Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5056d194-0ec2-30f4-9c73-6ae0e83105cc.roa
File:                     5056d194-0ec2-30f4-9c73-6ae0e83105cc.roa (raw, json)
Hash identifier:          8FG4CugfSLaZmK5zK6iGRKJIjvwyJ9W+rlyPBB+hNnY=
Subject key identifier:   23:F2:83:C6:B2:B9:48:44:BF:1F:4B:96:44:A4:2D:51:D9:86:ED:9A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AAC6E6296911E15D976480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5056d194-0ec2-30f4-9c73-6ae0e83105cc.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.19.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:c6:e6:29:69:11:e1:5d:97:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=020a5f09-973f-48a8-8c9a-de887d31b74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:7f:c1:24:c5:35:91:4a:32:23:6a:78:be:
                    28:bd:0f:03:15:3c:8d:93:8a:04:88:fe:ca:81:8e:
                    e9:f4:80:7c:8e:36:43:4d:ed:be:92:fd:d5:71:d3:
                    59:16:36:eb:a9:e2:27:09:3a:47:9e:db:b5:20:6b:
                    07:c8:4b:30:b6:07:75:5e:b0:b8:10:c7:18:2f:31:
                    5f:a5:e0:91:b1:34:04:27:ad:e7:38:25:51:e6:50:
                    42:5d:78:a5:7c:4e:02:64:27:32:0b:b9:ec:1f:3f:
                    f3:39:fd:96:10:eb:70:da:3a:7a:16:79:08:3f:e6:
                    75:95:42:55:7f:ef:eb:00:57:7f:09:f7:8d:ec:f7:
                    07:80:0c:6b:0c:8d:31:c2:85:e4:ef:ce:a7:34:9e:
                    23:69:ba:fc:e5:d0:00:1a:de:06:fe:23:b1:7e:c9:
                    ec:0a:93:01:2e:0b:e1:70:25:98:32:43:bc:b8:76:
                    07:35:06:ce:d6:1d:13:33:73:54:d1:8c:99:e4:ac:
                    33:32:bb:5e:fd:94:5c:4b:a7:48:0d:5d:cf:98:a9:
                    ec:e9:1f:c2:5a:5b:8f:ce:f3:c2:75:39:77:9f:d0:
                    9f:0a:ab:22:8e:c5:56:bd:6b:13:53:06:ee:3f:a0:
                    9a:30:40:13:ce:a5:f9:32:3d:04:40:66:e6:0c:1e:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F2:83:C6:B2:B9:48:44:BF:1F:4B:96:44:A4:2D:51:D9:86:ED:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5056d194-0ec2-30f4-9c73-6ae0e83105cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:24:39:45:9c:fd:02:75:23:37:da:65:47:6b:66:d9:f4:99:
         95:af:69:40:14:b8:30:9d:95:b1:fe:03:87:60:8d:f8:66:4e:
         65:93:07:f7:a3:e1:93:b4:ac:25:8b:b0:59:77:e5:34:82:9e:
         3e:3e:77:20:2e:8a:6a:d3:9b:a9:ea:78:0c:b9:01:57:ea:1a:
         d6:2a:25:48:04:7e:4b:d4:01:4a:d8:9e:29:e3:2c:ab:5d:0b:
         4f:6f:d8:21:94:0d:fa:4a:89:87:a2:13:a8:fc:86:c8:c2:f9:
         06:b1:dc:94:5c:46:d5:03:77:3a:86:ee:20:64:52:f5:48:b5:
         17:e0:87:08:ea:a9:b4:04:50:fb:13:34:11:0d:3a:1f:20:75:
         b7:1e:cc:ae:59:84:34:db:36:85:ef:f1:91:a5:9d:28:1e:3d:
         73:8f:68:9c:b2:2f:a1:fb:bf:51:3d:a7:b5:72:64:13:33:d2:
         c3:7a:74:0a:44:32:8d:2a:34:73:f0:b8:2c:d4:3e:cf:86:d7:
         a4:c4:72:5d:8a:70:80:8c:c1:53:c6:26:09:a7:b1:f4:d8:b1:
         d3:c7:f7:39:64:4a:27:c5:ca:18:e9:16:b7:34:84:c4:d7:2d:
         5c:b0:d0:bd:34:ab:36:22:bf:ce:0d:d9:71:3d:dc:be:d4:2b:
         0b:42:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:22 2026 by rpki-client