Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ad17770-913b-3fe8-b05d-a77782092748.roa
File:                     3ad17770-913b-3fe8-b05d-a77782092748.roa (raw, json)
Hash identifier:          Pr3C0PKPLw1QVIhUnhFevaOULnxHlqC7sIFOToknlKM=
Subject key identifier:   DB:46:33:87:9D:3D:52:70:C5:BD:2E:43:64:6D:46:8A:7E:64:FF:5A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A0006A5A0FC85795FBCA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ad17770-913b-3fe8-b05d-a77782092748.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.19.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:00:06:a5:a0:fc:85:79:5f:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=da7152d3-3485-4d54-981a-e94f4812fc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:ca:a5:ca:a8:7a:75:1c:4d:94:60:ea:68:
                    36:1a:77:d5:b1:66:76:ba:21:6c:d0:6f:a0:fa:d2:
                    51:d7:8f:e7:bd:de:6e:9a:fc:58:8f:d6:c8:54:7e:
                    6b:f5:56:66:be:f4:86:ce:6a:95:31:f4:30:d4:42:
                    07:ee:7d:27:04:5f:1e:84:eb:d7:a1:7b:4f:60:62:
                    52:6e:5e:d3:d5:c1:5a:e1:a4:3e:ad:b6:ca:5d:b9:
                    28:36:f6:38:1b:33:a6:01:a8:75:86:b2:1b:eb:77:
                    78:0e:3e:93:24:47:03:75:70:4b:e9:5b:18:87:35:
                    9c:2b:90:87:28:8d:10:96:b6:95:53:ca:45:dc:15:
                    0a:dc:d9:87:e6:1d:ce:3a:ab:d1:b4:2f:5a:75:8a:
                    0d:54:18:6c:b4:d4:c6:a5:e6:99:7f:36:41:3a:72:
                    86:93:9f:e1:f8:d9:61:89:f0:b1:8b:d3:41:00:9f:
                    73:4c:86:67:50:57:c9:b1:15:26:d3:94:47:99:14:
                    af:da:08:35:77:ad:c4:8a:d9:0b:c8:b8:4d:b8:28:
                    43:b2:ff:62:65:53:98:d7:c6:b6:3c:e0:db:a6:cd:
                    e6:d9:e6:c0:47:3a:2c:e2:b3:68:2c:25:17:d9:bb:
                    ed:28:9a:85:c1:31:54:12:b0:49:e6:db:e4:72:aa:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:46:33:87:9D:3D:52:70:C5:BD:2E:43:64:6D:46:8A:7E:64:FF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ad17770-913b-3fe8-b05d-a77782092748.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:75:67:fb:d5:c3:74:65:5f:c8:f2:a0:28:df:e9:b0:21:69:
         0e:0f:0a:68:57:d6:b4:f9:b4:2b:f4:e2:c4:01:ee:a4:27:35:
         d6:bd:26:c5:8d:71:39:ea:e9:30:7a:2b:e7:bb:a0:d3:34:fd:
         7b:54:b1:b6:31:4e:1f:e6:8d:89:11:67:f4:23:fd:5c:9b:92:
         43:3e:75:29:13:6f:9a:23:98:61:08:74:0e:18:ed:26:cb:d9:
         0c:d1:ed:c4:c2:15:fd:70:0a:6f:fb:93:b7:4d:6c:c5:07:5e:
         81:bd:cd:70:93:5a:8a:b3:7e:e3:ad:2e:12:98:1b:9d:6b:11:
         65:30:ad:18:2e:2e:8b:bf:82:6c:c0:a3:59:c4:fa:c6:be:fc:
         25:35:57:9f:34:58:71:69:e2:4d:d2:f7:00:9f:3f:41:35:8f:
         56:b9:ff:d5:54:5f:d1:f8:88:97:00:ea:f6:3c:0e:9b:e4:17:
         1e:d3:73:9d:c0:d5:73:9a:50:56:47:bc:44:62:d5:95:da:9c:
         dd:91:18:9e:cf:f5:fe:6b:76:37:eb:2b:fa:8a:9b:2b:27:af:
         85:d3:eb:7b:1e:b7:7f:b5:07:7d:c1:20:fd:f5:48:8d:c8:b2:
         dd:c8:74:16:13:f8:5e:3c:94:2c:36:61:73:a4:02:bb:19:db:
         c1:d1:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:06:11 2026 by rpki-client