Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4272c0ef-7742-3f30-99a1-e49131d9029b.roa
File:                     4272c0ef-7742-3f30-99a1-e49131d9029b.roa (raw, json)
Hash identifier:          DF8Vbj54RwCchwpH2kMFpde15hP1phW+HSfdqvTX/+4=
Subject key identifier:   FA:93:8A:52:C4:6B:C7:C0:88:06:6B:B4:32:81:DC:A0:04:7F:72:54
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1707CB304158E9FE04B60900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4272c0ef-7742-3f30-99a1-e49131d9029b.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        150.195.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:cb:30:41:58:e9:fe:04:b6:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=adbf1566-23d2-44b2-a8a9-7d0b3f58609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:44:1d:59:24:e8:8f:38:e0:05:38:43:13:
                    5c:87:84:d5:7d:52:a6:61:51:a8:e6:2e:30:36:af:
                    14:60:0e:c6:92:a6:86:5b:40:7a:97:70:88:98:15:
                    2f:0f:54:60:70:0f:6b:6b:e1:b4:64:09:90:52:1d:
                    a0:b2:b8:0d:fd:a1:4d:23:6e:d5:25:1f:05:d3:62:
                    0e:81:9f:dc:e3:b0:8d:d1:34:02:4e:bf:95:d9:de:
                    2f:5e:07:8a:36:ee:46:77:ef:d6:36:7f:9c:05:f2:
                    fe:8f:ce:d1:d4:5d:95:b4:a0:a0:50:03:34:04:e7:
                    02:6a:7e:19:ae:ca:4d:eb:d3:66:07:f2:b4:1d:af:
                    ae:0f:49:44:0a:9b:7f:c5:53:e8:5d:ea:5b:49:b8:
                    a9:3b:23:41:76:2f:23:bf:c7:4c:29:6e:4a:4f:3b:
                    70:b8:2d:79:1a:71:aa:f0:ec:b9:da:76:e9:78:a1:
                    a6:a6:e3:1a:08:1b:b6:59:9d:af:13:05:ca:15:9b:
                    62:9d:7f:d6:63:a2:a7:ab:85:37:49:99:43:08:5f:
                    84:18:df:51:57:d4:3b:75:5b:7b:77:04:e1:8f:5d:
                    6b:b6:d4:c0:ab:36:b2:76:3e:01:ae:52:f3:ed:8b:
                    77:46:c8:22:35:b5:18:80:93:48:3c:44:4e:f0:7a:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:93:8A:52:C4:6B:C7:C0:88:06:6B:B4:32:81:DC:A0:04:7F:72:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4272c0ef-7742-3f30-99a1-e49131d9029b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:69:7f:e7:5e:78:81:91:08:20:5c:7f:63:e4:94:61:5a:
         5d:94:58:56:90:8b:4d:79:27:8a:1f:ac:7d:6c:a7:e2:24:4a:
         32:c5:33:c7:a5:80:a7:8d:c1:c5:3d:07:ea:14:8d:bf:3b:28:
         fe:2e:06:32:1d:75:f7:18:50:ba:1c:c9:ad:9b:8b:db:2e:fd:
         8f:34:f4:a7:8c:c8:81:70:e2:ff:93:c4:8e:5d:3d:14:ca:41:
         45:bf:1d:cd:5b:83:e6:92:5c:24:70:59:0c:49:95:15:db:f1:
         10:21:7b:74:b7:62:da:70:d2:4b:0c:78:df:ff:91:5a:84:b6:
         16:65:6a:97:07:1c:79:26:2f:5b:58:12:1c:c8:3e:1d:7d:d2:
         a2:0a:69:43:ca:99:44:03:af:10:c2:38:95:c1:de:a9:73:54:
         35:b5:c6:ba:ac:60:73:a9:85:cb:e7:d3:61:a9:a4:ef:35:a3:
         c3:0d:f2:30:a1:82:b9:ef:5a:60:ba:6b:ec:10:e5:e6:a3:d9:
         36:dd:52:93:81:93:c2:98:53:ed:07:c5:64:c3:0b:72:24:ab:
         e4:b5:95:08:a1:61:6e:eb:e7:d8:fe:dd:1a:fb:96:64:da:70:
         d1:d7:91:0b:74:7b:7d:7e:d8:a1:91:40:00:67:e7:bb:0c:31:
         0b:fa:6e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:46:14 2026 by rpki-client