Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3da675b4-9ad3-3e34-adbe-a005f6b3c91f.roa
File:                     3da675b4-9ad3-3e34-adbe-a005f6b3c91f.roa (raw, json)
Hash identifier:          DaE/OoYPwGvRx785FO+SXYqkyryajpUm0DJvpe+lk6g=
Subject key identifier:   77:5D:68:1A:0A:C9:03:FC:C0:95:DA:2B:D9:6A:3B:C6:D9:D9:A1:AC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E10E1E6495DD13810925C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3da675b4-9ad3-3e34-adbe-a005f6b3c91f.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        150.195.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:0e:1e:64:95:dd:13:81:09:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=840b3349-f730-47d7-a5b1-b450aa347104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:76:7b:f8:b7:6a:43:a1:98:b3:db:1f:d0:
                    73:df:6f:79:10:b3:84:71:32:50:cf:4c:76:fe:72:
                    04:1f:77:9f:11:d6:f4:27:5a:da:ac:12:09:4b:5c:
                    d6:0d:79:4e:a7:32:fe:26:65:1f:e4:27:a7:b1:d4:
                    d4:33:c8:34:fc:1f:59:dd:3a:1f:d0:79:70:37:a5:
                    a9:27:92:e5:8a:29:da:c0:82:74:6e:b5:0d:de:fd:
                    e7:95:7a:e2:af:8e:4b:36:14:7e:f3:98:75:ff:aa:
                    d5:c6:ea:b9:ea:fe:e1:28:30:35:ef:2f:d6:77:51:
                    a6:d8:58:a8:d6:51:34:d1:4f:ab:f0:46:56:42:66:
                    6b:72:4b:5a:aa:24:86:53:d3:58:89:f5:59:e1:71:
                    ec:e9:ce:f9:4a:4a:37:70:b3:51:c1:48:25:6c:13:
                    ae:b2:41:b6:7b:8f:fa:1c:6d:c7:ea:9d:35:3b:8a:
                    80:f2:49:dc:ab:c8:d2:87:0d:8c:6a:ed:2d:50:d5:
                    32:e0:6e:cd:31:b6:95:d8:7f:03:85:7f:56:e1:10:
                    74:70:68:dc:db:dc:9c:a5:fd:18:b7:1f:8c:e1:2a:
                    5a:d8:bf:16:8c:17:a9:87:26:a0:c7:78:84:3f:b2:
                    17:b2:7c:94:a6:5d:5a:39:b6:38:8d:f0:78:0c:fe:
                    0b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5D:68:1A:0A:C9:03:FC:C0:95:DA:2B:D9:6A:3B:C6:D9:D9:A1:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3da675b4-9ad3-3e34-adbe-a005f6b3c91f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:17:50:a3:61:9b:2d:4c:3b:cb:0e:08:c2:5e:5f:f7:eb:c4:
         f4:d3:0b:85:0b:6e:21:b6:76:1d:0d:32:88:d9:0f:02:3b:8f:
         70:a8:d2:78:f9:90:9e:f2:cb:9a:59:86:d9:ab:3e:26:00:e5:
         d4:f4:79:78:35:a1:c9:f6:39:ad:51:a7:05:e4:b4:67:9e:b3:
         92:a5:1d:22:87:b1:54:84:fd:4d:04:df:35:bc:26:51:c2:84:
         41:d5:08:25:ae:51:32:99:6d:48:4e:c9:a0:b4:3f:3c:ff:54:
         cb:5b:13:9d:0f:86:9f:9b:f6:6e:9e:64:ca:38:c6:ae:61:d3:
         79:47:5f:5b:02:d8:cd:de:61:8f:75:5c:e1:da:6a:74:30:95:
         44:b1:f8:6e:bd:84:71:01:c8:42:94:1d:d0:1d:62:7a:54:4b:
         d2:73:3d:23:25:c2:0f:5d:c8:ab:04:22:f7:98:06:17:1a:c5:
         39:31:b5:49:8c:08:db:d3:89:29:ff:2d:1c:ce:3a:93:b3:28:
         d7:82:15:e1:4f:57:05:49:e7:9d:35:3c:67:a3:54:5f:4e:4e:
         b2:10:b8:79:ff:eb:e5:c4:eb:b5:25:d5:f2:a6:66:5d:b2:5d:
         81:c4:b2:57:51:78:93:ea:44:9a:ae:f7:f1:7d:67:21:20:93:
         cd:2e:02:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:45 2026 by rpki-client