Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/62127a35-92c7-3701-b492-326fd934c11a.roa
File:                     62127a35-92c7-3701-b492-326fd934c11a.roa (raw, json)
Hash identifier:          FhGA/AVd4Rrb+C9+ELrV32jtaqvax8mnhpXluxkRJK4=
Subject key identifier:   93:22:2C:84:52:73:33:BC:90:21:22:30:EA:83:0E:94:33:F8:09:47
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5A32E43D75B3E2D5DB5E4300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/62127a35-92c7-3701-b492-326fd934c11a.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.30.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:e4:3d:75:b3:e2:d5:db:5e:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=28bb9ad0-6922-400b-ba7a-85609ecdf2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:46:fb:c7:8f:1e:ab:ba:53:5e:17:b4:54:
                    f7:e0:af:2c:c9:fb:b9:6f:98:06:d5:91:f3:e0:0c:
                    bc:b1:dd:82:dc:9b:40:f1:d6:f4:5f:c3:66:57:25:
                    fe:04:12:35:4f:53:69:97:9d:0e:26:bd:ee:0e:31:
                    fb:e5:81:d5:34:89:ac:48:0d:26:b3:c8:6e:ea:0e:
                    f2:96:93:e4:29:56:d8:c3:63:12:bf:93:79:31:51:
                    a0:b3:78:ed:c9:69:36:09:9e:66:28:95:a4:04:d1:
                    54:c7:fb:a3:bf:12:ad:c9:fe:52:60:31:b8:92:0e:
                    ba:83:ac:12:b4:1b:95:ee:59:b6:30:18:d0:53:17:
                    6e:81:ad:02:bd:82:1d:4e:9c:5f:e9:8d:f2:6e:9e:
                    cc:91:b2:aa:3c:c3:02:4d:81:db:92:9f:98:1a:96:
                    eb:a0:66:12:c3:39:af:f3:4d:9b:72:b3:28:45:fa:
                    82:a8:2f:7c:78:8e:e8:cd:11:78:f0:82:a6:03:a1:
                    c0:56:f5:da:6f:51:18:63:d4:f5:ea:1a:9f:05:23:
                    bb:8d:79:1e:81:3a:3b:d5:0d:4e:3c:5f:6c:c1:b0:
                    dd:f0:ca:3b:30:e5:4a:f7:43:6e:19:aa:6f:45:01:
                    3b:a7:c2:89:51:ab:9a:00:03:56:b8:02:c0:18:12:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:22:2C:84:52:73:33:BC:90:21:22:30:EA:83:0E:94:33:F8:09:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/62127a35-92c7-3701-b492-326fd934c11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d9:d4:61:86:58:c3:f4:4a:fc:ac:18:b2:bd:8c:d0:5c:df:
         40:c2:34:46:1e:9d:87:f7:f5:94:e0:12:08:24:94:db:5a:b4:
         df:33:a2:64:aa:26:4a:d0:54:b0:11:d1:09:0b:e7:ce:4b:2e:
         2c:56:51:33:6d:bc:16:f7:33:32:80:32:8f:b7:a4:39:a9:6b:
         85:17:9a:9c:35:7f:a7:8f:0e:91:04:f3:16:4d:e0:72:96:95:
         3e:0e:ed:e2:4b:f5:99:23:1f:ac:9c:46:eb:cf:0c:e4:11:35:
         a6:f4:be:8d:81:a9:88:91:f1:51:66:c4:c9:16:ff:ec:4d:e3:
         b5:11:52:dd:74:98:9d:53:4c:94:c9:27:4c:5c:70:42:9a:bc:
         fd:d3:b2:60:f5:1a:d0:1c:35:9b:d6:2f:ab:8e:31:39:9f:35:
         7b:60:3e:9b:5f:f7:a2:0e:e8:62:20:e4:b4:22:19:f0:84:f7:
         97:23:c9:3d:f5:2b:67:4b:26:61:9d:61:4d:d0:01:0c:4b:3a:
         0b:b7:d2:4d:12:cc:14:b7:19:f2:68:bf:d4:e5:44:29:91:55:
         dc:89:b6:ba:62:d9:27:04:f6:7d:7d:08:c6:83:69:be:0f:e4:
         48:b6:cd:52:7d:c3:01:12:db:9f:b4:1e:b1:ba:ff:51:5a:2f:
         d5:40:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 17:26:19 2026 by rpki-client