Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1f7c26d0-d9dd-3ba5-8123-dbd83e4eca42.roa
File:                     1f7c26d0-d9dd-3ba5-8123-dbd83e4eca42.roa (raw, json)
Hash identifier:          McfH6Eihy0GBd1OFpVjke0oqGcVSR+/vMMDJGXcp86A=
Subject key identifier:   8B:18:26:DE:84:FC:ED:39:41:81:52:36:B4:AC:33:3A:5F:9C:79:B0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E8F54F37F0FCEDB05551E0E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1f7c26d0-d9dd-3ba5-8123-dbd83e4eca42.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        173.31.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:f3:7f:0f:ce:db:05:55:1e:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=1cffd14c-873d-4361-b496-57927fd55f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6f:88:76:93:c6:cf:f3:01:eb:18:53:ff:eb:
                    5b:ca:07:c6:12:10:fd:50:04:be:4b:a0:9b:da:1b:
                    74:4c:f2:04:63:e9:55:35:c1:84:9c:a3:c4:ae:6d:
                    25:0c:ba:57:e3:1f:cf:58:96:89:1a:a7:13:b8:09:
                    3b:ca:1d:82:c1:64:5c:91:6a:89:74:af:60:ea:a1:
                    11:b8:5b:7c:ed:54:95:b5:d3:3c:83:af:43:2a:7a:
                    0c:7f:76:38:e7:4d:1b:3b:ad:1e:d4:4e:3e:55:97:
                    79:bf:d5:b7:8e:bb:36:f3:b3:66:5d:9e:e4:48:35:
                    1f:32:69:39:e1:84:33:35:4e:60:45:6f:2c:4a:c8:
                    f1:5e:fd:5f:cb:6c:38:c5:57:cc:00:34:2b:8a:5e:
                    85:94:63:88:bc:23:7e:c4:f5:26:43:d2:16:6a:8e:
                    67:19:b2:c8:53:37:fd:39:f6:21:33:e2:ea:14:b9:
                    3c:f0:ff:54:b0:a9:5a:2c:3c:95:3a:13:8d:b7:e5:
                    39:02:3b:82:2e:fb:e9:72:8c:25:9f:64:62:f3:44:
                    08:71:d8:fe:a4:11:ae:46:a3:0b:b4:ea:c8:c1:6d:
                    db:03:8c:1e:7a:5e:31:41:d9:22:62:ca:36:26:7f:
                    1d:4a:aa:0d:91:60:c4:c6:46:00:ca:65:40:2b:78:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:18:26:DE:84:FC:ED:39:41:81:52:36:B4:AC:33:3A:5F:9C:79:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1f7c26d0-d9dd-3ba5-8123-dbd83e4eca42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:69:d3:c5:2f:e6:75:bc:5b:64:a6:f2:e4:de:90:80:77:
         95:a6:38:94:97:2d:7a:e4:c0:a9:f0:f8:cf:a1:65:cc:df:6c:
         70:ce:3c:e6:16:e8:b7:91:cd:b2:d0:52:a5:24:cb:ae:a9:fb:
         bd:9b:61:e8:ff:55:ce:23:52:74:33:cf:3e:b8:6e:2c:a9:81:
         f7:53:01:ac:34:e2:63:86:34:9b:a1:e9:0d:89:b5:02:ce:a7:
         00:20:4f:29:81:16:31:6f:f1:03:6f:11:3e:26:37:8a:f6:a6:
         1c:42:eb:7c:a2:e4:3b:a2:5e:ef:7f:be:6c:09:7d:1a:3a:2e:
         40:ea:cd:a3:ed:02:06:1c:85:de:e9:50:31:6a:5e:47:e0:d9:
         67:04:fd:32:9e:06:22:17:bf:0b:af:7a:1a:b7:ac:cf:4a:b0:
         b1:42:65:a9:d8:37:27:9e:5b:d6:3f:5c:a4:d5:14:95:f4:0b:
         74:66:55:81:2f:73:4e:98:5b:7e:92:d9:8e:8c:ad:24:1f:9f:
         3d:ee:cb:95:82:91:7a:88:aa:ab:c7:35:87:66:6a:52:06:20:
         6c:9d:94:f7:5d:66:40:e3:7c:35:bf:83:41:73:a5:a6:ad:16:
         a7:ae:28:9d:7f:55:b6:5a:36:57:98:ec:b1:36:20:94:c5:5d:
         87:b6:1e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:57:42 2026 by rpki-client