Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c778a5c8-0b31-343a-b6b2-14b84b404af0.roa
File:                     c778a5c8-0b31-343a-b6b2-14b84b404af0.roa (raw, json)
Hash identifier:          I3bwOtABsSn5EirjSf2/skJT3McvrqPt/0L0p13cb8c=
Subject key identifier:   FB:0F:B5:E7:56:F3:C6:B7:27:75:EB:D0:E4:4E:3B:2E:30:95:76:38
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CED35D69FDA2940064800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c778a5c8-0b31-343a-b6b2-14b84b404af0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.23.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:ed:35:d6:9f:da:29:40:06:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eaebbe3b-008a-4c69-8ad7-abf88e296bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:84:2b:11:f9:cb:2c:52:86:2a:1f:e4:99:
                    73:3d:eb:ad:c7:a1:a4:45:e5:31:63:8b:22:0a:1e:
                    42:89:c6:07:5b:06:92:d3:c2:91:b5:c0:2f:e4:de:
                    26:30:df:1a:53:04:82:60:b8:a4:2b:cf:1d:32:cb:
                    ef:90:6a:f0:2a:94:a5:ba:94:e9:fd:f3:70:74:b7:
                    5f:be:34:00:26:66:51:53:3a:74:05:5a:ed:10:da:
                    df:cb:db:1c:22:f4:f9:86:b2:fd:89:dd:ee:be:2c:
                    62:a9:2e:46:ce:db:c5:3c:aa:04:5c:87:db:4f:e8:
                    22:68:bb:64:75:3c:74:64:c4:42:97:98:db:1c:68:
                    74:ec:34:97:3a:2c:1c:ab:df:54:ad:1c:4f:12:1e:
                    5b:65:08:12:08:7c:7e:5c:eb:d5:03:a3:fa:29:33:
                    84:f8:bb:90:79:f9:fd:17:79:fd:11:dd:bb:9b:01:
                    3a:19:42:b0:9c:74:76:cd:a9:c6:92:52:18:94:12:
                    e4:85:0e:02:87:f9:09:03:b8:48:fb:73:a0:9f:c9:
                    24:6e:85:f5:a0:1d:ab:3b:67:e5:df:1d:e7:d5:dd:
                    0e:27:86:78:87:ca:e2:36:ed:c0:a5:de:69:d5:41:
                    17:c8:fb:24:c9:61:8d:e2:0b:b9:d1:66:4d:a1:4f:
                    d4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0F:B5:E7:56:F3:C6:B7:27:75:EB:D0:E4:4E:3B:2E:30:95:76:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c778a5c8-0b31-343a-b6b2-14b84b404af0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:0d:91:94:41:2c:18:6d:51:fc:6f:3f:10:b1:b1:95:28:0b:
         54:0f:ba:2c:41:76:8e:fc:cf:18:1f:ca:33:e7:f2:c4:10:56:
         06:a3:16:e3:66:4c:3e:5b:89:b1:e0:83:c7:a4:41:0f:64:b9:
         1e:b5:d7:31:d6:93:a4:ef:8d:99:96:ce:89:2a:fe:7d:d9:80:
         ac:8d:7b:e5:07:ec:c6:f9:08:84:5b:70:6e:2e:af:d7:30:2a:
         4b:6f:dd:f4:f9:c2:a1:43:9e:25:72:c9:34:5c:d5:52:d9:15:
         c7:1c:5f:5b:27:71:87:7f:24:26:43:29:5b:60:65:05:9e:c5:
         aa:ed:01:e8:c3:14:55:5e:b8:2b:f0:58:2a:cf:59:da:a3:ff:
         82:ba:83:c5:21:e3:d2:58:0d:ce:63:fe:33:a2:ba:c8:fb:8d:
         d6:b4:13:aa:15:8a:ff:28:20:01:7d:56:9a:a3:b9:b2:1e:2b:
         d2:2a:79:35:ac:ec:3e:fb:c5:e3:0f:c7:75:ba:52:c9:08:1e:
         41:06:1f:f4:ab:aa:2c:27:c5:8b:d6:18:19:ae:95:62:29:a9:
         be:0f:a4:80:3f:31:c8:5e:39:15:bb:a6:4f:42:52:6e:0c:76:
         f1:11:bb:2a:bb:78:7c:a7:af:04:ce:02:b3:e4:95:d3:d2:e6:
         e5:aa:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:44:21 2026 by rpki-client