Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/241e8287-1a13-33ac-b960-f75fc236e90d.roa
File:                     241e8287-1a13-33ac-b960-f75fc236e90d.roa (raw, json)
Hash identifier:          5PLmtJ2IXjhdVkYomjXvW3X1epRPhwLHGSjIfTusfe8=
Subject key identifier:   D0:49:3F:9C:AA:14:F2:D4:E5:DB:C3:34:D3:50:92:C7:D9:4A:53:78
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF95BC3F32C0E6556C35A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/241e8287-1a13-33ac-b960-f75fc236e90d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        150.195.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:95:bc:3f:32:c0:e6:55:6c:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ac47e778-d9be-4031-8173-3589758a09b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:30:9d:25:92:76:26:46:0c:5e:32:53:01:d4:
                    94:e7:21:ee:74:1f:bc:1f:0a:8b:73:22:96:e6:cd:
                    a5:ae:51:b5:62:7b:ec:ab:09:7b:47:e8:a2:cf:cd:
                    b1:a4:78:a5:04:02:95:ba:e9:1d:b0:22:d3:1b:bd:
                    ed:95:e6:7d:ee:06:e1:b1:c5:1b:7d:1d:51:61:d5:
                    b4:6c:1c:d2:20:f4:25:08:c1:b0:ec:2d:7f:a2:85:
                    5c:f7:45:ce:39:90:6b:47:b9:ad:66:ae:46:cc:e2:
                    89:2f:1e:e2:4f:b1:bb:3a:6f:03:25:a0:48:11:58:
                    c4:26:09:cd:f9:cb:11:98:f7:81:03:fb:6d:e8:2c:
                    38:39:60:8a:5e:71:9b:85:22:c9:60:53:6e:f2:7d:
                    9e:04:18:97:0b:76:d0:d9:9b:65:aa:ee:c8:5d:8c:
                    a9:17:01:00:d4:3d:5d:09:88:0c:45:88:3a:b0:5d:
                    90:7a:6a:1e:de:ae:6b:ed:cf:29:81:3f:0e:3d:41:
                    4c:ff:26:10:2a:49:f9:40:48:95:6a:a5:ac:a2:65:
                    97:5f:cb:18:7c:c3:bd:95:77:47:db:5e:7e:9b:f2:
                    2a:d3:dd:25:34:bc:e9:cb:6f:c2:29:07:44:d1:1d:
                    6f:44:62:9f:d3:bb:e8:3e:dd:6c:e0:f2:c6:f4:01:
                    9a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:49:3F:9C:AA:14:F2:D4:E5:DB:C3:34:D3:50:92:C7:D9:4A:53:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/241e8287-1a13-33ac-b960-f75fc236e90d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:2a:37:05:16:bc:70:bb:c7:85:11:15:76:f8:e3:f0:7e:b7:
         80:d6:40:e0:57:fb:a5:50:80:84:f7:cf:06:86:0d:0b:5b:c6:
         56:83:33:66:c9:12:3d:6d:4e:b6:d8:88:32:07:80:71:a8:2b:
         01:fc:6b:da:79:60:2e:60:1c:05:02:ae:c5:a3:9a:fe:33:db:
         24:cd:a9:f6:77:2d:9a:be:e3:72:84:a9:cc:e8:cb:3c:c4:31:
         c6:81:ec:51:07:05:96:36:e2:65:c0:3b:a0:34:b0:08:a4:3a:
         b6:04:3f:87:86:d6:d0:7f:05:1e:d8:2c:c2:9c:a0:c8:94:b7:
         94:54:a0:e6:b0:d7:45:73:9c:a3:63:ab:33:9e:cc:ac:9d:bd:
         1c:7d:0a:77:fa:20:98:24:2d:17:d3:75:ff:f3:fa:07:36:e1:
         80:41:67:5e:b1:a1:ac:f0:0a:4f:f6:61:17:ac:a2:14:fc:f2:
         f2:52:f4:0c:50:ff:78:8c:6e:b0:31:a8:bb:eb:08:1e:c1:d0:
         99:7c:f2:1c:d2:ea:40:0b:6c:12:a3:5d:ef:20:cb:ed:2a:b2:
         44:2b:06:a1:dd:79:2c:0c:b0:86:d9:9b:bb:d1:49:e8:b1:97:
         a5:34:99:df:30:21:c8:b9:05:ad:0b:dd:76:af:c2:ed:d0:55:
         28:8a:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:10 2026 by rpki-client