Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d683079-2364-323c-bad0-939097cb71b8.roa
File:                     6d683079-2364-323c-bad0-939097cb71b8.roa (raw, json)
Hash identifier:          cgwEeavJy7Gl3vCH1vTIaqlXqKdSDfQpGBsAbKE+xxg=
Subject key identifier:   89:16:30:6E:4D:8A:97:F3:40:72:86:5C:71:79:26:54:74:59:86:5D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A41A99E1A002F8C94DCA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d683079-2364-323c-bad0-939097cb71b8.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.20.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:41:a9:9e:1a:00:2f:8c:94:dc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=51f34076-99fb-4ddb-95fb-7e9bc7ab603d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:83:2c:07:5b:1e:5b:b3:e8:88:f9:93:3a:
                    3e:03:6d:cc:db:59:97:28:d3:16:d0:59:74:e9:4d:
                    a3:dd:50:c1:7d:16:67:b1:62:fa:93:ab:d1:c9:f2:
                    97:48:dc:61:13:a9:5b:22:29:5c:b1:ac:a6:70:74:
                    c6:81:7f:49:5a:eb:95:d1:0f:45:23:50:ec:83:ab:
                    c9:cc:6a:29:4e:2b:b6:1d:eb:47:a6:fe:eb:8e:7c:
                    a0:e3:1e:ec:70:95:ac:2e:e7:81:84:cc:f2:4e:15:
                    dd:45:bf:ff:bd:d9:cb:d4:8b:d0:23:73:eb:d9:06:
                    6c:88:92:5b:7d:0a:cd:e4:15:e5:e9:00:76:1d:82:
                    e1:53:36:84:f8:ba:ff:e1:0d:dd:b9:c3:44:df:ae:
                    17:7a:fa:6a:93:30:be:c7:30:4d:ab:7d:3f:f6:58:
                    ee:06:46:a4:89:56:42:ba:e4:9c:7c:34:0d:c6:27:
                    ae:d7:d9:f9:cd:90:fb:b9:36:50:f7:74:d8:ca:26:
                    1c:57:35:ee:3d:ab:57:64:aa:6f:91:1a:de:02:1e:
                    14:60:06:70:13:db:f9:c9:e5:b0:34:db:08:6a:e2:
                    0d:62:bf:f8:71:5c:29:3d:34:c2:f8:60:51:7e:36:
                    6b:9f:9c:0b:d7:f4:05:2a:cd:20:63:fd:95:f5:75:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:16:30:6E:4D:8A:97:F3:40:72:86:5C:71:79:26:54:74:59:86:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d683079-2364-323c-bad0-939097cb71b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:63:34:17:99:0e:17:a8:31:3e:44:1a:c5:3a:1a:d4:25:3c:
         3a:31:dc:37:08:f3:b4:db:fa:8e:9a:25:4c:0c:c8:83:00:90:
         e1:f8:ab:28:4a:83:81:ce:06:d6:8b:d8:c4:29:a1:70:9b:e8:
         6c:64:e4:f9:f8:9c:8f:45:ae:54:ff:1a:cb:14:f1:78:f1:01:
         d3:73:08:3f:fd:a5:77:e7:e7:d2:40:4c:ed:72:04:6b:da:ab:
         2d:44:18:d2:24:99:59:4a:f1:1e:e4:3f:a1:33:47:a1:61:80:
         30:e8:4f:6b:be:f6:33:6d:a3:cf:5e:36:37:08:91:5b:c0:d4:
         a6:27:03:a4:8d:d4:32:ba:fd:d4:98:5a:2e:47:65:1a:6c:ec:
         50:16:ff:b3:c1:36:21:7a:06:de:e2:33:a6:93:31:57:64:2a:
         0b:7c:0d:93:c1:7d:00:7f:53:0a:0d:2b:37:e6:38:f7:eb:e8:
         eb:eb:de:a6:29:7d:6f:42:e5:64:42:10:f0:87:9c:8e:50:68:
         ff:83:42:a5:c6:a9:48:a6:31:91:0e:68:78:50:ce:6e:42:42:
         6a:84:39:f0:61:1c:bf:84:07:41:23:ba:84:ce:0e:3a:df:4a:
         6a:e6:46:1c:a0:ac:ea:89:45:73:ff:4f:7f:c2:07:e4:68:ab:
         98:f0:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:46:14 2026 by rpki-client