Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eba17b1f-ecef-387a-8a33-62091efe8e16.roa
File:                     eba17b1f-ecef-387a-8a33-62091efe8e16.roa (raw, json)
Hash identifier:          6Na2xtpqoGigSFDMW0NcKnTaGvkbweoXF5Y8YKbSxvw=
Subject key identifier:   75:C2:8A:58:B8:00:EC:FB:FD:B6:3A:FD:3E:22:31:CF:60:6E:9A:CF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AABE2DC66DB956AECC13A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eba17b1f-ecef-387a-8a33-62091efe8e16.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.19.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:be:2d:c6:6d:b9:56:ae:cc:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=039e7456-5df0-408d-837a-6685499a4c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:98:93:87:f7:c6:8c:a3:59:42:b8:3d:88:58:
                    48:de:11:9e:07:a5:bd:d9:e6:7d:c7:87:18:4c:82:
                    c5:54:e7:05:15:03:d9:b9:ea:60:5b:bb:67:38:67:
                    70:f6:12:67:4c:65:38:dc:0f:73:77:ee:73:87:77:
                    89:77:e9:20:ce:e2:aa:75:43:40:59:37:2a:5a:aa:
                    f7:cd:08:c7:f6:7c:bd:4a:5d:b7:50:43:89:fd:e0:
                    d3:e1:58:c1:8a:dc:a1:c7:30:c8:1f:c4:a0:25:5d:
                    eb:60:88:43:e7:40:06:52:33:ad:33:cc:7c:64:bc:
                    15:ef:33:34:a5:ea:6a:da:1e:6d:6e:b4:34:0c:8b:
                    d1:41:9d:6f:42:c7:bf:cd:8a:11:3d:db:b4:d3:8e:
                    07:94:6c:ec:39:d0:74:e7:5a:67:c4:8c:fe:40:4c:
                    42:85:6e:d6:09:8b:74:f0:9f:99:b7:f1:30:fa:a0:
                    ab:90:12:36:d6:1b:85:52:fe:ea:df:6c:30:5c:7b:
                    85:e1:cd:22:67:43:a1:5d:25:62:03:59:f6:b1:8e:
                    9c:96:80:9d:44:d7:02:10:9e:bd:15:ee:57:5d:4d:
                    91:3f:ba:3e:de:98:8d:fe:79:18:ad:aa:22:a1:e1:
                    21:ca:3e:0b:db:4c:8c:4c:2f:bc:dc:bc:9d:4a:77:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C2:8A:58:B8:00:EC:FB:FD:B6:3A:FD:3E:22:31:CF:60:6E:9A:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eba17b1f-ecef-387a-8a33-62091efe8e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8a:a5:a9:dc:5e:1e:06:74:3a:ad:e5:86:ad:c6:32:b6:bd:
         e1:d4:ca:39:87:1b:80:90:4a:36:60:e3:36:55:4e:ea:1e:db:
         62:3c:8d:78:a5:5e:f1:ee:24:5c:e0:c8:2e:c0:ca:5d:81:2c:
         ce:10:dd:3e:55:d6:0d:41:0b:a2:e3:6b:c0:6f:57:5d:e6:f1:
         78:94:8c:5a:ec:ab:32:c1:1e:3f:ff:78:34:a5:34:9d:4f:25:
         38:e5:25:4b:2e:ad:4b:75:50:13:d1:87:7a:ba:61:64:8e:8b:
         fe:64:99:53:cd:9b:92:c0:6a:00:47:c5:09:9b:a0:d5:49:7e:
         1c:c9:60:65:3c:1a:6a:da:06:c0:8a:a2:ff:70:0b:29:93:c4:
         95:3e:ab:18:3c:8d:91:a7:21:1f:5d:7e:9e:4b:f5:e7:34:f2:
         0f:be:c3:8e:ee:8a:7a:f0:f7:2e:53:ae:70:36:e0:51:8c:76:
         0a:bd:a5:61:f1:df:30:f6:38:97:b3:a9:9c:83:43:79:50:eb:
         c3:bb:bb:24:65:12:a1:a0:00:82:da:bf:9a:c8:9e:06:39:e5:
         b4:c0:da:f8:0e:b7:be:79:86:ac:7e:4e:d5:a2:ef:98:63:73:
         2d:36:ba:fb:45:64:7e:d9:47:0b:22:96:16:07:de:51:d2:f0:
         c5:df:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:52 2026 by rpki-client