Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e88ced5-73fa-3c9f-8426-be4e62d110d9.roa
File:                     7e88ced5-73fa-3c9f-8426-be4e62d110d9.roa (raw, json)
Hash identifier:          6rm3OWStE0TiO4kQVzegUToEtNpLcaOTuSW5v/DNkSk=
Subject key identifier:   52:BE:99:45:76:DC:36:1C:6B:DB:50:12:1F:A1:84:41:4C:77:D1:E7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79C99E2BC49A0D72ABF1800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e88ced5-73fa-3c9f-8426-be4e62d110d9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        150.195.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:99:e2:bc:49:a0:d7:2a:bf:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9c5aa9c0-d0e7-4fc4-aefc-bfaea0e2d696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:8c:e6:dc:a6:0e:6a:6e:9f:d0:a7:1f:3d:
                    4a:05:d5:26:c2:e9:5f:03:ad:b2:8d:62:ee:d4:7d:
                    fb:8a:cc:d2:ca:e0:4d:01:89:c8:37:67:26:83:78:
                    2f:3c:11:15:9f:c4:fc:c6:b7:c6:6f:5e:76:ca:20:
                    5f:9a:ee:b2:87:28:04:25:0e:97:46:2e:50:5c:f3:
                    75:fc:3a:70:aa:42:e2:ec:18:4a:61:2f:92:9e:78:
                    a2:1a:ec:f1:b2:da:62:af:7c:0e:6a:2c:19:62:1a:
                    95:60:53:0e:db:97:0f:1b:fb:c9:59:58:55:f1:8d:
                    d8:4d:61:c6:67:14:e2:a7:ee:d6:9b:30:d3:f9:f7:
                    b4:7a:d9:5f:05:8d:33:2c:6c:a9:35:46:1c:64:d8:
                    77:fb:95:7f:6a:0c:c5:6e:89:60:4a:e8:8f:03:b1:
                    8e:1e:10:98:83:78:1a:e2:f4:78:af:2e:c1:5c:18:
                    c2:43:83:16:c0:5d:ef:0e:7d:66:c7:d9:be:01:bc:
                    fb:de:12:b3:a5:b6:39:bf:d1:a2:86:1c:7f:d3:00:
                    51:31:6d:a2:8b:01:c4:91:65:f8:18:4e:a1:6d:ed:
                    65:68:b4:b2:03:29:83:16:20:a9:4e:77:7a:66:e9:
                    54:70:fc:46:c6:fb:68:f9:84:b3:3d:80:19:2f:bc:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BE:99:45:76:DC:36:1C:6B:DB:50:12:1F:A1:84:41:4C:77:D1:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e88ced5-73fa-3c9f-8426-be4e62d110d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:eb:6f:42:70:37:61:2b:90:9d:9a:6e:2d:76:36:45:fe:04:
         f4:5f:94:c4:10:11:df:63:ae:d2:5c:48:6a:d1:75:e7:61:09:
         b7:e0:ec:e7:57:03:9e:23:c7:80:0f:0e:7a:b6:2e:5b:54:34:
         c4:bc:a3:96:5b:81:90:0a:3e:2f:9b:dc:da:18:bc:b0:be:28:
         be:dd:3e:42:f9:4a:44:05:93:e9:2a:d4:8a:24:55:b7:f5:42:
         0f:25:dd:82:99:f8:47:cf:4d:f8:8e:d9:96:67:00:66:b5:02:
         d2:c9:78:1a:43:25:85:25:65:d9:bd:a7:28:d8:60:c7:c3:69:
         1b:c4:41:dd:9b:3b:27:e1:20:c5:5c:e7:74:1a:76:f0:8d:ac:
         57:7f:45:64:8a:64:8c:bf:51:f3:3b:69:80:e8:d4:d1:7d:0e:
         8e:c8:28:a1:08:24:eb:ff:e1:78:44:c9:5c:f3:52:81:88:3a:
         6c:c4:72:7d:08:a8:7a:bc:93:44:76:db:fa:88:cb:57:69:6f:
         1a:88:a5:b7:cd:d4:a6:98:d5:c5:83:fa:c5:31:e9:5a:39:5e:
         81:1d:b6:8b:13:c1:99:b9:b3:d4:46:73:05:2f:43:49:44:5f:
         b8:a3:d0:a5:24:44:db:ed:5a:aa:5a:8d:52:c9:22:4d:09:b3:
         e1:81:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:29 2026 by rpki-client