Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/161da5aa-ec1c-3a7a-ae21-2e0a9a6777a8.roa
File:                     161da5aa-ec1c-3a7a-ae21-2e0a9a6777a8.roa (raw, json)
Hash identifier:          FPXEKEHTio1kLBZf44hOh+m/HAMB7JIvm2Yp7gRXc48=
Subject key identifier:   35:4D:7B:AA:BF:E8:3A:8E:F0:05:82:15:35:79:3A:A5:AB:32:E7:4A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA797C35AAA378273BCAE3D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/161da5aa-ec1c-3a7a-ae21-2e0a9a6777a8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        150.195.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:c3:5a:aa:37:82:73:bc:ae:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6a7ffb10-6ede-45e4-8782-e0de680065b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:25:8f:54:03:78:5e:a1:e7:38:98:f7:a6:
                    56:cd:84:31:f4:1e:9c:9f:34:73:eb:5c:69:2b:df:
                    a8:6c:30:de:00:f8:da:c8:43:0a:99:6a:ee:93:f2:
                    49:21:76:c1:11:9a:6c:69:2d:28:99:27:28:05:64:
                    48:b5:31:07:bf:e8:ff:ce:78:3f:e1:1b:6e:fa:00:
                    95:b7:2b:b6:7e:41:a8:bc:f3:fd:66:d7:4f:69:23:
                    c6:08:e2:d1:d6:5a:d8:af:6d:1e:be:67:34:dc:0c:
                    8d:42:04:be:b3:cc:81:0c:c2:60:0a:2a:43:c7:b1:
                    84:f5:b1:1b:28:fd:3b:25:e4:cd:91:e3:fe:db:e8:
                    12:fb:b3:1f:5b:9d:8c:ff:4e:e6:d4:dc:04:f1:69:
                    47:0b:58:d0:5a:78:b6:ea:bd:f0:ba:6c:35:65:4d:
                    6c:65:72:71:6b:25:3b:0b:6b:34:1b:38:fe:4f:fc:
                    fe:52:94:56:c9:5f:1e:09:78:e2:84:cc:56:69:f6:
                    48:00:ec:5f:47:5a:d5:55:b9:e6:33:e1:ad:69:50:
                    ef:31:ab:c3:5c:d7:b1:51:94:50:14:03:27:41:0b:
                    fd:4c:68:3a:83:dc:80:96:c7:f1:72:4b:04:20:e2:
                    11:bc:89:b6:df:fa:73:47:db:40:66:c4:d6:83:de:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4D:7B:AA:BF:E8:3A:8E:F0:05:82:15:35:79:3A:A5:AB:32:E7:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/161da5aa-ec1c-3a7a-ae21-2e0a9a6777a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:9f:0d:70:58:97:89:27:00:68:7a:0e:29:a0:ca:39:71:fd:
         55:92:78:23:be:ac:56:cf:f3:ce:6d:2d:b6:fa:90:98:d8:c6:
         ba:e8:f7:95:71:66:c8:fd:d0:18:86:bc:95:24:32:46:d2:24:
         bd:4c:35:c3:31:56:73:64:52:5b:dd:81:84:25:15:17:a7:38:
         cc:a8:03:16:00:de:f9:1a:78:cc:39:28:eb:ed:c0:d6:17:a3:
         4a:1e:ab:06:4d:11:96:8e:09:80:f1:cf:8a:03:9c:52:12:0e:
         6e:c7:3d:f2:a9:f1:a6:9d:9e:b2:a2:2a:17:38:56:e5:18:fd:
         91:53:d9:c3:1b:5b:67:1d:3b:0a:d4:47:6e:9b:91:a3:b6:07:
         75:c9:b8:a0:9c:0f:ef:84:8e:e0:ba:88:31:d7:95:aa:0a:27:
         87:60:93:48:92:6a:a8:24:c4:c6:88:68:e1:c1:88:2a:8d:26:
         5c:e3:40:2b:9f:c0:a6:8e:6f:15:be:6c:ba:8e:2f:15:3f:87:
         7b:9c:cd:ae:52:7c:53:28:ff:de:5b:3b:2d:28:d5:b6:3e:a6:
         b1:ee:b4:a3:61:1f:70:c0:bd:e9:50:01:36:2c:82:e0:39:24:
         f8:c5:f1:26:a6:fc:d0:78:18:53:f5:ff:b3:f5:37:e4:60:ed:
         ff:0f:20:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:43 2026 by rpki-client