Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa
File:                     968256d3-cb78-314c-bb42-530413b2968f.roa (raw, json)
Hash identifier:          TPFCCxqK5sFxmlzhDOmu284tC8ILq6emKQ/hizwISik=
Subject key identifier:   5E:18:50:50:67:1B:11:BD:61:26:5A:52:D2:4D:53:70:0F:2B:D4:FF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF910729F84730361BF480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.28.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:91:07:29:f8:47:30:36:1b:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=735cca9a-5f43-4fbc-be9d-745fc4fdfb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:0f:2f:5d:66:27:79:47:81:3b:22:1c:e1:
                    bb:a4:8e:49:3a:84:20:10:f9:a3:34:04:02:77:f0:
                    70:fd:b5:61:c8:15:77:ec:1e:fc:5b:4e:0f:1e:95:
                    e0:ac:56:55:68:1a:16:b6:53:26:c1:98:83:39:83:
                    81:70:d2:17:06:31:6b:ce:37:aa:c7:54:89:05:41:
                    38:f6:be:41:ae:9e:2a:3a:92:27:13:54:22:b7:b5:
                    07:3e:a2:03:05:f5:e1:21:f1:35:27:f8:c9:3f:0f:
                    15:83:d3:d7:42:0d:d0:c7:64:3a:ab:e6:2e:21:54:
                    b6:bb:b1:03:80:88:cb:bd:d6:af:0c:42:1d:d6:1c:
                    97:94:0e:54:09:cb:b2:ab:1b:35:d1:eb:88:1a:e0:
                    56:60:ed:1b:1c:88:88:36:9c:eb:1a:a1:91:e9:17:
                    60:c5:a4:0f:7c:1b:9b:b9:be:bd:be:85:c0:7d:ef:
                    d3:80:d8:1f:0b:b6:dc:c9:83:f6:55:58:5f:38:e4:
                    0f:bc:c1:53:b9:fd:e3:b4:ab:f7:da:6e:f9:40:db:
                    cb:3e:00:3e:53:b6:97:98:67:58:3a:1e:de:65:6e:
                    20:81:ae:04:13:b7:4c:90:ec:37:da:74:74:31:7f:
                    2b:fc:e0:b0:66:f7:83:e9:b5:44:92:bc:fc:d8:a6:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:18:50:50:67:1B:11:BD:61:26:5A:52:D2:4D:53:70:0F:2B:D4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b2:05:c0:31:ee:9e:f5:c7:50:4b:37:5d:d1:9f:28:35:56:
         75:ba:06:9b:cc:12:58:88:0f:f0:1e:92:99:31:26:66:36:15:
         35:47:f4:72:12:23:81:5b:cb:e3:94:76:52:f2:da:8a:71:15:
         6b:5f:eb:83:93:59:b2:df:8b:e6:c0:de:91:fe:98:12:f8:27:
         22:03:d3:0c:1f:cb:07:f1:d1:66:11:3f:0a:89:7b:af:cb:e4:
         1c:a0:ec:7e:05:e4:de:8e:d1:00:76:0b:99:61:be:db:f9:5a:
         62:96:3e:2c:da:f7:75:3a:b1:5f:48:e2:1b:d3:93:4b:9e:68:
         5d:eb:6a:65:a4:b1:75:cb:b6:f3:8a:51:55:d8:b4:ad:8e:de:
         a3:dd:ba:a0:53:39:58:83:78:a9:ff:15:b3:da:90:65:37:25:
         3a:1f:53:8d:71:41:ee:b2:c9:6a:55:73:a2:a5:d2:bc:01:c3:
         c5:cc:48:36:36:dc:4d:09:81:40:1d:1a:a3:33:ee:5a:8e:3f:
         4b:2b:a7:ca:8f:89:40:4f:89:28:56:a9:9d:cc:f0:23:b0:12:
         a7:a1:98:ea:56:06:53:f8:f4:c0:5c:43:4c:4b:51:41:18:04:
         d8:b6:cc:33:97:89:91:3f:1f:56:1b:7a:40:26:85:10:5d:e1:
         6c:4b:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:44 2026 by rpki-client