Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6736486a-3a55-3e3e-918a-1ee97baba5f5.roa
File:                     6736486a-3a55-3e3e-918a-1ee97baba5f5.roa (raw, json)
Hash identifier:          CWpHdXkrGTOIaI7u6+QSZAC8jTwswOggnKutQcnXbyE=
Subject key identifier:   00:CE:99:8F:26:5A:B4:09:38:6A:38:04:9F:36:65:D3:AB:5B:46:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D8D8FEAEA7D647BC543E78770
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6736486a-3a55-3e3e-918a-1ee97baba5f5.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        173.28.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:ea:ea:7d:64:7b:c5:43:e7:87:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=eb12368a-41dc-4a34-8bdc-44c29ce2ae49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:86:ab:c3:5b:de:15:84:bc:2b:c1:7a:a2:
                    fd:ac:78:d8:a0:b5:d8:9b:a5:35:bf:ab:99:be:90:
                    3c:86:e4:58:e1:58:e1:23:2c:f5:ec:0a:01:a1:db:
                    b0:15:b7:57:87:77:d6:50:ea:fa:13:e9:c3:54:83:
                    16:55:62:5b:57:d1:a8:fd:42:57:33:6c:17:43:bf:
                    99:d1:4a:77:42:54:df:2b:9c:63:1e:5b:23:d6:ab:
                    7f:45:7c:5f:2a:04:11:b9:b5:f1:9a:9f:fb:2d:2e:
                    1e:b6:87:71:8d:ce:00:02:a3:88:66:16:53:ba:21:
                    9f:e2:5c:d7:c3:db:32:20:da:5a:da:8c:68:7f:49:
                    ed:e8:67:6d:ec:89:a6:ca:f3:fe:35:44:82:da:6c:
                    79:58:54:77:e7:9a:d2:e2:5c:00:09:3f:31:40:e9:
                    25:9f:38:ad:15:b5:f9:a7:b4:c9:ce:5d:8f:ee:9b:
                    46:c3:08:68:20:9d:6b:60:a3:d8:14:b7:30:b2:cf:
                    41:c1:ea:7f:79:16:11:ab:49:51:40:d1:73:88:90:
                    92:7b:e9:f4:44:80:6b:5e:39:07:60:35:01:d5:dd:
                    26:05:7e:3e:f1:80:be:43:ab:be:be:11:97:95:ed:
                    f3:9d:b6:d1:ef:f4:4e:9c:c3:f4:80:1c:12:f4:ac:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CE:99:8F:26:5A:B4:09:38:6A:38:04:9F:36:65:D3:AB:5B:46:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6736486a-3a55-3e3e-918a-1ee97baba5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f8:95:55:7a:60:22:80:2f:58:0c:7d:29:f5:18:2d:fe:84:
         05:1d:26:8a:f1:ed:79:67:c5:30:ea:02:14:2d:0c:35:89:40:
         dd:ce:49:83:c5:1d:a3:0e:eb:e7:b0:38:2c:a8:fd:bf:63:1e:
         38:fc:c0:a1:9a:3d:0a:08:25:11:a6:18:9d:0f:17:f4:72:f8:
         1d:4c:6f:44:2f:8d:2d:f2:70:e2:52:c6:0e:1c:f3:6a:5c:01:
         c7:5e:12:ad:d3:60:34:5b:85:ea:d7:ef:7f:80:9f:9f:40:2e:
         d4:4d:c6:3d:36:e8:d2:75:f5:4c:c6:33:22:37:06:5f:2b:01:
         2e:bb:d8:8a:81:5d:e7:ab:67:e8:10:75:e1:cf:13:08:a1:f7:
         d2:aa:cd:2f:d4:dd:ae:2d:a2:da:27:3c:1b:7d:dd:32:d5:3f:
         46:9c:49:20:cd:30:38:3c:fe:78:9f:f9:a8:85:bb:fb:d7:1a:
         26:72:b3:6d:58:1f:95:3c:8c:a3:79:55:c6:64:5e:ea:c4:8b:
         d0:af:2c:50:22:e9:49:86:13:29:82:0e:78:f5:39:91:aa:a3:
         a9:33:db:d0:1f:27:bc:09:3c:39:2c:6f:cf:0d:61:a4:5a:7d:
         1b:62:ce:f6:c9:7c:62:1e:d1:98:85:6f:0d:a5:ce:d3:63:21:
         43:b7:5b:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj+rqfWR7xUPnh3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk
ZWIxMjM2OGEtNDFkYy00YTM0LThiZGMtNDRjMjljZTJhZTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9OGq8Nb3hWEvCvBeqL9rHjYoLXYm6U1v6uZ
vpA8huRY4VjhIyz17AoBoduwFbdXh3fWUOr6E+nDVIMWVWJbV9Go/UJXM2wXQ7+Z
0Up3QlTfK5xjHlsj1qt/RXxfKgQRubXxmp/7LS4etodxjc4AAqOIZhZTuiGf4lzX
w9syINpa2oxof0nt6Gdt7ImmyvP+NUSC2mx5WFR355rS4lwACT8xQOklnzitFbX5
p7TJzl2P7ptGwwhoIJ1rYKPYFLcwss9Bwep/eRYRq0lRQNFziJCSe+n0RIBrXjkH
YDUB1d0mBX4+8YC+Q6u+vhGXle3znbbR7/ROnMP0gBwS9KxBRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFADOmY8mWrQJOGo4BJ82ZdOrW0YfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjczNjQ4NmEtM2E1NS0z
ZTNlLTkxOGEtMWVlOTdiYWJhNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE74lVV6YCKAL1gMfSn1GC3+hAUdJorx7XlnxTDqAhQtDDWJQN3OSYPF
HaMO6+ewOCyo/b9jHjj8wKGaPQoIJRGmGJ0PF/Ry+B1Mb0QvjS3ycOJSxg4c82pc
AcdeEq3TYDRbherX73+An59ALtRNxj026NJ19UzGMyI3Bl8rAS672IqBXeerZ+gQ
deHPEwih99KqzS/U3a4totonPBt93TLVP0acSSDNMDg8/nif+aiFu/vXGiZys21Y
H5U8jKN5VcZkXurEi9CvLFAi6UmGEymCDnj1OZGqo6kz29AfJ7wJPDksb88NYaRa
fRtizvbJfGIe0ZiFbw2lztNjIUO3W1w=
-----END CERTIFICATE-----
Generated at Fri May 8 18:25:02 2026 by rpki-client