Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/731b53ca-f0bb-3484-919e-c6c6589a7b63.roa
File:                     731b53ca-f0bb-3484-919e-c6c6589a7b63.roa (raw, json)
Hash identifier:          LKBvfejyiVW2aQUOIPrOfpX3s6mrqE64UqSjn2ZKFJ8=
Subject key identifier:   38:FB:64:77:F0:00:4A:97:7D:6C:34:D6:EC:6B:EA:71:06:B7:34:34
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79781E427EE6E2C1AD78300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/731b53ca-f0bb-3484-919e-c6c6589a7b63.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.24.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:81:e4:27:ee:6e:2c:1a:d7:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=142cc35d-5832-418a-8398-77969fd4b373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:44:7b:9a:73:19:2a:9d:ce:49:a5:2d:d3:71:
                    45:c8:85:85:6c:86:33:4c:b9:01:99:5b:3d:cc:09:
                    c4:7d:1f:61:a8:0e:c2:fd:56:d7:e5:aa:e2:92:ad:
                    1f:3f:af:38:11:02:da:df:ae:c1:2a:5a:84:00:ff:
                    22:57:5a:10:8b:c9:32:27:0a:20:7e:d5:b3:9d:b1:
                    a6:c2:75:af:d4:fe:10:06:68:04:c6:17:bd:f0:ef:
                    37:22:46:d5:44:e8:97:cb:0f:dc:ea:69:56:21:25:
                    7d:66:35:44:d5:5d:20:98:34:87:30:0a:25:c6:3b:
                    39:e6:d8:23:63:db:e3:42:c3:03:8d:f2:20:3d:3d:
                    92:b4:07:22:7a:97:9b:b7:2a:15:e0:a1:a5:e4:f8:
                    8d:aa:19:c8:bc:f9:09:21:8b:37:4c:5a:67:87:3d:
                    ff:88:32:43:1a:ff:2d:f1:db:27:ed:b3:7f:66:ba:
                    b2:78:00:0b:0a:e0:8f:bf:71:47:90:26:7d:97:72:
                    09:96:5a:32:91:4d:4e:7f:c4:b5:e3:bf:f5:9f:11:
                    5a:fb:a8:7f:a6:70:c1:85:0e:c4:20:4f:6b:00:c6:
                    af:3c:5f:4c:bd:b6:fb:d9:28:52:17:f1:56:10:bd:
                    b5:49:1d:7d:88:a2:20:7b:5b:c0:df:d5:b2:0a:0f:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FB:64:77:F0:00:4A:97:7D:6C:34:D6:EC:6B:EA:71:06:B7:34:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/731b53ca-f0bb-3484-919e-c6c6589a7b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:bb:68:26:29:0b:99:76:17:9d:b7:24:14:06:45:33:63:bd:
         3d:01:f2:cd:24:0a:cf:a9:ed:84:af:e4:80:de:ea:3b:dc:5e:
         b2:33:cf:e9:49:d1:ce:a2:e1:62:87:e0:8e:72:4a:56:1b:ec:
         41:d2:af:ea:9b:11:41:5e:5a:60:55:3a:b1:d4:dd:2a:2d:72:
         0c:db:62:c2:3d:f3:cc:8c:df:28:7d:2e:a8:93:1f:c1:66:e7:
         13:51:40:eb:4e:52:13:94:f8:97:e7:ff:04:46:a1:6f:e9:16:
         1b:8e:a9:44:ec:5d:ca:1b:6e:ba:8f:a9:7e:3e:72:ad:80:1f:
         23:35:12:39:be:56:ff:1e:36:60:9f:4b:e5:c4:3b:14:1d:80:
         53:84:8a:50:83:2d:62:b7:87:58:30:a2:0c:a1:b7:19:0e:ec:
         e1:4e:18:83:7d:e2:94:b4:83:26:74:48:ef:50:eb:fc:de:21:
         1d:ef:30:8c:7c:f3:0c:cc:cc:48:1e:aa:83:13:e9:0b:e8:cc:
         63:d9:72:77:d9:40:8e:3a:5a:f9:bf:b3:26:ac:29:82:f8:d9:
         d8:19:fc:96:20:9f:a7:d5:bc:22:1d:a1:41:06:a1:d3:8e:63:
         4f:15:f2:81:c3:9d:71:5c:54:3e:b9:4b:39:d5:6b:f9:7e:fe:
         1f:2d:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:28:43 2026 by rpki-client