Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa
File:                     2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa (raw, json)
Hash identifier:          MYVaRjQLfxu35Pon8iKHvY9mlkZlZfMQF5QjYY58rps=
Subject key identifier:   F4:73:1B:4A:01:54:C6:06:45:E5:F0:6A:80:45:96:CF:3D:03:77:45
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79C961F6D97651B19A70980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.31.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:96:1f:6d:97:65:1b:19:a7:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=99409b1d-5999-466f-9a92-ab4ea4a758b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:a1:60:0c:d0:92:c8:a5:79:d3:ad:4e:ea:
                    2f:78:f5:e1:23:71:9b:86:3b:fe:20:bb:05:ab:21:
                    c8:49:97:8d:a8:35:af:7f:da:55:79:8c:c4:9f:06:
                    ed:23:75:f7:3a:6f:f9:4d:e6:97:45:28:33:6b:39:
                    3f:9d:32:c9:52:02:e2:b3:b9:e4:f8:e8:a9:7a:00:
                    45:21:f3:53:d5:24:ff:d9:f8:8a:9e:f9:da:d7:8a:
                    f1:7a:14:2b:e2:dd:24:9c:70:99:21:88:e7:f8:2b:
                    31:4f:2b:5b:45:7d:16:c5:cd:0e:09:76:fa:02:90:
                    fb:ba:67:85:ea:ac:f6:55:ac:83:15:90:5b:63:dc:
                    a2:0a:17:b9:14:88:bb:fc:68:62:dc:79:21:23:1b:
                    d3:c2:43:c1:d7:73:3a:44:ce:7e:0d:32:8a:d2:b2:
                    a5:25:f5:47:45:7c:79:9a:ab:65:8e:e1:7b:9f:c2:
                    6a:79:c5:a5:60:fe:3a:16:22:22:e9:bc:b9:a6:73:
                    aa:c6:69:e6:fb:29:90:67:01:8b:ba:37:58:e7:af:
                    ff:bb:2d:7d:98:05:dc:91:ab:f1:59:d6:fb:5d:9a:
                    18:7a:64:2b:38:cb:37:87:2a:0b:1d:12:ff:13:fe:
                    10:ed:2d:fa:8a:43:c4:23:e7:b5:a7:43:12:4f:ff:
                    85:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:73:1B:4A:01:54:C6:06:45:E5:F0:6A:80:45:96:CF:3D:03:77:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:18:f5:d9:d9:b1:a8:be:21:a4:cf:72:ff:78:3f:a8:57:de:
         b0:0e:54:0a:99:fc:8e:e4:d4:ab:b0:8f:64:db:22:06:d5:a0:
         3f:bf:9a:88:62:a2:96:e3:df:cf:da:b7:e1:39:06:0b:50:26:
         04:a0:1f:18:15:bf:31:db:82:97:49:a0:8a:58:5a:09:24:76:
         5f:45:9b:94:93:0e:a7:05:79:d7:cc:e1:b3:54:02:96:04:5c:
         2c:0d:ca:1b:47:58:b6:0b:95:e5:40:4b:c8:3d:5b:96:09:0b:
         70:6b:f0:7d:f6:36:1f:ec:7d:f3:3f:6c:c2:18:78:9b:fa:b0:
         1c:61:1f:71:50:f9:63:cc:57:e1:dc:d5:5e:fc:2b:7b:10:06:
         e5:9d:23:68:e6:d5:2c:58:48:6f:fd:84:59:29:fd:2b:60:29:
         2d:f1:ff:a5:38:ed:a2:31:11:f7:c7:cd:69:c8:97:82:1c:2c:
         3b:63:68:ab:37:c0:d0:7a:e0:e5:58:0e:18:17:3d:ef:2b:62:
         f2:87:42:aa:fc:5a:e8:a2:59:76:0e:78:e5:aa:79:db:35:71:
         10:0d:58:eb:02:84:8c:ec:29:ac:b6:0c:fc:9a:79:2b:cd:f4:
         5b:b8:96:4d:e8:af:6d:0f:21:07:c5:82:f3:98:24:ec:b1:29:
         5b:d6:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:28 2026 by rpki-client