Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c28e281f-bdf7-3fb7-b6dd-c5899247707a.roa
File:                     c28e281f-bdf7-3fb7-b6dd-c5899247707a.roa (raw, json)
Hash identifier:          lIJ0QyF3lLReVynp+MhN9SjJzZvY3+iXSK1Ur1RfDZE=
Subject key identifier:   06:99:FE:13:33:1A:4C:0B:39:B6:EA:18:CD:F2:AE:9A:0F:7E:47:7B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AA1BAE068D215C0BE45FA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c28e281f-bdf7-3fb7-b6dd-c5899247707a.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.22.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:1b:ae:06:8d:21:5c:0b:e4:5f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=f8fbd62f-9c1a-4fa6-8e5c-d9885eae6f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:ac:c6:6b:02:2f:61:ee:41:37:a8:d0:45:
                    6f:2c:4e:a5:45:19:ab:5b:3c:57:1c:88:72:91:6d:
                    2d:7f:0c:60:f8:7d:bf:79:44:ff:ea:76:41:e7:56:
                    15:ad:9b:d4:0a:e9:4b:e4:d0:88:ac:a6:bd:98:b8:
                    3c:e6:f1:21:33:ec:40:b6:e3:2c:0c:4f:d7:6d:a4:
                    f9:f4:fa:ad:b2:f1:b0:c1:6a:f9:fb:dd:dd:d9:d5:
                    68:40:45:61:6f:c6:2c:ed:8c:26:3b:7f:df:88:a5:
                    3f:fb:e2:58:72:8f:a1:62:89:05:5c:e4:42:5c:d8:
                    34:30:7c:cb:a4:99:c3:7c:11:44:9a:80:bb:c1:b1:
                    ea:97:d2:5d:71:19:ad:4a:4b:e0:00:e2:e4:10:3b:
                    94:6c:c6:d8:c5:21:d8:b5:dd:f2:de:00:62:8d:70:
                    ed:21:11:2d:e8:49:69:1a:c5:09:a4:88:90:ee:72:
                    58:96:cd:25:ed:fe:ce:a0:d8:8d:30:3a:cf:59:e2:
                    0b:40:f9:72:cf:bb:40:76:c9:a4:6c:36:22:3e:ec:
                    aa:25:8d:ef:ae:a0:e9:b9:ec:c2:01:7e:c7:c0:8c:
                    38:2b:d6:3d:3e:99:bd:99:7e:1c:80:b3:ae:fe:31:
                    c7:0e:2c:0c:39:65:4c:6c:30:6e:58:1c:22:da:28:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:99:FE:13:33:1A:4C:0B:39:B6:EA:18:CD:F2:AE:9A:0F:7E:47:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c28e281f-bdf7-3fb7-b6dd-c5899247707a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:df:37:1f:86:2f:21:fb:7b:a5:9b:7d:cf:69:4c:2d:d3:d5:
         78:cc:37:d0:31:a5:2b:01:a1:32:b8:b5:8f:d2:57:1c:19:47:
         88:2f:b6:80:dc:50:07:03:7b:35:ed:2c:7a:af:26:82:76:02:
         52:57:67:29:34:c1:7a:3f:6c:ff:95:e1:06:a0:26:fb:e7:13:
         e0:42:84:cf:fe:c1:4f:17:bd:75:af:1a:f2:7d:28:ef:16:2c:
         4d:25:73:4f:40:7c:c5:4b:c8:ff:ea:3f:e4:ee:0c:d3:2d:75:
         5e:55:8b:5a:5a:22:1e:1e:0a:e3:9c:12:ae:4f:90:72:7b:58:
         7a:9a:19:16:52:98:e6:53:f3:9a:51:fa:51:67:68:ea:19:7e:
         c7:f3:dc:76:38:06:54:29:2e:da:94:f5:67:d2:8e:09:89:7f:
         53:ae:7f:18:19:60:91:01:72:b5:72:dd:db:69:48:c3:f4:e8:
         2a:ec:2c:9c:9c:7a:1c:a2:a2:a8:c4:67:de:d6:df:3c:62:4e:
         03:da:5f:38:d0:75:79:a9:8a:13:45:20:75:74:5f:a1:17:1a:
         ec:06:75:21:ce:c7:58:ae:59:6a:80:1a:6c:7c:20:1b:7a:2c:
         5b:d2:0b:b8:a6:b8:25:3d:da:be:4f:46:0e:ff:63:fb:86:cf:
         50:27:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:36:02 2026 by rpki-client