Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbf9884f-4a07-3f1b-a367-804be1a437d0.roa
File:                     fbf9884f-4a07-3f1b-a367-804be1a437d0.roa (raw, json)
Hash identifier:          UVwrdWCrQ1G+DtPu9cuz09UAq+mZN7IHNw1U7vNcqBY=
Subject key identifier:   30:8E:24:2B:CF:67:B1:8C:92:BE:A9:DC:16:09:BD:58:30:7A:96:86
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D3DFF8FC6B062EEB7DAE2AB80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbf9884f-4a07-3f1b-a367-804be1a437d0.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        173.24.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:8f:c6:b0:62:ee:b7:da:e2:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=ecbbe137-1f9b-4e08-999b-90364fa3b6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:1f:87:1a:7e:96:0a:f5:0f:65:29:d1:18:
                    2c:11:70:11:3b:31:70:d6:78:6c:d5:ea:9a:3b:d0:
                    4b:41:e7:04:2d:32:85:52:9d:0f:ea:84:af:e6:b8:
                    f3:a6:86:8a:52:b5:50:ac:2c:32:6e:26:99:8e:2d:
                    2b:9d:04:01:88:dc:f7:95:d9:3c:57:f1:70:38:52:
                    8c:1e:15:f4:0b:f7:94:a8:4d:15:a2:2b:04:9b:67:
                    2b:3d:15:29:6c:fb:3e:b0:fe:e2:ad:e0:10:fc:69:
                    73:fc:8c:0a:92:22:36:aa:81:83:8b:a6:c2:25:b9:
                    56:84:06:49:ef:a5:fc:75:db:70:a7:15:70:fe:16:
                    68:f2:6a:5e:a4:82:9f:92:3b:df:75:ee:6a:92:35:
                    11:fe:22:ab:08:d8:7b:d5:cc:79:5b:9c:21:bc:09:
                    20:65:86:48:ea:40:b0:2b:a6:f1:4b:4a:ab:4d:32:
                    d0:3a:87:3a:9c:34:cc:4a:4a:3c:84:59:76:05:c3:
                    2b:40:cf:32:51:18:8c:ec:9f:c4:89:7d:cc:7f:9b:
                    46:03:2f:e1:c7:55:f8:76:9c:d3:22:89:39:d8:b0:
                    73:33:f2:5e:5f:d1:3f:53:71:95:25:88:00:61:5d:
                    fb:98:10:17:e5:a9:0b:de:3d:2c:6b:59:1e:bb:6c:
                    4f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8E:24:2B:CF:67:B1:8C:92:BE:A9:DC:16:09:BD:58:30:7A:96:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbf9884f-4a07-3f1b-a367-804be1a437d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0f:30:db:71:6c:9f:56:2a:c1:87:59:66:0a:9d:89:3b:36:
         40:10:0e:1f:d2:4a:75:79:58:c6:61:fd:30:54:b9:69:94:cb:
         24:20:06:65:c5:1a:07:08:68:7c:ba:3f:44:15:f2:94:2f:5f:
         84:c8:02:8c:a9:7f:ae:8d:81:0b:8a:55:6c:89:78:c9:34:90:
         f2:b5:f5:bd:7f:20:b2:e0:84:c8:f4:eb:53:33:ff:66:c0:ef:
         6f:d3:41:db:48:6d:7e:3c:68:ff:51:ce:9c:f9:57:13:29:7f:
         2f:4a:66:95:a9:b7:1d:e1:f7:44:a1:b2:a4:62:0f:2d:26:de:
         c4:01:91:cf:cd:ae:62:cb:c6:f4:e2:52:6c:f6:ee:f7:27:a5:
         07:dd:4a:e9:04:e1:56:9b:9e:b5:41:54:46:18:6b:f2:31:4f:
         0f:ee:8f:67:b4:ce:bd:24:ee:8c:f2:e4:08:ae:63:47:bf:c7:
         1f:ac:11:61:54:b9:49:cf:4c:b0:72:62:69:b1:d2:37:85:75:
         cd:23:37:31:b5:df:d7:df:76:95:e6:73:9e:d6:b2:07:1d:0f:
         b8:7b:e6:dc:c6:f2:cf:ba:f9:4b:4e:d3:67:02:c2:ea:4f:93:
         2b:ca:44:84:c3:ae:9c:08:2d:c5:ad:6b:33:24:5f:1c:68:58:
         9f:6e:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:35 2026 by rpki-client