Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a93ad950-8a1a-3b37-b962-9b9c15dbc12b.roa
File:                     a93ad950-8a1a-3b37-b962-9b9c15dbc12b.roa (raw, json)
Hash identifier:          XqzUk0o/rm/u0GtRsWiHfcLIs759gWfO8+Uw64HfNPI=
Subject key identifier:   1E:25:3D:E7:14:90:1F:A3:D5:5F:74:16:1C:C5:1B:4E:0F:F7:36:AB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1B19E9B66498EEC1A6613200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a93ad950-8a1a-3b37-b962-9b9c15dbc12b.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.24.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:e9:b6:64:98:ee:c1:a6:61:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=332b7b3f-9e9f-4cf3-b91e-492c5c3778a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c8:33:f9:10:b0:a6:0b:50:48:46:60:bf:e3:
                    6e:50:be:d5:1f:7a:e5:b7:69:00:cb:39:9a:33:f4:
                    0d:64:cd:c5:9b:47:f9:ee:2b:21:0c:70:34:6b:ad:
                    3b:d2:d5:b9:a7:dd:4b:55:d0:a1:65:ba:40:58:5f:
                    83:db:03:60:80:74:36:34:eb:32:59:69:98:f1:43:
                    6d:9e:f9:50:03:71:04:21:0f:93:60:c3:f5:c4:83:
                    ad:ef:8a:0b:15:7e:67:00:05:c4:f4:45:9d:bb:cf:
                    40:b8:b2:4e:5b:9e:e5:8e:a4:f8:52:a4:7a:40:35:
                    84:c5:17:8a:e6:f9:d9:6f:47:0a:b3:1a:62:5f:09:
                    d8:0e:e9:24:6e:a1:63:61:75:79:bf:ea:c3:64:34:
                    74:f8:62:db:cf:d1:70:c7:dc:bb:87:dc:2b:17:1f:
                    9a:b4:5b:f4:ca:7a:2f:90:9d:80:26:9e:6f:d5:76:
                    79:c4:50:1f:c7:0b:32:4d:5a:1c:fe:81:02:3f:e6:
                    a3:e3:a5:73:6a:65:9b:9d:b0:3b:56:84:ba:37:e8:
                    0e:b6:ef:ea:3d:b2:b5:d4:e1:b5:d1:6d:df:79:e9:
                    f3:08:e9:eb:a7:f5:40:b6:21:bb:6a:8d:c7:1c:e9:
                    f7:8e:66:59:95:d2:71:43:e0:f9:35:68:05:2d:8d:
                    de:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:25:3D:E7:14:90:1F:A3:D5:5F:74:16:1C:C5:1B:4E:0F:F7:36:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a93ad950-8a1a-3b37-b962-9b9c15dbc12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:45:b8:d3:84:b3:fe:fa:53:f4:64:31:65:2f:62:97:0f:c1:
         b5:25:f7:25:6a:7f:18:b8:2f:ad:7a:c8:94:56:a9:8c:cd:36:
         24:56:72:ad:9b:be:fc:d8:ac:2e:e2:20:4c:6e:45:a2:68:a1:
         dd:60:b0:6d:69:58:ba:89:7c:c2:ac:c3:70:ba:78:bf:1b:bc:
         91:6e:ad:51:af:57:18:5f:e0:47:ff:fa:fd:1c:ee:98:5b:ec:
         b1:50:91:ef:cc:66:01:12:0d:4f:66:f1:a0:b3:e4:ce:8b:17:
         83:d2:76:d1:d0:8c:c8:d4:57:07:42:be:47:b6:dd:80:a8:0f:
         3f:f5:bf:08:e9:d0:ff:48:57:42:8f:bc:eb:ca:71:ce:6f:b9:
         ed:79:43:6c:4b:47:38:7a:d4:db:0d:9e:ce:63:d3:fe:a9:5a:
         a9:88:dc:c7:85:0c:f8:68:05:65:c6:e3:74:69:57:74:05:79:
         c9:3f:92:b9:72:f5:6d:67:4a:cc:5b:d7:d8:5f:cb:c2:af:5d:
         f1:7e:b5:d4:21:62:61:33:39:55:3e:68:65:7c:a4:7d:88:b7:
         7c:a2:ca:94:48:5d:13:cf:08:02:ca:2c:55:a5:c0:04:cd:a7:
         3f:df:de:bf:27:5d:df:72:8a:4e:38:cf:d5:e0:b8:f3:f7:77:
         be:f7:4d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:46:06 2026 by rpki-client