Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ad94863-d092-3fed-8530-e81832492b58.roa
File:                     3ad94863-d092-3fed-8530-e81832492b58.roa (raw, json)
Hash identifier:          vJGMpumJnsD59ucxQqnMALr/jkNshvV05KVQrpsQavY=
Subject key identifier:   3F:C0:23:6A:45:D4:6B:73:84:82:C5:9F:47:11:C6:84:4A:F4:A7:18
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A533240C5F0202D660180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ad94863-d092-3fed-8530-e81832492b58.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.28.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:53:32:40:c5:f0:20:2d:66:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=36bd06ab-5d70-4fd3-ae9c-90edf3f9160a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b6:ae:bc:57:19:67:f7:c1:a8:68:cb:a5:63:
                    6d:7d:5d:9f:7e:ac:90:6f:17:1e:fb:64:f6:b4:21:
                    c8:6f:2b:4c:ce:f6:e7:3c:73:4b:c9:d5:a8:24:8c:
                    05:f1:b6:ca:b3:43:37:c8:8b:ff:3c:a1:65:1b:17:
                    ee:ef:98:58:89:55:8b:a9:01:ea:2f:00:3b:e8:38:
                    15:95:aa:0d:2d:19:bd:48:0a:90:ac:cf:96:4d:6a:
                    60:33:0f:ba:be:6a:8f:90:c9:a4:96:57:27:40:1d:
                    5d:7e:06:f9:02:bb:f5:35:17:b6:c2:5d:81:37:7e:
                    2b:4c:96:47:4f:9b:6f:43:5a:b8:0a:dc:1e:03:0f:
                    0b:b6:23:21:05:cd:43:35:2f:5d:2b:aa:00:a2:ea:
                    44:e4:ba:d5:1f:70:13:02:d8:55:ea:59:ad:f6:a9:
                    c4:ed:c9:d7:25:17:3e:bd:e7:a5:73:fd:e5:a7:85:
                    ff:25:51:36:03:03:9f:2a:46:f1:68:fe:70:8b:91:
                    6f:95:fc:be:6d:54:df:cd:43:d8:2c:dc:ef:74:ba:
                    37:86:9f:12:06:3b:6c:a1:8d:ba:64:26:dd:e4:e3:
                    c0:f0:c8:1b:c0:18:16:db:2d:02:37:c5:14:ad:3f:
                    ec:c0:96:25:69:0d:f5:e2:78:9f:e5:f4:c2:a4:ff:
                    16:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C0:23:6A:45:D4:6B:73:84:82:C5:9F:47:11:C6:84:4A:F4:A7:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ad94863-d092-3fed-8530-e81832492b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:be:95:71:19:bf:e3:1a:5d:e2:e4:3b:06:86:7c:72:3d:41:
         0e:83:ef:dd:ff:10:71:3d:5d:0f:ae:dc:24:0f:9a:9a:42:90:
         61:45:13:f2:1a:09:78:bc:5d:c5:90:6a:ba:e8:63:b1:32:c0:
         c3:47:e8:68:00:74:e2:cb:a0:dc:d3:c2:e3:fd:36:75:dd:83:
         37:93:fb:e6:ee:9c:d5:4f:69:2e:bf:f8:76:28:5d:13:a7:77:
         11:47:98:c2:d2:6a:9c:fa:04:d2:e7:e2:ea:7e:fb:70:bb:aa:
         a8:47:bb:b9:f4:4a:5c:3e:90:ce:75:68:d5:06:fc:3d:3a:9f:
         71:e3:97:36:15:be:ad:34:73:15:49:72:43:8c:07:63:2d:53:
         ae:6f:6d:63:94:96:ff:6b:2d:a5:93:ee:c6:ea:98:e4:06:18:
         19:b5:83:13:0c:2e:0f:0b:ad:56:6c:93:b9:a3:20:6f:b8:11:
         c9:62:77:52:08:ce:3f:52:3f:c8:b1:b9:fd:40:c5:41:3b:a2:
         1a:e2:b1:1c:fe:16:8f:42:97:a7:b4:d1:5e:6d:82:e0:d5:f7:
         eb:fe:79:16:c6:b2:f1:61:fe:4d:54:8f:2b:f4:95:ed:98:0e:
         0c:af:7e:8f:ad:a6:a9:7a:e8:c9:88:14:41:88:17:96:07:aa:
         b5:92:71:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:46:43 2026 by rpki-client