Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa
File:                     4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa (raw, json)
Hash identifier:          YApBST670FZYRq77gfu80tb2VHYLsifZRXWn808yOW8=
Subject key identifier:   0B:7B:8B:9E:65:E9:5C:99:14:D5:1B:16:66:4B:10:A1:8D:82:18:18
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3D75D3F9E127617B3B5B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        173.20.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:75:d3:f9:e1:27:61:7b:3b:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=fd4c05e0-6558-4aa0-9395-11bf9fd9b295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:c5:a9:f7:f5:f2:dd:38:57:b4:f6:91:ff:
                    fe:29:97:6e:1d:4f:e6:17:22:bd:08:05:6d:62:7e:
                    b1:76:14:a3:78:46:d8:7f:40:63:e1:bc:d5:fa:3d:
                    ba:10:b6:9d:30:cf:67:9a:c8:2b:45:ef:63:62:6d:
                    eb:c3:97:97:b8:81:ac:6f:66:8d:79:b4:69:c5:5c:
                    9b:f7:ce:31:4e:9d:17:14:db:67:16:54:60:89:ce:
                    1a:56:06:8f:05:ad:cd:53:2b:85:2a:e7:b5:8a:33:
                    02:b9:c7:e0:e0:64:e8:fc:7f:42:e3:f1:40:2d:6a:
                    06:08:0c:31:af:53:81:39:e6:d3:12:f8:6d:81:b8:
                    50:8e:ac:5b:59:67:ad:31:08:7f:44:6e:ac:6e:53:
                    df:b9:b4:65:f7:a5:22:ee:d0:3d:d1:34:2e:87:a5:
                    39:4b:58:f9:4e:59:ec:ad:8f:3b:a3:9e:94:dd:bc:
                    df:d9:e3:82:b5:5a:f4:e2:a0:5c:68:94:5b:ff:56:
                    0f:eb:3f:18:40:f1:9a:31:77:25:a1:ba:35:c4:e1:
                    d7:ba:0b:15:f1:7f:0b:5b:df:c3:2d:2a:17:99:99:
                    b5:5a:a8:96:3b:f0:c5:94:b9:28:35:7b:d1:06:44:
                    c5:b4:18:6b:b2:e5:e8:08:c0:b9:cc:e2:23:f6:86:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:8B:9E:65:E9:5C:99:14:D5:1B:16:66:4B:10:A1:8D:82:18:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:07:28:7d:a4:84:9f:ff:37:57:77:a5:05:5e:0c:24:06:
         90:d7:52:53:f7:27:dc:39:8e:a8:bc:ae:62:9a:e5:be:0a:a0:
         fd:02:48:82:45:be:79:74:18:14:74:2d:57:fd:02:10:42:58:
         e5:51:33:fb:31:c7:f6:f3:9c:91:3a:32:52:bf:0d:15:d1:36:
         da:7a:2e:53:ba:0a:85:94:b7:19:3f:62:20:d4:3e:a5:62:5f:
         70:61:31:0e:ea:b1:b6:c4:68:b4:a2:6d:51:b8:6a:c7:f0:45:
         36:01:30:62:75:42:a7:7b:db:b8:ee:3e:25:4d:fe:08:70:66:
         2c:e1:ee:4e:b3:bc:e7:7b:4a:bf:dd:50:71:fb:00:fc:4a:7c:
         60:e0:e3:19:58:9b:8a:66:cc:10:1a:3e:ac:a9:aa:df:15:43:
         68:45:21:11:22:06:42:bc:bc:b6:6e:e8:ff:ae:43:35:4a:b8:
         ef:75:27:a8:a6:09:4b:1e:64:de:4a:d8:18:eb:a1:8e:32:21:
         1b:93:8c:da:dc:99:2f:ee:2b:bb:25:f6:e7:6b:ac:c1:af:f7:
         6a:ba:eb:bc:06:c8:e0:08:66:a6:b8:5e:5b:96:f2:ed:5d:4c:
         1f:34:2f:bd:56:a5:e3:3d:dc:1c:ba:da:1d:26:ce:4a:e0:75:
         17:93:c6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:32:46 2026 by rpki-client