Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e057fb2-e8cb-38f6-bebc-9886ac144ef1.roa
File:                     7e057fb2-e8cb-38f6-bebc-9886ac144ef1.roa (raw, json)
Hash identifier:          ik8mXx/Kqk1PQF8X19GEhQ4LgHxaQuwCHA7it+HILq0=
Subject key identifier:   78:A2:21:13:1C:32:33:22:2C:2E:05:DD:39:4F:99:C9:BC:40:4B:2F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79C78726320C937DBEE0350
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e057fb2-e8cb-38f6-bebc-9886ac144ef1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.29.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:78:72:63:20:c9:37:db:ee:03:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0e409a43-8b26-4b3f-b8c1-d6ed5b37cff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:91:01:04:0c:06:38:7c:10:0a:00:42:d4:
                    3d:fe:f1:4f:b1:1c:e9:de:e3:63:35:6b:c5:e0:38:
                    0b:88:79:37:81:e2:78:fd:ed:f1:54:2a:02:d7:b3:
                    af:bd:ec:4d:0e:be:c9:71:a8:36:58:95:ee:71:94:
                    bf:66:78:39:36:41:c9:35:5c:72:a7:4e:c1:6c:2b:
                    a0:25:bb:7e:ba:75:40:c0:b4:f8:32:5a:37:80:54:
                    fc:53:e1:c4:2c:9f:45:69:15:1b:f9:ff:de:0e:5a:
                    7d:54:ea:d3:57:5c:44:57:41:14:57:2a:80:73:47:
                    05:2d:90:6b:5a:2d:8b:5f:8b:5c:76:4e:de:bb:42:
                    60:ce:8e:4e:51:12:37:41:56:c1:ed:0d:6e:9b:6c:
                    f9:40:33:8d:17:f2:61:10:14:03:6e:63:1a:d8:75:
                    c1:af:e0:7f:17:22:d9:a8:61:30:35:60:3d:4b:c5:
                    e9:91:66:08:66:23:03:f5:eb:ae:a1:90:fe:06:2d:
                    57:7e:7d:32:f2:24:27:77:a5:fc:d8:ef:cc:a2:50:
                    fe:49:c3:48:92:07:ae:00:51:cf:9d:e5:a4:e7:61:
                    1d:6b:e9:2b:3f:f1:e4:dd:88:0c:18:fe:0d:10:66:
                    d7:dd:25:b8:6a:0f:dd:db:0f:4f:51:af:65:f5:31:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A2:21:13:1C:32:33:22:2C:2E:05:DD:39:4F:99:C9:BC:40:4B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e057fb2-e8cb-38f6-bebc-9886ac144ef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:71:c7:bc:2e:24:37:f2:ea:0b:31:a6:96:ad:ba:a9:88:c8:
         23:34:fe:30:24:5f:dc:3b:3d:c9:01:7c:e0:15:d3:94:00:f4:
         e2:00:c7:c2:d6:10:fe:47:fa:c0:a2:6e:5e:03:b9:aa:ef:e8:
         58:ac:48:91:86:4f:1d:4b:39:3f:17:6d:9e:a4:0a:b9:77:94:
         66:e7:86:c9:58:59:1e:ff:9c:cf:f8:62:df:6f:5e:67:d4:41:
         9f:32:26:f0:3e:e5:c7:6c:36:97:7d:fc:08:fa:41:48:7c:75:
         e8:02:d2:ae:72:08:5f:e5:6a:41:35:10:3f:3e:da:15:cf:c0:
         01:55:98:48:19:d9:9b:33:ce:15:17:78:c1:26:ee:e5:65:63:
         85:db:3c:91:99:ee:23:2d:73:8c:02:f7:7b:68:b0:0d:1d:23:
         d6:b3:d3:6b:48:ac:a8:e8:68:1d:42:cd:2d:a5:7b:42:5c:33:
         1c:38:3b:26:85:ef:c0:27:40:c7:c9:da:bd:b5:27:16:d8:00:
         b1:fb:1b:7a:cc:ba:65:4f:d1:1d:15:53:11:0a:ad:a7:b5:59:
         cd:4f:ab:af:a8:1f:b4:8e:73:c6:40:d0:e7:58:b2:c2:9f:6f:
         ff:27:41:e8:ac:70:d0:69:da:2f:4a:f8:b6:6c:c9:f6:21:75:
         d0:0d:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:57 2026 by rpki-client