Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64437a86-6701-34f2-bc7b-5371dce837e9.roa
File:                     64437a86-6701-34f2-bc7b-5371dce837e9.roa (raw, json)
Hash identifier:          TUJT+OjfVqE8RaYFgCW6GgyTblLIS3iy8+Kph44JTNE=
Subject key identifier:   03:DB:DF:34:8F:A6:9A:7E:B7:15:3B:62:E3:08:D9:54:FC:EC:A8:3D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A51868757102D2A722B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64437a86-6701-34f2-bc7b-5371dce837e9.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.31.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:51:86:87:57:10:2d:2a:72:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=164e044d-a026-427e-9da8-1ceba59c1547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:46:ac:f1:f3:08:56:b2:11:34:bd:71:b9:
                    b9:31:10:ce:a1:18:cb:af:e4:30:ce:9c:c8:36:e5:
                    61:94:43:ff:34:7a:45:53:b1:3b:5e:9d:bf:44:73:
                    8e:36:92:ef:c2:76:61:49:99:7a:e0:1e:8a:d8:db:
                    70:eb:f2:f3:2b:be:e2:9c:1d:74:28:ff:56:5a:de:
                    8c:7a:94:5b:34:98:b7:52:4a:6e:71:f5:1e:4a:88:
                    bb:43:33:dd:07:39:2e:78:8b:01:0e:cc:e0:ac:02:
                    d5:ed:32:ff:39:28:13:33:35:4a:f1:c4:ec:80:52:
                    f1:f4:9e:e9:56:a8:28:7a:59:7e:95:59:0d:39:e6:
                    28:7c:5b:ce:1a:2f:4b:bb:15:a2:d2:47:d0:eb:31:
                    03:19:ec:63:85:4b:f1:49:79:b7:9b:8d:03:21:b7:
                    04:b7:aa:f3:62:d3:73:ec:e6:bb:25:6c:c6:a8:25:
                    38:9c:90:6c:49:ee:5e:a5:2e:75:37:c6:a9:48:e1:
                    58:a3:b7:29:0d:2d:80:2d:fa:09:2e:41:9f:1c:11:
                    fd:57:18:8a:a3:bf:cd:4d:f4:fe:5b:26:9f:da:82:
                    1d:04:25:64:30:6e:df:2f:9d:86:a9:9d:14:14:f8:
                    7d:f1:20:18:b3:fc:87:09:74:38:07:0e:f2:f1:63:
                    f4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DB:DF:34:8F:A6:9A:7E:B7:15:3B:62:E3:08:D9:54:FC:EC:A8:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64437a86-6701-34f2-bc7b-5371dce837e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:66:57:aa:17:2e:8d:81:7d:2e:5d:4b:2f:4a:13:ef:9d:d1:
         95:5d:3b:d1:76:68:22:43:8d:fe:6a:ce:de:0a:2c:72:c1:89:
         36:9c:22:c8:74:f0:78:82:bb:57:71:b4:30:39:98:38:9a:85:
         53:49:8d:f5:b3:c8:fd:d8:f2:51:b7:a3:96:57:7a:df:83:f0:
         08:96:ee:99:cf:7c:e5:3a:ca:93:86:bd:b3:f4:d6:18:ca:b4:
         44:0f:96:30:ff:59:8a:3f:92:de:3b:8d:a6:67:f1:87:f1:45:
         6a:df:24:ab:52:a9:ac:35:59:f3:5c:7c:58:b2:fc:74:77:7f:
         2d:bf:b3:c4:a6:1a:0d:b6:3f:71:3b:b2:ed:db:95:a0:9c:f3:
         32:f8:f1:4c:e3:85:39:5d:fa:12:1d:a8:f9:04:07:07:dc:eb:
         65:b7:03:9f:5d:44:96:d2:92:6b:c0:a4:6d:71:54:4a:1b:23:
         5e:11:78:df:6e:b7:cc:f4:d4:46:1b:39:23:16:e4:52:7e:b0:
         08:c0:d5:b9:1b:79:48:ef:77:3e:4f:62:ca:dc:43:33:e7:f0:
         f9:90:87:1a:83:ac:89:a8:f6:22:c7:b4:af:46:fb:22:31:3d:
         49:62:03:ca:c3:81:2e:e0:1d:e3:c7:04:f5:4d:1b:ce:90:50:
         4a:69:c8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:44:35 2026 by rpki-client