Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9c42e37-0387-35e2-b596-fa8472f67cf0.roa
File:                     c9c42e37-0387-35e2-b596-fa8472f67cf0.roa (raw, json)
Hash identifier:          YJBsi395lqGqo+HZVn6yz1SdxKiJGieyxLoB25Br7dA=
Subject key identifier:   69:10:89:47:BC:60:BA:12:A5:07:BF:9C:E4:DE:A4:73:F3:19:26:C9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EC0A7144C4B769750C0BA6380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9c42e37-0387-35e2-b596-fa8472f67cf0.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.28.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:14:4c:4b:76:97:50:c0:ba:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=87436856-bfeb-46a2-bedb-05cdf3dd409a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:b9:d1:bc:7d:32:09:4d:7f:4a:de:8d:88:
                    15:8f:57:86:d5:98:fe:1e:e4:67:29:ff:93:f8:9a:
                    57:5c:d5:69:d7:ef:84:84:ae:85:75:81:ad:d3:14:
                    01:29:6f:80:91:eb:b9:bc:6a:63:dc:15:ea:cc:c3:
                    43:cd:57:99:a9:cf:a6:ac:45:1d:49:97:ed:e1:e8:
                    ad:9c:83:95:1f:92:7c:24:00:b6:15:74:a7:6e:64:
                    ff:6e:25:09:e7:f5:ad:0a:13:26:33:11:fa:ca:9f:
                    a0:ac:33:78:ae:30:31:ed:d0:ae:b3:90:2d:21:f0:
                    32:e8:f4:5d:f9:25:c5:ee:a8:cc:19:87:51:89:fe:
                    6e:b9:fc:81:6b:a9:6d:0d:87:ae:08:ff:78:9a:9d:
                    7d:4d:8a:c0:5b:46:a5:1e:09:70:91:42:09:3b:f3:
                    1c:0e:52:82:d2:f3:c8:af:fb:78:7d:8d:1a:91:14:
                    1c:a6:75:f9:ae:28:1b:3a:a4:f1:f4:db:1e:63:11:
                    0e:4c:69:93:70:1f:98:3e:6f:b7:79:56:01:2b:64:
                    16:42:ef:9f:7e:7d:d1:37:60:b2:30:33:ef:04:6f:
                    de:36:8a:cc:d7:74:c2:96:85:72:3e:4f:75:d3:05:
                    5b:37:bd:c4:7c:47:53:eb:9f:76:68:9d:34:2c:af:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:10:89:47:BC:60:BA:12:A5:07:BF:9C:E4:DE:A4:73:F3:19:26:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9c42e37-0387-35e2-b596-fa8472f67cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5b:b5:65:df:65:75:9c:96:f8:c6:5a:af:64:7a:a7:04:5c:
         9e:ab:99:4d:2e:02:fd:45:07:68:22:22:35:86:40:2e:a7:f1:
         ba:6e:d6:5a:94:84:81:79:59:fb:3a:61:d2:9a:ba:bf:84:65:
         f5:1e:5e:1d:cd:c7:e0:e3:18:8a:36:f4:c2:17:f2:69:f5:d3:
         5e:7f:2b:4e:72:ed:2d:2b:ff:a5:ee:1c:11:7f:3d:67:46:e9:
         37:94:3e:df:04:9e:ce:d8:e7:b9:a9:d1:c0:03:89:18:ec:6a:
         18:6a:e1:24:ff:89:1b:6b:fd:02:e7:f6:a8:1a:d5:3b:07:e1:
         e4:50:90:01:b5:5a:1a:f3:0f:77:93:26:95:b9:e9:c0:95:2b:
         99:e2:a0:83:48:16:79:7b:7f:9c:0a:ed:19:17:f4:c0:b2:50:
         26:60:0d:da:20:81:f2:a0:d2:54:77:1f:81:2b:10:62:ff:54:
         04:39:15:90:a4:9f:22:73:d0:35:90:47:6e:a9:fc:f4:3a:73:
         92:04:45:d7:c5:4c:5f:d7:89:0d:87:f6:f6:e4:d8:84:da:c1:
         04:78:43:fa:3a:64:7f:00:41:64:65:7f:51:49:92:56:76:d1:
         0a:4f:3e:12:9b:77:6d:74:55:d3:b1:c9:02:d8:9d:27:87:09:
         2a:64:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:54 2026 by rpki-client