Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffc818fe-8c76-3c01-8c91-cdb48a5a9908.roa
File:                     ffc818fe-8c76-3c01-8c91-cdb48a5a9908.roa (raw, json)
Hash identifier:          Zy7RWlBolgsKiyfDU5oWBRn/IQH2FmA80Ee90g2XwzU=
Subject key identifier:   C1:7C:F3:CB:03:DE:68:81:16:86:61:D3:96:50:C2:68:67:39:B8:CD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EDC91F721D260FDAC56D76C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffc818fe-8c76-3c01-8c91-cdb48a5a9908.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.28.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:f7:21:d2:60:fd:ac:56:d7:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=2ea6c0e2-fb13-4301-abcf-36f0d1492a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:89:c9:2a:ca:0b:be:78:7a:30:77:ec:e3:75:
                    8a:f4:c9:e6:f2:8f:9b:39:db:54:24:1a:b0:cd:b6:
                    af:72:8a:ef:b0:07:26:13:27:77:56:81:e5:9b:66:
                    f6:39:f0:d0:ba:aa:95:aa:2c:51:d8:7f:d7:77:c7:
                    93:ff:19:be:9a:af:b3:6d:a5:ad:e2:3e:eb:f8:44:
                    f6:b7:59:7d:39:7f:d6:48:51:a0:17:89:6d:ac:f2:
                    e9:c8:a3:76:c3:b2:88:37:3b:10:b2:31:ff:5f:c1:
                    21:a2:c9:8e:9b:c3:2a:51:87:2e:1d:5c:6b:b5:36:
                    53:5d:27:bc:9d:76:f6:04:1d:5e:1d:2b:89:5a:d9:
                    89:99:df:9e:4b:14:80:80:01:d6:28:33:d5:13:1f:
                    63:ca:1d:08:90:a1:fb:13:b9:d9:a6:40:d3:18:ca:
                    3f:1b:d6:3c:0b:60:16:3c:f2:6d:4a:20:50:23:18:
                    74:77:ed:7c:b3:c0:96:e3:d8:f9:03:0a:b8:a9:d6:
                    7b:2f:f7:9f:e5:c9:e3:34:46:32:3e:08:00:29:30:
                    37:1d:3d:3e:1a:20:0e:ad:ce:d6:78:77:e8:cd:7e:
                    12:1f:f4:d7:c6:84:d3:0e:7b:df:ee:49:96:4e:61:
                    4b:db:07:03:0b:81:48:16:b2:ef:23:ef:92:89:67:
                    b8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7C:F3:CB:03:DE:68:81:16:86:61:D3:96:50:C2:68:67:39:B8:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffc818fe-8c76-3c01-8c91-cdb48a5a9908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f5:83:a4:ca:b0:50:08:c9:b2:09:d6:65:e1:6e:a8:81:ad:
         67:39:41:38:da:7c:b3:d8:5c:a7:c0:73:1e:b8:f1:8a:91:21:
         ea:80:2a:24:54:97:92:fa:76:0c:b8:51:a6:89:ad:a4:e6:bc:
         eb:c0:47:ba:d5:8a:d8:4f:74:e7:bb:32:13:e0:0d:47:d1:c4:
         18:02:94:f4:5c:69:39:1d:8d:47:b2:d1:a8:ea:83:15:01:cd:
         56:f6:68:9f:93:61:29:f8:5e:47:e1:82:2a:62:a1:1d:70:49:
         7b:b8:ad:a1:23:83:c4:4b:7c:b1:45:52:7c:5d:50:d7:7a:fd:
         7f:c2:4e:91:5f:d6:23:08:3c:70:c0:4b:15:2a:e5:73:1b:24:
         cf:39:e3:e1:1e:b6:c6:68:77:90:e1:7e:fa:0d:f0:cd:e2:30:
         fa:12:51:a7:d7:d4:23:0b:e3:70:7f:9c:40:f6:4a:71:75:0b:
         b4:ea:0d:d4:95:b5:cf:03:5b:67:83:aa:a0:0c:e8:5d:96:ee:
         b1:00:a8:c7:70:06:b5:af:5e:29:ed:b1:8b:36:ca:15:87:6f:
         61:72:5c:88:31:89:a4:ac:c3:b9:09:cd:14:d3:10:49:1a:0a:
         63:ed:3a:20:d2:ba:8c:f4:ae:a5:6d:c1:11:a4:fa:46:4f:be:
         b8:89:b6:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckfch0mD9rFbXbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
MmVhNmMwZTItZmIxMy00MzAxLWFiY2YtMzZmMGQxNDkyYTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4nJKsoLvnh6MHfs43WK9Mnm8o+bOdtUJBqw
zbavcorvsAcmEyd3VoHlm2b2OfDQuqqVqixR2H/Xd8eT/xm+mq+zbaWt4j7r+ET2
t1l9OX/WSFGgF4ltrPLpyKN2w7KINzsQsjH/X8EhosmOm8MqUYcuHVxrtTZTXSe8
nXb2BB1eHSuJWtmJmd+eSxSAgAHWKDPVEx9jyh0IkKH7E7nZpkDTGMo/G9Y8C2AW
PPJtSiBQIxh0d+18s8CW49j5Awq4qdZ7L/ef5cnjNEYyPggAKTA3HT0+GiAOrc7W
eHfozX4SH/TXxoTTDnvf7kmWTmFL2wcDC4FIFrLvI++SiWe4JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMF888sD3miBFoZh05ZQwmhnObjNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmZjODE4ZmUtOGM3Ni0z
YzAxLThjOTEtY2RiNDhhNWE5OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRw0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACz1g6TKsFAIybIJ1mXhbqiBrWc5QTjafLPYXKfAcx648YqRIeqAKiRU
l5L6dgy4UaaJraTmvOvAR7rVithPdOe7MhPgDUfRxBgClPRcaTkdjUey0ajqgxUB
zVb2aJ+TYSn4XkfhgipioR1wSXu4raEjg8RLfLFFUnxdUNd6/X/CTpFf1iMIPHDA
SxUq5XMbJM854+EetsZod5DhfvoN8M3iMPoSUafX1CML43B/nED2SnF1C7TqDdSV
tc8DW2eDqqAM6F2W7rEAqMdwBrWvXintsYs2yhWHb2FyXIgxiaSsw7kJzRTTEEka
CmPtOiDSuoz0rqVtwRGk+kZPvriJtrs=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:45 2026 by rpki-client