Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/033e24be-eb1c-3363-b5a4-e034656160a1.roa
File:                     033e24be-eb1c-3363-b5a4-e034656160a1.roa (raw, json)
Hash identifier:          HLSzIrTmq/TmF0UhHw4FWYJzvOXnXl5JqljpaOdeIpo=
Subject key identifier:   46:40:3B:12:AE:7E:51:53:68:DC:02:16:2C:6E:10:DA:1C:91:48:85
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E10EB2F37E62A6A191CD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/033e24be-eb1c-3363-b5a4-e034656160a1.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.26.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:0e:b2:f3:7e:62:a6:a1:91:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=344918f0-8ebf-428e-ae22-2b48a31febb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:ce:9e:d1:aa:88:5e:b0:1c:a5:33:af:c8:
                    10:4a:db:b8:72:aa:27:e6:64:d2:0f:b7:3c:01:05:
                    32:ab:df:99:32:23:a9:cb:74:df:a2:4d:29:4b:ea:
                    83:b0:42:92:77:ec:eb:f3:8f:47:a0:0b:f4:f8:6a:
                    f7:3f:f8:34:93:55:2a:24:77:8c:3a:0f:c3:10:b5:
                    9c:72:bb:21:a0:da:cd:07:b2:59:cf:91:9d:98:30:
                    e3:3b:49:25:ec:42:b5:5f:cc:45:57:3e:b5:a9:74:
                    b7:0e:ae:65:87:37:cc:7b:24:8c:25:62:8c:05:40:
                    31:8b:e5:98:50:55:2c:7f:49:1d:e8:28:72:bc:14:
                    1f:a2:c1:1f:c1:6d:ac:b6:2c:32:75:48:14:94:08:
                    38:67:fd:1a:1e:3b:cd:45:d1:32:7a:b5:57:13:fb:
                    ef:05:98:5d:6f:95:48:12:0e:90:20:67:25:67:fe:
                    be:70:62:e8:b9:21:ae:b3:0b:02:47:3f:9a:90:71:
                    06:9f:79:83:ea:8e:7c:c1:4a:29:d3:7b:23:62:ef:
                    64:98:a5:8c:75:c5:3e:f7:95:52:b6:d7:e8:9d:f3:
                    11:11:c1:5d:98:42:56:b0:2a:66:6d:c8:10:3e:dc:
                    2d:ff:8d:8d:dd:5e:09:0a:94:f1:76:98:35:f9:dd:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:40:3B:12:AE:7E:51:53:68:DC:02:16:2C:6E:10:DA:1C:91:48:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/033e24be-eb1c-3363-b5a4-e034656160a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8e:0a:90:5f:a9:4d:eb:be:a5:ae:a3:a9:97:49:19:e0:45:
         24:0e:4e:d6:62:e2:ab:ac:23:c6:2a:29:91:0a:cd:8b:f4:80:
         6f:73:47:0a:58:e5:1c:dd:ab:21:e0:9f:82:6f:12:13:3d:da:
         75:13:c4:4c:a3:bc:f6:7d:7d:c2:89:5a:6b:7e:43:6c:46:63:
         28:75:fe:4c:db:e0:40:7d:31:d2:ba:c1:d6:67:c5:0f:11:36:
         0f:d5:63:92:d9:c0:1a:b3:2b:ef:f9:2a:4b:af:c3:48:b6:47:
         6e:49:2c:d9:07:8c:67:b8:9d:5c:01:e0:f3:ab:69:15:a8:a7:
         ec:9a:19:07:4c:b9:fe:08:d6:60:9f:dd:b4:3d:7f:3c:c9:0c:
         95:b8:d6:f5:df:ba:06:7a:53:02:56:c7:2f:57:a8:72:af:cf:
         84:bf:c8:ef:37:fb:0b:f8:6d:38:66:d2:71:2b:54:50:b8:2e:
         7f:2e:f5:f7:22:e5:a6:30:39:1c:da:1d:ce:7b:f7:f4:e6:d3:
         1d:3e:73:e5:65:33:1c:77:fc:c2:ce:73:71:f8:be:5a:b1:e0:
         db:36:19:95:fa:77:70:c6:54:2d:ee:ca:e6:71:b7:4e:6f:19:
         ab:0e:c4:2a:9b:05:c2:f4:96:c0:cb:ba:84:84:ce:20:17:2d:
         44:be:40:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:09:43 2026 by rpki-client