Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5935c54a-5b55-3e55-ad86-97439dfa0aef.roa
File:                     5935c54a-5b55-3e55-ad86-97439dfa0aef.roa (raw, json)
Hash identifier:          xj589j1zOjW/k/KvoxD/GWc8ehcBtsuO41wg8Kdllq8=
Subject key identifier:   D0:0E:F7:5B:DA:A5:8B:E4:69:2A:1E:14:D4:75:DA:C4:45:6E:CB:3C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498B88034DCAB54200ABE500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5935c54a-5b55-3e55-ad86-97439dfa0aef.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.17.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:88:03:4d:ca:b5:42:00:ab:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=67d5fc39-58b9-4ce7-b831-1acac338a296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:31:90:11:8c:b7:6d:c9:90:90:7e:92:42:
                    83:a9:e5:a1:e4:19:bb:c3:e5:7e:17:78:10:e9:19:
                    56:bf:43:64:1c:94:ef:20:c1:86:ea:76:b9:82:bd:
                    a6:6f:3b:9b:7d:83:1b:b8:96:bb:12:f8:db:f1:1f:
                    cc:26:d8:c9:d4:76:e9:29:da:72:c2:72:bf:e6:95:
                    66:e8:c5:c6:c2:df:bb:d6:2a:0c:3e:cc:26:3f:5a:
                    9a:48:90:98:d2:a4:3e:dc:2c:2d:82:e6:6f:dd:5b:
                    53:d0:94:eb:f2:26:7d:b1:5e:08:40:da:0b:0f:ff:
                    8a:68:8a:42:df:d3:c0:45:21:d6:b5:df:33:c1:3b:
                    ec:37:6e:91:a9:83:cd:bb:b3:f8:e1:87:4b:15:2f:
                    59:4f:15:fb:7d:9d:80:66:93:3f:2f:be:28:5e:f6:
                    ed:1f:1b:4a:b3:f8:6b:f0:aa:d4:36:70:89:d0:37:
                    3e:ee:04:63:58:d9:8f:e9:6b:fb:04:f1:e3:e8:6b:
                    b7:fd:79:e4:7e:34:5c:36:2c:9b:ab:4f:d1:06:cf:
                    54:10:be:07:de:d0:0b:1c:05:60:15:f9:cb:68:23:
                    31:27:a9:ee:5f:63:9c:ea:c8:2e:3e:cc:0a:29:35:
                    6b:f8:43:07:a5:59:b5:6e:07:da:24:56:55:ed:6a:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0E:F7:5B:DA:A5:8B:E4:69:2A:1E:14:D4:75:DA:C4:45:6E:CB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5935c54a-5b55-3e55-ad86-97439dfa0aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:fa:b7:f0:cf:00:fd:a7:b7:af:92:a0:33:c7:12:53:5f:
         37:5d:12:5b:66:ca:83:ce:d4:58:2a:9f:22:bb:71:06:a6:3d:
         d0:56:bf:7f:21:fc:58:b9:ec:9b:ed:3d:aa:4b:e6:aa:18:bd:
         b3:f3:03:4e:e9:47:d0:78:36:69:05:46:1e:68:84:82:90:da:
         af:18:52:8d:f5:d8:a3:5e:dc:5f:6f:b7:1c:d4:24:a4:e8:64:
         d4:ff:da:bc:48:20:8c:40:12:aa:a6:c5:65:e6:57:e8:22:04:
         aa:fc:a0:8f:4a:02:61:10:7c:9a:a9:dd:75:75:4e:0a:4f:40:
         54:20:da:30:c5:38:a4:81:41:af:79:1d:c8:69:6b:bc:01:3e:
         b3:e1:3a:ac:91:48:16:61:88:ee:dc:52:1a:07:96:c8:9c:81:
         dd:c3:1b:b2:51:7b:fb:ed:98:b6:fd:42:48:93:d4:81:a0:b5:
         9a:bc:26:d8:4b:71:22:29:28:34:36:3d:bd:ca:ea:91:c5:d1:
         0a:73:dc:75:2c:e8:cc:05:be:e2:58:d9:19:09:64:12:8a:8f:
         0a:fc:ca:dd:ff:b5:d2:72:b1:35:e4:d5:05:6f:62:9b:4b:63:
         db:39:ee:da:ec:cb:67:7c:80:d5:b6:a5:04:4c:b4:38:1c:03:
         e7:5a:07:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:46:52 2026 by rpki-client