Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa
File:                     c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa (raw, json)
Hash identifier:          yGq6dgCJxjZ6AFSDevL97jam0JvDiIsczxNsQomhQ2Y=
Subject key identifier:   0A:AE:96:47:20:66:6F:44:B2:3C:9D:9E:6D:FD:97:04:91:33:64:32
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EAA520843051121DDEAAC5EE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.21.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:52:08:43:05:11:21:dd:ea:ac:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=374b90b5-66ef-4b34-8712-1d8a3b02023e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:77:6a:73:fa:cc:05:d7:37:39:06:17:0a:
                    19:e3:13:0f:de:18:24:84:a5:da:9f:dd:81:71:df:
                    37:3f:e0:c9:87:9d:98:21:ce:a3:df:bf:2a:e7:66:
                    c8:45:c9:1d:4c:3d:28:1e:22:7a:52:d4:2c:14:d3:
                    ae:56:82:04:77:e9:cf:b8:46:b2:af:c1:e4:b9:0b:
                    c2:5a:4b:1b:ae:24:00:47:75:eb:26:b0:43:55:e8:
                    3e:59:ce:a0:9a:db:03:fb:84:87:f2:f3:54:b2:02:
                    b9:73:ae:49:b7:1f:f7:9a:60:f1:c9:1f:6f:b3:d3:
                    5b:50:b5:4f:6d:ec:01:92:03:fa:52:02:e1:f0:55:
                    19:c6:b5:46:12:8a:ea:19:e0:37:4c:11:3b:ce:2b:
                    c0:8d:51:01:19:61:a0:d0:33:ab:7f:63:c4:c9:34:
                    70:4d:7e:75:da:56:3d:85:40:bd:53:63:ef:d3:7c:
                    b0:5f:92:0c:61:75:61:be:66:b8:cc:e5:3e:95:8a:
                    81:b4:6c:f0:ba:e9:de:bf:29:e3:a9:13:c6:bb:3b:
                    13:3d:5b:4d:fb:37:12:9b:f7:08:69:47:17:e0:ae:
                    c1:20:e0:0a:73:85:99:78:ca:df:23:fe:ba:23:68:
                    65:7d:b4:2a:f9:dd:65:f2:e1:f8:35:a9:9e:7c:ca:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AE:96:47:20:66:6F:44:B2:3C:9D:9E:6D:FD:97:04:91:33:64:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:68:a1:4e:fc:6e:5f:97:c7:58:62:8a:13:40:cf:e1:f6:3d:
         f4:0e:ba:5c:c3:ac:4f:ab:c3:ad:d2:6f:1e:61:ce:de:7d:16:
         5e:ac:cb:56:1f:49:43:81:6a:c2:ba:d0:e9:e3:c1:28:a2:fb:
         be:7e:18:7d:bc:ca:43:14:14:c7:4a:24:50:3d:3e:cf:69:bc:
         79:b4:67:45:f9:c7:24:c2:a0:ae:15:6e:b5:c0:7c:13:75:3f:
         54:4c:79:e5:64:d9:e7:38:7a:60:d3:47:16:68:66:e1:75:ae:
         99:f1:6c:9a:0b:2c:f8:23:89:47:6b:05:d0:dc:f3:e1:cf:42:
         8c:79:93:7e:72:88:9b:22:3c:64:d8:1d:ba:89:87:c8:38:95:
         24:26:1c:1d:5c:fc:f8:92:92:94:4a:6b:7b:fb:9e:ff:74:c2:
         11:b0:3b:83:fe:1d:41:98:39:59:59:27:d2:57:1f:0b:e2:60:
         be:2f:64:62:7f:12:3c:84:ab:9d:67:68:ff:ec:85:d1:3a:ca:
         44:f7:d5:0e:46:2d:48:19:41:77:a8:14:73:74:82:e8:e0:fa:
         db:c0:92:43:d8:8d:14:b9:8c:1a:ac:45:c8:97:60:69:d8:7b:
         37:7c:d8:74:7e:ee:1b:fb:43:77:0a:f0:fd:02:8a:a7:41:05:
         ce:89:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:06 2026 by rpki-client