Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35409d78-9d9f-3d1e-a315-42d4826fe06d.roa
File:                     35409d78-9d9f-3d1e-a315-42d4826fe06d.roa (raw, json)
Hash identifier:          wyvidGv5ktoBak9vwAZ0tI+wyOTeKRbK7UmyXB29Ym4=
Subject key identifier:   62:D1:16:31:D0:AF:1A:04:79:5E:90:0D:F7:CF:FD:05:43:B3:31:D1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A463D222B95003F02EB80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35409d78-9d9f-3d1e-a315-42d4826fe06d.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        150.195.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:46:3d:22:2b:95:00:3f:02:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=84919490-65f5-4820-b99f-f4c2c175fb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:1b:f8:b6:f3:3d:2c:bd:b7:21:f5:61:75:
                    eb:1d:01:86:79:5e:99:42:9b:5d:3a:3b:a1:5d:d4:
                    f8:e2:59:8e:1d:96:11:2b:9c:40:31:bd:f8:af:29:
                    f6:41:46:3c:ea:f1:6e:cb:c2:aa:d8:2e:2c:4a:72:
                    75:04:7b:44:10:d5:08:45:06:bb:5e:a5:fb:c7:52:
                    87:7d:bb:46:3f:8f:fc:fb:10:f1:78:32:b8:88:92:
                    61:72:37:fa:9a:e7:55:7c:54:07:cb:95:77:1a:aa:
                    ad:7d:e1:51:71:7d:59:b5:73:69:c0:2d:9d:7c:a2:
                    37:c1:c1:01:fd:58:50:da:c9:a3:44:1b:19:cb:a0:
                    62:45:55:2a:ad:81:65:5c:05:72:fd:ba:bc:1c:e3:
                    be:19:5a:46:cf:71:f4:0f:db:a0:ee:de:e8:7a:11:
                    51:fe:ec:5e:2d:e4:2d:79:f7:9c:6f:da:0f:b1:f7:
                    ca:69:f5:59:5d:a8:e4:0c:d4:6d:40:6b:e6:a6:32:
                    61:0b:6a:4b:54:4f:fb:6c:5a:e8:a0:7d:39:1e:1f:
                    16:f7:b7:b0:44:a6:d1:72:5b:9b:3b:b3:28:3a:d4:
                    b6:69:63:c5:39:94:49:0b:1d:75:f0:97:2a:c8:72:
                    b7:57:64:38:ff:08:a8:9a:51:44:96:5e:34:52:00:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D1:16:31:D0:AF:1A:04:79:5E:90:0D:F7:CF:FD:05:43:B3:31:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35409d78-9d9f-3d1e-a315-42d4826fe06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:df:28:c8:71:10:fc:8a:00:b9:fd:f1:b3:f6:b1:69:94:
         d2:e6:ef:1a:88:48:6e:6b:41:a8:42:62:c0:05:3b:d7:40:e5:
         8e:6e:57:49:8d:63:fb:68:6e:62:ad:36:e3:9e:55:ca:1b:ec:
         0f:5d:d2:3a:52:a7:16:59:a6:1a:f0:8d:53:78:06:53:69:49:
         bc:67:ad:3b:28:da:72:d0:36:15:7a:43:fc:52:f3:09:0c:4e:
         b8:1b:4b:a6:6f:b7:54:72:ed:04:d8:4a:e2:4d:02:fb:d0:73:
         9f:f3:43:9b:64:2d:b5:33:0b:3a:42:a3:60:8d:da:1a:2d:c5:
         d5:8e:4e:5e:04:e8:c0:37:ae:35:f0:62:7c:88:b1:03:b9:1f:
         dc:39:84:86:be:cc:0e:82:fb:29:1e:ee:d4:9d:8f:b4:61:0f:
         27:23:f4:81:f2:d8:9e:2c:ae:32:8f:3f:36:ba:05:76:98:5c:
         d3:b9:34:8f:5b:ad:b6:df:fd:39:36:61:5b:ec:72:54:a5:46:
         76:83:50:ef:24:60:31:b0:dc:4b:2d:6d:f3:fb:a8:3d:35:ea:
         29:c2:c8:91:30:fd:44:04:8f:dd:53:bb:de:37:36:c8:eb:a8:
         98:c0:4d:7a:5f:d6:bc:79:87:09:27:78:d6:05:e6:c2:89:24:
         15:6b:38:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:04:40 2026 by rpki-client