Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b67f7b-dd68-3772-a536-83a136b8df01.roa
File:                     b2b67f7b-dd68-3772-a536-83a136b8df01.roa (raw, json)
Hash identifier:          8/ZUS5mRNS4OxVfGd0H0nljN/s2BW5M1bP+GreJL69M=
Subject key identifier:   86:1F:6D:E3:65:48:83:2C:FE:F4:62:A9:2F:36:13:AC:59:F3:C1:15
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79D32B2EBA6D79490BF0200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b67f7b-dd68-3772-a536-83a136b8df01.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        150.195.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:32:b2:eb:a6:d7:94:90:bf:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=74a3d128-2fde-4645-b168-2a21c887fc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:35:53:00:5a:c6:18:00:a9:c5:af:4a:9f:
                    f2:2b:26:5d:9e:90:dd:36:2e:e0:86:fd:61:e8:5b:
                    7f:b7:1b:f6:44:5c:1e:6c:6a:f2:68:a3:58:bf:ae:
                    90:5d:66:2d:a5:04:dd:b3:9a:1c:92:65:e3:02:15:
                    ae:30:3a:8f:be:61:66:de:7d:be:cf:aa:2e:c4:4d:
                    21:f0:ef:58:3d:76:c1:e1:e0:d1:2a:39:d4:92:96:
                    19:50:06:54:ee:28:f7:f4:43:7c:08:aa:ee:34:eb:
                    d5:44:28:5f:d0:ba:e0:13:bb:e3:24:45:e1:4f:d6:
                    8b:ad:d9:5b:13:94:76:dd:c9:72:2b:2b:50:83:7f:
                    ee:35:58:cb:a4:96:59:43:b8:9a:f7:09:22:42:c8:
                    85:7c:c0:11:76:2f:71:cf:2e:f9:a3:05:11:70:97:
                    33:e0:c2:1a:15:1b:25:aa:28:32:de:c5:ba:15:54:
                    6e:5c:57:2c:34:98:bf:aa:17:c4:1e:36:d8:08:50:
                    a2:85:e3:db:a1:7b:84:40:52:61:10:ba:77:5d:c1:
                    ad:f5:a1:c3:77:02:84:82:5d:58:30:ac:71:34:3e:
                    07:80:dc:6c:00:3b:d9:72:aa:36:5f:27:b9:31:43:
                    2d:52:02:68:48:3a:39:4e:5e:59:a4:ea:57:42:c0:
                    75:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1F:6D:E3:65:48:83:2C:FE:F4:62:A9:2F:36:13:AC:59:F3:C1:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b67f7b-dd68-3772-a536-83a136b8df01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:13:84:f7:07:fd:a3:56:21:22:88:46:9a:81:75:f4:74:3d:
         4a:29:82:27:f8:5f:73:a4:a1:b6:e0:79:8f:35:7c:e7:67:2f:
         af:8e:01:b5:4f:82:e6:95:c9:2c:d2:f4:19:2a:3d:97:91:e8:
         ac:f0:9e:b7:32:1b:1b:1c:94:71:b2:3e:04:00:4d:42:87:ba:
         52:57:45:8c:10:e7:9d:5d:28:84:b1:da:42:09:bb:96:cf:f0:
         6f:98:ad:a9:24:80:33:78:26:34:ec:1e:bd:ca:82:8b:67:aa:
         52:78:1c:c2:fc:16:66:ea:9f:b7:ad:28:93:b4:f1:d1:37:bb:
         d6:40:26:2e:ea:67:2c:71:c3:f4:04:b3:99:ae:19:69:be:f8:
         8e:08:33:2d:cf:10:58:f4:00:93:42:15:18:ac:fa:ee:2a:c3:
         f6:ee:c6:40:66:a5:40:f3:9a:d7:9f:a0:3f:af:09:ac:f0:8e:
         54:6b:67:97:64:26:81:67:c6:d2:07:8a:69:cc:43:25:c2:18:
         ff:e1:74:19:38:d9:8c:2f:fa:75:f1:fd:ae:9d:21:03:27:50:
         09:0c:43:ff:ea:eb:81:d0:48:3f:76:ae:b9:71:14:9d:d6:32:
         11:2f:bb:e4:41:cd:5d:3b:17:e0:a1:7c:75:56:1c:e6:77:64:
         e4:8c:0d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:44:45 2026 by rpki-client