7c:51:93:86:39:2c:54:4b:cc:
                    5a:b0:09:cb:87:a2:35:91:7e:62:4b:ab:18:9d:c7:
                    4f:60:dc:ba:85:c7:b5:ff:dc:1f:0c:61:85:a2:da:
                    3f:8b:f8:5c:01:9b:7e:b7:a0:ec:6f:d1:ba:41:82:
                    42:79:14:eb:3c:17:82:fe:98:1d:26:24:54:8e:a1:
                    9e:38:5b:d9:a1:9b:48:86:28:5b:c2:c7:e8:ae:ad:
                    ee:f3:d1:6b:be:2a:6d:8d:3c:a5:e7:54:b3:f1:e3:
                    87:c4:6b:a8:cc:42:5b:07:45:6f:6d:31:9f:0d:79:
                    d0:3a:e3:a1:96:5d:20:b8:24:35:83:33:8d:a3:04:
                    ff:c1:fe:b8:a4:87:49:3d:dc:07:cd:06:7c:1d:14:
                    99:cd:a8:ec:62:29:4a:4e:8e:18:8c:dc:13:55:89:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:02:7C:13:6C:78:9D:57:75:44:C5:A7:1D:08:DE:DD:F3:B3:B2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b4:00:15:b7:67:3b:72:8b:49:c5:18:48:33:b9:11:a6:b7:
         52:86:d3:d3:ea:ab:40:83:d0:5f:82:c1:f5:6d:bd:3a:45:c1:
         e9:23:87:d7:2c:11:99:c7:ac:83:86:b7:ad:ac:75:a8:25:60:
         0e:95:83:69:c4:0e:dc:e4:85:40:d0:ed:7d:18:66:12:a8:22:
         4e:82:31:61:f7:f0:6a:c0:14:90:82:e3:28:aa:e4:b4:94:ff:
         37:56:25:ec:3e:98:f3:dd:8b:45:41:88:32:d3:aa:a7:2e:d6:
         15:4a:38:30:71:43:c2:25:22:41:b2:d1:a1:6e:d5:f5:d7:fc:
         3e:3a:d7:d9:fe:3e:64:8d:c1:e9:b2:1c:2d:c1:d0:d2:9a:9b:
         f8:62:21:5b:88:9e:8f:c2:a8:77:bf:78:df:94:f3:90:27:7d:
         3f:91:78:9e:04:32:5c:31:cf:76:b9:c8:d6:2f:54:7f:2d:5e:
         25:a7:7c:31:93:10:38:85:d1:7e:eb:9e:0a:35:8e:e0:48:f9:
         6c:70:45:61:62:0e:e1:5a:61:50:f5:39:fd:46:e5:dd:2b:fd:
         e2:09:53:47:67:a5:c4:31:39:98:a0:97:56:06:36:a0:57:cf:
         60:6a:2b:e3:9b:0b:0e:a1:d5:5e:53:df:dd:55:66:1d:8f:50:
         f6:ed:53:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnNNfJUzJs5JlksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWE3YWFlOTQtZjU4Zi00MzhjLWI2YTctOTEzZDM5ODRkZGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uW5bKV8V9tDmTXKz2Moj54hmsPaGav+sPSp
VpzXUDR930SbRQYc4DmL7+7pcnRyCRWgjJidFfq1LLHNmVn8wEDYFwnJvOkyp1QM
D3vG6cEPrynuEdo0oaGC0t3afkd8UZOGOSxUS8xasAnLh6I1kX5iS6sYncdPYNy6
hce1/9wfDGGFoto/i/hcAZt+t6Dsb9G6QYJCeRTrPBeC/pgdJiRUjqGeOFvZoZtI
hihbwsforq3u89FrviptjTyl51Sz8eOHxGuozEJbB0VvbTGfDXnQOuOhll0guCQ1
gzONowT/wf64pIdJPdwHzQZ8HRSZzajsYilKTo4YjNwTVYkf/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwCfBNseJ1XdUTFpx0I3t3zs7KEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWMyNGMwZjAtOTIzYy0z
ZmIzLThlZWMtMTcwZTVjZGIwYzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRLrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABW0ABW3Zztyi0nFGEgzuRGmt1KG09Pqq0CD0F+CwfVtvTpFwekjh9cs
EZnHrIOGt62sdaglYA6Vg2nEDtzkhUDQ7X0YZhKoIk6CMWH38GrAFJCC4yiq5LSU
/zdWJew+mPPdi0VBiDLTqqcu1hVKODBxQ8IlIkGy0aFu1fXX/D4619n+PmSNwemy
HC3B0NKam/hiIVuIno/CqHe/eN+U85AnfT+ReJ4EMlwxz3a5yNYvVH8tXiWnfDGT
EDiF0X7rngo1juBI+WxwRWFiDuFaYVD1Of1G5d0r/eIJU0dnpcQxOZigl1YGNqBX
z2BqK+ObCw6h1V5T391VZh2PUPbtU/w=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:08 2026 by rpki-client