Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b7ea0f0-e66c-3770-ab74-0647ff2747a6.roa
File:                     0b7ea0f0-e66c-3770-ab74-0647ff2747a6.roa (raw, json)
Hash identifier:          N1GCWntXOCEUnCIRvyb8blB7EotV05r0fhgztn5vIYQ=
Subject key identifier:   C5:3F:9E:81:D6:3F:0F:CD:33:F0:37:C4:3A:53:07:05:7A:9B:24:72
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E11A00A3640FDEE8C7C778
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b7ea0f0-e66c-3770-ab74-0647ff2747a6.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.19.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:1a:00:a3:64:0f:de:e8:c7:c7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=a818e5c2-498e-4416-9011-089b58c3075a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e7:e8:22:e9:d5:af:e4:a5:4a:ca:f7:48:a5:
                    aa:5e:56:96:6c:f9:f6:3f:bf:95:68:7e:d9:2a:9e:
                    51:a2:c4:87:97:4a:9c:cc:eb:a8:04:50:15:77:a0:
                    24:c4:d5:c4:cc:e5:d3:aa:b1:7a:d6:32:2f:f0:03:
                    5f:55:1a:09:aa:b2:b8:12:88:b3:19:cd:f2:ae:d0:
                    b9:b5:17:f3:b0:0f:c9:a4:9c:2d:bd:9e:13:4a:5f:
                    60:73:c2:43:c0:d3:8b:16:c2:43:2b:bb:a4:14:0f:
                    38:10:67:0a:54:b5:48:da:05:bd:ff:f5:d7:8d:01:
                    44:5b:be:9c:aa:b0:b4:65:a2:f5:d7:c6:2b:91:93:
                    e2:e4:e9:9c:f6:de:89:1a:55:87:47:90:a9:8f:86:
                    fe:52:85:54:47:54:0e:07:2e:15:f1:78:0a:59:ce:
                    b0:4f:a7:e4:f1:1b:42:e4:ea:1e:d7:1d:c3:34:70:
                    b1:88:3d:5a:7b:92:09:f4:57:2e:4a:0a:5a:51:9a:
                    bc:6d:82:7e:4d:37:5d:a6:20:f7:26:e6:c3:b3:25:
                    d2:6a:d2:88:24:17:03:5b:74:74:b3:da:c6:18:47:
                    a1:69:73:ab:e5:9b:4f:34:49:89:11:f6:b9:c3:fb:
                    74:70:65:6f:93:b7:5e:76:85:12:8c:3b:2e:d9:19:
                    de:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3F:9E:81:D6:3F:0F:CD:33:F0:37:C4:3A:53:07:05:7A:9B:24:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0b7ea0f0-e66c-3770-ab74-0647ff2747a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a0:6e:0d:2c:01:49:68:ab:b2:2e:90:2d:9b:c6:65:b7:93:
         8a:ab:49:0b:93:32:4e:01:9b:3b:d7:4f:5f:b6:97:cd:c1:f8:
         75:a3:e3:cc:6a:39:fd:27:35:20:06:7f:c6:97:b7:ce:61:b8:
         54:88:68:19:56:af:aa:67:64:7a:32:c2:91:9b:24:bf:68:88:
         46:4d:38:a8:3b:94:79:77:e5:04:00:64:7f:61:82:83:a1:20:
         37:cf:7b:cf:ca:60:15:cd:2d:d5:bb:ac:3e:c4:a5:88:96:45:
         f5:45:a5:6b:e3:8d:b3:ef:d4:cf:0d:75:b2:a4:ef:97:cb:53:
         10:48:a8:7d:14:28:a4:3b:03:f7:1d:d1:4e:fb:fe:3a:fc:a9:
         cb:a7:91:b5:71:37:61:a0:a1:86:17:bc:42:6e:25:ec:a3:da:
         7a:1a:ae:72:55:7c:85:fd:1e:45:c1:2b:7a:23:76:3f:93:2e:
         e3:da:3a:44:d7:d8:da:8e:56:d4:0d:5f:b7:57:6a:6b:42:b7:
         0f:43:e6:15:5f:a1:ff:f2:7a:1c:19:35:0e:e1:d4:db:b2:dc:
         36:94:1c:85:ac:81:67:f4:80:f0:6e:31:ed:53:20:e1:cf:bb:
         46:f9:dd:af:89:84:c4:e7:48:3d:4d:c4:32:9b:26:b7:46:81:
         53:04:28:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RoAo2QP3ujHx3gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
YTgxOGU1YzItNDk4ZS00NDE2LTkwMTEtMDg5YjU4YzMwNzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiefoIunVr+SlSsr3SKWqXlaWbPn2P7+VaH7Z
Kp5RosSHl0qczOuoBFAVd6AkxNXEzOXTqrF61jIv8ANfVRoJqrK4EoizGc3yrtC5
tRfzsA/JpJwtvZ4TSl9gc8JDwNOLFsJDK7ukFA84EGcKVLVI2gW9//XXjQFEW76c
qrC0ZaL118YrkZPi5Omc9t6JGlWHR5Cpj4b+UoVUR1QOBy4V8XgKWc6wT6fk8RtC
5Ooe1x3DNHCxiD1ae5IJ9FcuSgpaUZq8bYJ+TTddpiD3JubDsyXSatKIJBcDW3R0
s9rGGEehaXOr5ZtPNEmJEfa5w/t0cGVvk7dedoUSjDsu2RneVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMU/noHWPw/NM/A3xDpTBwV6myRyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGI3ZWEwZjAtZTY2Yy0z
NzcwLWFiNzQtMDY0N2ZmMjc0N2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRMnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFOgbg0sAUloq7IukC2bxmW3k4qrSQuTMk4BmzvXT1+2l83B+HWj48xq
Of0nNSAGf8aXt85huFSIaBlWr6pnZHoywpGbJL9oiEZNOKg7lHl35QQAZH9hgoOh
IDfPe8/KYBXNLdW7rD7EpYiWRfVFpWvjjbPv1M8NdbKk75fLUxBIqH0UKKQ7A/cd
0U77/jr8qcunkbVxN2GgoYYXvEJuJeyj2noarnJVfIX9HkXBK3ojdj+TLuPaOkTX
2NqOVtQNX7dXamtCtw9D5hVfof/yehwZNQ7h1Nuy3DaUHIWsgWf0gPBuMe1TIOHP
u0b53a+JhMTnSD1NxDKbJrdGgVMEKI8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:39 2026 by rpki-client