Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acf66845-e752-3953-8ebc-cac7a66b9a4b.roa
File:                     acf66845-e752-3953-8ebc-cac7a66b9a4b.roa (raw, json)
Hash identifier:          xPzSizAMp1nszJtpoEpNWEELEGaWSpicLh9+bwSE0nM=
Subject key identifier:   08:8B:1A:09:BF:0A:70:31:BF:92:10:E5:05:1B:FF:9C:7C:45:6C:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79BCAE11A84AB4750CE7080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acf66845-e752-3953-8ebc-cac7a66b9a4b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.24.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:ca:e1:1a:84:ab:47:50:ce:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a21d5f05-1f70-4805-98ea-07fe51aebef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:80:b7:70:be:15:80:a5:4f:ef:b2:be:65:
                    91:ba:25:a8:eb:bf:bf:e2:8d:20:0f:00:14:03:dd:
                    25:96:df:0c:40:57:a4:cd:1d:ca:a3:cb:3a:75:b3:
                    9f:81:be:c1:5f:4f:12:d5:0e:58:d9:65:2b:6b:d4:
                    ae:51:f2:9e:de:ee:ee:df:90:a3:5f:e1:76:03:9c:
                    9e:17:8d:77:70:0b:66:33:5a:23:98:c8:8b:cb:49:
                    6a:a9:60:bb:2a:89:54:fa:e3:7a:24:c3:83:01:f1:
                    0a:df:a1:24:f2:ca:48:a1:13:c2:42:f1:8b:97:78:
                    0e:0e:88:84:83:e3:13:a0:4d:f4:5a:23:20:13:bc:
                    b8:90:ce:a7:ff:25:42:e7:06:51:d5:12:4c:60:c7:
                    cf:62:e9:d0:fb:f0:4c:fc:d7:df:bc:c1:88:ab:0a:
                    99:bf:e3:18:a5:31:a0:b4:bd:04:27:f1:fd:f4:1d:
                    1b:2e:ee:c9:34:85:54:23:11:da:7f:f7:9f:ac:76:
                    13:b8:f3:e1:5d:b1:2e:e7:21:bd:64:e3:d8:40:e2:
                    63:a0:2a:36:bc:1d:59:e1:b7:c9:c3:43:7b:1d:dd:
                    98:bf:02:13:1c:ce:be:c6:32:4a:81:86:7e:07:be:
                    a7:42:25:0e:d1:16:9e:fa:4a:0f:fb:97:7e:69:e2:
                    d2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8B:1A:09:BF:0A:70:31:BF:92:10:E5:05:1B:FF:9C:7C:45:6C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acf66845-e752-3953-8ebc-cac7a66b9a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:50:a2:1d:41:69:92:9c:f9:04:70:3f:75:07:0f:3a:dc:0e:
         c9:53:42:35:62:20:5b:5d:16:0a:48:37:7f:8b:f9:1a:53:6e:
         06:1c:00:0a:90:5a:36:db:80:78:ca:9d:8e:1e:09:0d:e4:2f:
         79:42:bb:e3:cb:36:56:3e:4d:f5:08:e9:37:ec:28:72:fc:28:
         5d:da:a9:6c:44:0f:ad:55:80:79:12:f5:32:62:ad:eb:29:b3:
         b3:e2:b0:ed:bf:09:7a:00:26:fa:a0:13:6b:27:de:e6:d3:d3:
         45:76:d0:48:78:c5:c4:88:a0:0c:7a:ae:a2:4e:06:cc:85:86:
         25:a8:3f:1e:8b:0f:19:2c:8a:c3:79:95:7b:00:ab:c1:d8:4f:
         64:12:0b:4f:f3:d6:6a:9b:57:a5:08:cc:68:b8:09:7b:cd:ca:
         98:9b:3e:69:67:f5:9e:35:7d:21:92:5f:a9:9b:d4:2b:54:4a:
         b8:59:96:93:e8:b1:4b:b5:0b:dd:d4:d4:7f:f4:2f:3e:39:b8:
         5d:ab:8e:be:3e:25:28:dc:51:e9:ee:ab:73:e5:6c:00:ef:cb:
         73:5f:22:a3:4c:90:c3:ca:53:1b:ed:cf:7e:3e:1f:24:07:51:
         ff:ea:3e:99:68:b0:ee:0c:53:af:90:0d:96:ee:5c:2f:88:41:
         83:47:c0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:33 2026 by rpki-client