Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/78e987d9-536c-3068-8ef2-a45aadc6cf16.roa
File:                     78e987d9-536c-3068-8ef2-a45aadc6cf16.roa (raw, json)
Hash identifier:          AhjkV7mGZjQ69J9t0LHFq3D7ioUM9fEJcwFL1fnTh9o=
Subject key identifier:   0A:DB:69:7E:B4:EA:B3:81:66:71:A2:48:36:0C:06:9C:39:DE:A5:C9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4974BAE8544C95BD6AAA7740
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/78e987d9-536c-3068-8ef2-a45aadc6cf16.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.28.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ba:e8:54:4c:95:bd:6a:aa:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a539ab72-96df-4e71-a6ae-bb2fe7b120dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:63:c7:fd:ea:f1:bb:9a:3e:9d:eb:ff:bb:
                    46:be:a2:0d:54:a1:32:7a:66:2b:b0:8b:0b:a3:e5:
                    6d:ba:10:c2:91:d9:74:b4:10:2e:9a:26:9b:03:b6:
                    2c:9d:35:60:c4:bf:78:4b:e7:9e:e9:46:c4:cc:d8:
                    11:da:b8:ff:c0:db:95:2f:c8:5b:a1:f3:f3:b9:8a:
                    db:3c:5a:cb:5d:97:6f:c2:fe:22:bc:7a:1a:20:29:
                    7f:ab:26:7d:3a:b4:42:a8:ea:da:80:3a:cf:26:20:
                    da:19:02:d3:64:cd:bf:fc:eb:05:85:be:0d:d0:b0:
                    ac:a7:12:cc:83:a3:88:1b:71:f5:7e:88:75:17:e5:
                    2e:4e:ff:54:f8:85:77:eb:31:38:19:29:54:b0:74:
                    8c:53:2a:dd:f9:f1:a9:b8:52:5c:26:ff:bf:b9:50:
                    8f:5d:8e:48:de:e6:70:47:e9:e2:cf:b8:8e:ff:ae:
                    84:89:9e:f9:8c:89:c0:3e:a2:c7:f2:59:54:03:9c:
                    62:f3:e1:8c:25:fe:bd:60:69:83:eb:20:d0:9b:e7:
                    13:a5:89:de:c8:ab:88:59:6d:b3:d2:53:12:62:93:
                    ba:3e:f9:42:f7:7b:a5:01:07:8d:99:e0:55:8e:77:
                    5f:a1:71:b1:7a:65:4e:b9:5c:27:5e:e3:d1:e7:c8:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DB:69:7E:B4:EA:B3:81:66:71:A2:48:36:0C:06:9C:39:DE:A5:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/78e987d9-536c-3068-8ef2-a45aadc6cf16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ae:42:1e:e6:a2:7e:7b:da:26:ba:13:16:fd:ce:ee:9f:f8:
         72:ca:f4:fd:17:ab:e4:59:97:3e:cd:be:c5:8b:69:35:b2:3b:
         e2:09:a3:f5:ce:56:54:06:c3:9f:a5:f0:da:c0:f9:83:ab:1a:
         2a:b4:20:de:7e:90:57:df:f0:9f:18:39:d8:79:b5:94:ff:05:
         08:57:31:b7:18:c1:5d:09:57:2a:0c:af:b7:b9:1c:51:d5:d1:
         5c:9c:57:1c:95:86:94:15:44:09:d3:9b:89:93:d6:3f:63:db:
         d5:93:b8:f6:2a:ce:de:da:14:7a:6e:c1:5d:a3:a4:2d:c0:6c:
         28:fd:fe:df:5a:4b:b2:25:b5:cd:e7:71:fb:21:7b:fe:7a:e1:
         b1:af:93:08:b8:a6:82:6e:d2:9e:cb:b4:33:35:22:a9:5d:40:
         05:77:9d:61:96:d1:3e:21:09:13:b8:96:3a:58:ee:d3:41:6b:
         08:f9:e3:eb:96:9a:9b:db:d0:d2:6e:18:3c:e3:37:5a:e8:bf:
         52:f3:09:b6:6e:ca:09:a1:de:f7:19:0a:7b:70:2d:67:04:7d:
         ac:27:d7:9c:20:cc:fb:e6:df:6e:18:7d:54:81:4d:b5:0b:56:
         0d:7e:cb:4b:11:08:42:0f:2a:8f:55:77:67:e0:ac:6f:94:cb:
         cb:f8:49:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLroVEyVvWqqd0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTUzOWFiNzItOTZkZi00ZTcxLWE2YWUtYmIyZmU3YjEyMGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk9jx/3q8buaPp3r/7tGvqINVKEyemYrsIsL
o+VtuhDCkdl0tBAumiabA7YsnTVgxL94S+ee6UbEzNgR2rj/wNuVL8hbofPzuYrb
PFrLXZdvwv4ivHoaICl/qyZ9OrRCqOragDrPJiDaGQLTZM2//OsFhb4N0LCspxLM
g6OIG3H1foh1F+UuTv9U+IV36zE4GSlUsHSMUyrd+fGpuFJcJv+/uVCPXY5I3uZw
R+niz7iO/66EiZ75jInAPqLH8llUA5xi8+GMJf69YGmD6yDQm+cTpYneyKuIWW2z
0lMSYpO6PvlC93ulAQeNmeBVjndfoXGxemVOuVwnXuPR58gHlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArbaX606rOBZnGiSDYMBpw53qXJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzhlOTg3ZDktNTM2Yy0z
MDY4LThlZjItYTQ1YWFkYzZjZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGquQh7mon572ia6Exb9zu6f+HLK9P0Xq+RZlz7NvsWLaTWyO+IJo/XO
VlQGw5+l8NrA+YOrGiq0IN5+kFff8J8YOdh5tZT/BQhXMbcYwV0JVyoMr7e5HFHV
0VycVxyVhpQVRAnTm4mT1j9j29WTuPYqzt7aFHpuwV2jpC3AbCj9/t9aS7Iltc3n
cfshe/564bGvkwi4poJu0p7LtDM1IqldQAV3nWGW0T4hCRO4ljpY7tNBawj54+uW
mpvb0NJuGDzjN1rov1LzCbZuygmh3vcZCntwLWcEfawn15wgzPvm324YfVSBTbUL
Vg1+y0sRCEIPKo9Vd2fgrG+Uy8v4SV4=
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:46:44 2026 by rpki-client