Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa
File:                     06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa (raw, json)
Hash identifier:          0CeJYZxtbIESX/f6sGndCdmoa29uem7vdmBBFlNJeLs=
Subject key identifier:   43:07:3F:A5:54:E6:BC:F4:EC:58:C6:F2:E6:56:7E:6C:CD:6F:1A:5C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EAA5211AA881F9A14966CC700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.18.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:52:11:aa:88:1f:9a:14:96:6c:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=bafe1626-1b90-4334-a6b5-30fa89377095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4b:d6:85:f9:3e:fa:60:5c:fd:fb:8f:06:b0:
                    88:db:d8:6b:c2:a0:23:61:c7:2a:6a:52:ba:fa:2b:
                    3a:07:e9:77:3c:b1:36:d1:66:66:05:77:45:9c:d9:
                    51:b7:fc:20:34:b9:8c:15:93:37:07:fe:a4:2b:99:
                    94:95:12:e9:5f:81:bc:d9:9d:4d:20:df:f6:6d:98:
                    01:80:9c:f8:6e:57:3e:5e:e4:3a:87:9b:70:a7:cf:
                    ee:e5:bc:86:36:44:4c:0a:6b:d3:df:86:f4:da:e6:
                    12:9f:4a:36:cf:c5:f1:15:e7:bf:1a:a1:00:e3:c8:
                    55:7e:43:22:c9:54:fc:3d:8a:40:47:b4:1a:4a:b1:
                    15:4d:78:0d:f2:4f:3f:c0:17:a0:e6:d5:eb:b7:56:
                    a2:13:6a:b1:49:b5:de:30:86:eb:34:f3:02:89:50:
                    d4:ee:98:6a:73:58:04:6e:fc:1e:7f:77:df:b0:08:
                    cf:58:9a:a5:2c:1d:8f:39:ee:09:b9:64:5d:84:de:
                    01:1c:70:81:2c:9c:49:d3:13:6a:8b:bd:19:8b:ed:
                    6f:54:c9:7c:d0:9f:5e:d3:6b:4e:59:13:cd:a4:79:
                    c7:13:19:64:c2:a1:94:20:2b:28:fd:31:ba:04:40:
                    e2:01:e6:7c:e5:d7:91:e9:16:27:fb:4b:85:72:71:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:07:3F:A5:54:E6:BC:F4:EC:58:C6:F2:E6:56:7E:6C:CD:6F:1A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:fa:e8:33:1a:b6:3a:11:60:22:45:07:4a:51:cf:5a:cc:57:
         a7:f8:11:e7:8b:52:9c:70:a1:70:b9:e5:8b:6c:b3:6b:2e:fd:
         32:d4:fb:44:c7:1d:f5:c1:31:e5:78:a0:1a:dc:86:04:48:f9:
         0f:ae:c3:69:f0:1d:f3:44:1f:88:67:4f:11:0c:df:ff:aa:1d:
         8a:3b:d0:4c:9c:62:10:1b:72:bd:a3:6d:f6:c8:48:33:db:38:
         46:e2:b2:ca:03:e7:7e:19:02:12:61:74:aa:06:e5:da:03:97:
         79:99:50:b4:fb:e9:c6:e6:69:a9:27:c7:fd:8a:40:f3:90:77:
         46:53:2c:9c:54:f3:3c:b3:75:42:bb:51:89:79:6c:56:52:f7:
         9a:22:89:b3:6e:1a:e1:c6:a8:19:9a:6e:ef:ca:eb:9b:eb:bc:
         69:71:ec:28:14:3b:7e:7b:59:10:7f:98:43:f5:93:70:77:c6:
         46:c7:12:58:39:4b:c4:2e:d3:05:b5:82:3b:26:04:4b:bf:d9:
         39:20:09:91:3f:92:04:21:e7:1e:bd:b8:7e:11:fc:4b:87:93:
         6b:43:7d:f6:8f:e4:34:e5:02:2e:c9:0a:b2:54:ee:5f:42:bc:
         78:cb:8f:4a:94:f5:be:97:67:1c:a1:7f:f2:2d:08:73:81:05:
         2d:1b:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:58 2026 by rpki-client