Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7553b270-c5df-3a92-b929-e3c53cfda064.roa
File:                     7553b270-c5df-3a92-b929-e3c53cfda064.roa (raw, json)
Hash identifier:          mBGh4tfveGWOoE7a1j9HRJ9HGF2VYaFEFUeo+eeUy/8=
Subject key identifier:   9D:03:7E:AB:E0:A0:50:21:12:93:69:65:EA:DA:DF:CE:EB:1E:58:B9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E97B4F994B460FFBE86AF4D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7553b270-c5df-3a92-b929-e3c53cfda064.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        173.30.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b4:f9:94:b4:60:ff:be:86:af:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=c32f5142-33b5-4228-bde2-bedb1fcd384e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:15:1d:c3:ae:21:c4:24:fe:00:77:80:b7:
                    89:fa:3e:8b:5c:41:44:80:8a:bd:16:fd:df:74:01:
                    f5:40:9e:cf:3e:7d:a0:54:da:86:b1:aa:5a:80:81:
                    9a:f8:d8:84:4b:70:16:68:ea:1d:e0:62:66:55:5a:
                    46:15:b9:38:93:17:f7:77:39:16:b8:88:c2:5b:9d:
                    c1:ee:d3:cc:b9:cf:98:51:27:79:80:cf:30:2e:9c:
                    0e:c6:a5:1b:28:9a:be:dc:4e:b6:9f:5c:ae:62:e6:
                    80:38:d9:ca:16:a3:35:d6:11:1c:aa:f1:8f:26:da:
                    42:27:8d:c5:cc:05:e4:4a:8a:d3:c1:d8:a7:94:9c:
                    df:51:1b:25:45:91:ab:68:c7:fa:2b:7f:ff:5e:0d:
                    f9:7d:74:22:b2:d3:b9:17:b8:02:77:f1:3d:58:df:
                    c0:e7:20:aa:3d:92:e4:f8:70:3d:0f:b9:80:45:d3:
                    b1:35:3a:4d:21:a8:48:a2:f0:fe:29:40:8f:77:f0:
                    92:51:bc:5c:85:8b:bb:be:9b:7e:dc:2c:12:dc:b2:
                    ab:ed:6f:75:ad:93:e3:e4:c6:b0:a1:71:a5:a7:15:
                    d2:0c:05:46:a9:ad:61:3c:2c:98:e2:d6:04:29:93:
                    67:74:e3:20:81:f2:09:62:d0:26:33:df:11:e1:1a:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:03:7E:AB:E0:A0:50:21:12:93:69:65:EA:DA:DF:CE:EB:1E:58:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7553b270-c5df-3a92-b929-e3c53cfda064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:bc:13:5c:7b:bf:3b:45:f4:dc:b0:29:93:cf:1d:aa:dc:34:
         21:d9:1b:50:3b:14:79:bc:0d:81:28:a9:5b:36:4c:f2:77:fc:
         02:03:65:7a:33:04:1f:94:de:76:e4:db:67:42:42:19:ed:8f:
         54:61:2e:34:a5:7e:7d:09:be:f0:a9:dc:61:54:5e:b2:2d:3a:
         d6:5b:10:17:f3:38:a3:ed:32:de:1b:a5:d8:a9:72:88:f3:08:
         9f:36:28:4d:d2:34:09:e5:52:7c:e3:b7:29:3f:73:5c:18:f1:
         5c:71:79:bf:d2:cf:30:a1:95:ac:40:e9:89:29:7c:4b:99:3e:
         7e:45:0b:65:1a:d9:11:6e:34:04:ac:19:7f:c3:84:bb:00:29:
         83:02:e1:7a:90:43:86:ee:96:08:aa:1e:7a:e9:54:e9:e6:12:
         3b:ff:87:09:4c:69:92:aa:8e:99:62:55:1f:7d:a1:2e:01:0e:
         59:41:b7:bb:34:21:84:57:5d:ff:ce:78:11:68:4f:3f:e3:9b:
         8a:c9:9f:76:36:32:e2:33:80:7d:70:35:ac:52:e8:a1:19:ab:
         f7:bd:ca:f8:23:39:36:d9:85:29:87:31:a6:e2:23:c7:16:07:
         c5:5f:22:f8:91:74:3b:b6:e9:d1:a4:b5:64:02:d5:e8:8e:63:
         71:41:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:58 2026 by rpki-client