Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21ee9ae-4d9f-366c-a4bd-7857c4eb7bcc.roa
File:                     e21ee9ae-4d9f-366c-a4bd-7857c4eb7bcc.roa (raw, json)
Hash identifier:          IEWLEhs6jf3x+bTrMiVQHqZL7cFdY62CHd7B4YE5on4=
Subject key identifier:   7B:90:56:36:37:96:2D:30:ED:FD:C3:07:AB:70:E6:C7:43:68:B6:AE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D97556F5458A4A535325DD988
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21ee9ae-4d9f-366c-a4bd-7857c4eb7bcc.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     30036
IP address blocks:        173.30.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6f:54:58:a4:a5:35:32:5d:d9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=2b4c269e-c73a-45f9-8c0e-8058fa327f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:b0:03:ea:58:ee:a1:50:85:a8:14:d6:f2:
                    65:49:bc:76:85:62:0b:f6:8b:35:59:8f:ef:3e:94:
                    12:ef:d2:65:86:39:17:1d:aa:d3:e1:32:03:28:ba:
                    e3:8d:f4:26:a5:1f:a6:40:05:33:9a:de:eb:97:9b:
                    46:37:4b:df:75:4d:bf:45:9c:96:73:ca:26:32:75:
                    d4:db:d1:3f:87:4f:e4:75:e9:97:11:63:e3:1f:17:
                    2b:10:4f:d4:81:43:2e:f5:1f:23:19:29:be:af:31:
                    79:fc:6d:79:92:e4:c3:73:21:52:af:fa:0d:1b:8f:
                    e4:bf:2d:6f:5b:a5:7f:a9:39:15:6c:a8:b6:2e:b1:
                    77:bd:4b:8e:f7:48:58:98:e3:2e:f1:23:53:5e:ad:
                    13:b1:72:44:89:05:9f:42:12:99:9e:1a:67:66:90:
                    77:fd:78:12:d5:4b:80:c4:6f:39:72:a8:90:53:b7:
                    5e:bd:4c:eb:28:1c:b5:5c:75:98:15:4a:60:c1:e9:
                    0a:18:07:4a:ae:32:51:7a:8d:b9:80:6d:87:7e:64:
                    f3:be:08:8b:dd:21:03:3b:e4:d8:29:74:3b:99:69:
                    47:79:7a:ab:6b:ac:fe:88:e6:83:92:e4:f3:86:64:
                    a5:27:87:1c:10:f2:cc:46:d2:c2:0d:e4:9f:2f:99:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:90:56:36:37:96:2D:30:ED:FD:C3:07:AB:70:E6:C7:43:68:B6:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21ee9ae-4d9f-366c-a4bd-7857c4eb7bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:39:0d:cb:66:5c:06:fe:03:d5:a0:a2:a2:67:05:1b:09:a3:
         2f:27:23:e4:1a:6f:0e:6a:ae:f9:db:a8:61:4a:bb:56:e0:63:
         f9:f6:d3:14:3a:f5:70:cb:35:ac:ec:32:f5:ce:00:69:06:dc:
         fd:f3:b1:83:09:c5:9d:8b:1c:61:9f:d5:43:0f:ec:12:6b:a9:
         8f:46:80:fb:75:5a:5f:6e:d5:7f:e0:7c:2e:51:e1:ca:9f:0f:
         bb:4c:cc:b2:73:31:27:50:d0:3d:0c:c4:3b:e1:97:1b:46:76:
         51:e1:ab:e7:78:96:1c:9a:e7:ba:05:b2:fc:e3:38:f0:83:5e:
         be:38:96:61:6e:63:11:be:c1:48:13:3c:37:d7:00:83:bd:32:
         e7:10:4c:be:d4:d9:57:31:6d:3b:af:1e:4f:62:d8:45:f4:fb:
         9d:98:f3:67:2e:0c:ac:64:b9:c5:e9:a4:45:d0:9f:ee:21:4c:
         0d:56:b8:3f:0c:a3:48:63:73:9e:96:3a:53:c1:cd:a5:48:2f:
         ae:73:b0:0f:63:5c:99:85:dd:f0:fe:68:94:53:a2:09:8a:ec:
         fd:dc:98:fd:ad:44:a8:ac:16:76:57:66:5e:70:b2:ef:a3:5a:
         0f:d6:78:84:f0:b0:84:2a:ed:61:ff:ce:3d:66:50:9e:f2:cb:
         b9:94:83:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:23:54 2026 by rpki-client