Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51d00c05-8f80-3469-8842-111e11323290.roa
File:                     51d00c05-8f80-3469-8842-111e11323290.roa (raw, json)
Hash identifier:          1Txk3Q1/AnVV+za0mdQ4gn1Sfo1YZeSXIVCu80olLz0=
Subject key identifier:   4C:F2:CD:F7:C1:8F:39:30:D8:5A:AC:3E:65:0A:E6:C9:73:A0:36:93
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4988C19E7219AD51287D6140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51d00c05-8f80-3469-8842-111e11323290.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.29.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:c1:9e:72:19:ad:51:28:7d:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ffd80ca7-bfeb-4d92-9717-8c3e884b1e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:29:16:2f:e1:f8:ca:84:60:04:41:a4:f5:
                    5b:32:17:f1:41:3b:e4:16:b1:a2:4a:77:f3:fb:8a:
                    45:1e:f9:74:f2:7f:32:6c:af:80:51:4b:1c:92:48:
                    7c:c3:f1:df:92:8f:d4:d1:1b:c0:4e:60:aa:8d:df:
                    af:25:cd:f9:b5:44:bf:a5:e9:6e:4b:9b:5d:30:e8:
                    cb:8d:34:e4:a0:c1:98:9c:5b:af:21:cd:d9:36:48:
                    84:68:f1:08:58:2c:8e:1d:b3:11:f1:bf:a8:f9:55:
                    29:f0:37:3b:ca:d7:20:a8:33:7b:9b:31:77:64:f5:
                    cf:18:19:64:9c:14:2d:42:83:c2:c2:03:44:3e:cc:
                    6a:24:26:4b:f9:7f:f5:b1:d4:29:f6:88:3f:17:4c:
                    57:7f:4c:da:5b:b1:c4:11:16:ac:c2:87:8b:cf:c5:
                    24:dc:64:2c:79:a7:41:f6:4c:74:73:8a:7a:78:87:
                    31:7e:14:98:d4:35:37:0b:53:41:43:f6:72:e9:3b:
                    11:dd:d9:92:8f:98:59:68:40:28:36:51:95:e3:5a:
                    c1:03:ac:cc:1f:3a:c9:60:3e:8c:11:d9:d8:77:ba:
                    2d:2d:ef:c4:4c:46:fd:cf:87:11:17:01:52:4d:16:
                    a8:a4:f8:81:75:74:e6:4c:61:0f:de:72:70:69:fc:
                    8d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F2:CD:F7:C1:8F:39:30:D8:5A:AC:3E:65:0A:E6:C9:73:A0:36:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51d00c05-8f80-3469-8842-111e11323290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:22:aa:6a:63:0e:a8:9f:1b:b1:07:8d:25:be:f7:2e:88:fa:
         9f:08:4f:a9:fc:16:2e:a4:ba:cd:9d:53:1f:a6:fc:ec:8f:41:
         81:1c:7e:1d:fb:55:df:30:31:b2:65:ab:d8:d7:80:c6:cd:e4:
         a8:36:c2:cc:88:36:ed:76:06:ce:be:84:c5:27:09:f1:ca:85:
         70:a4:98:d8:4b:3d:ef:1b:26:49:9d:12:f1:99:01:41:ec:93:
         8b:b5:54:60:e9:5e:3c:d2:20:aa:af:ee:66:bb:f6:c5:96:b6:
         24:be:62:12:4e:be:36:2f:8f:5f:d0:f2:48:29:56:f8:de:99:
         a3:5e:36:1b:67:d0:23:8f:22:4e:1a:a8:11:19:ad:b0:81:a6:
         d6:95:d0:83:4f:80:8b:fe:36:42:af:d6:f8:6d:a0:6a:dc:7c:
         fa:4d:bf:6a:3e:ab:39:da:18:4f:1c:13:4f:e6:8a:31:41:13:
         90:64:26:9e:bd:60:fb:8c:be:cc:2f:33:51:fe:f7:9f:a3:08:
         74:a8:ae:1e:14:fe:29:b4:e7:6f:c5:14:a3:71:3b:2f:8a:c1:
         f4:75:e9:b5:9c:e8:f1:a3:7a:47:4c:ad:47:75:49:1c:84:64:
         d2:31:cd:d8:e3:60:04:85:5d:37:6b:4f:d8:7f:71:4b:1b:be:
         b1:35:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:00:00 2026 by rpki-client