Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4dddb2e-63a6-3480-ab9a-d46cad988093.roa
File:                     d4dddb2e-63a6-3480-ab9a-d46cad988093.roa (raw, json)
Hash identifier:          wXG9ImWzMc4GMrp7+8j8Z6YbXrqODKRzLby1kvoPa7E=
Subject key identifier:   48:81:4E:78:5B:2F:39:30:F0:BA:C4:5E:DB:59:97:BA:EF:37:2E:A2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79C319D21014E6B012BDF40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4dddb2e-63a6-3480-ab9a-d46cad988093.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.17.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:31:9d:21:01:4e:6b:01:2b:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=385defdf-88e6-4ac7-b98d-ed70d0343fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:57:39:da:b0:b8:f8:c4:0d:ff:92:0c:c1:2c:
                    05:f4:0b:25:4a:b8:9b:d4:f8:21:12:6c:c2:23:f6:
                    46:2f:a3:62:31:16:9a:3c:02:fd:f5:29:c3:95:e8:
                    78:95:b0:42:5d:c6:45:d0:2e:36:ad:e0:81:11:13:
                    ec:26:cd:9a:2d:b0:90:26:8c:9e:59:ee:a6:fc:a5:
                    21:0e:12:0d:31:27:99:36:ce:79:ba:ca:5b:80:37:
                    93:dd:2d:29:39:69:40:b6:2e:7b:a3:c9:42:c0:78:
                    5e:69:cb:90:bd:fd:a5:6c:57:29:a2:0f:2c:7e:8f:
                    78:3c:d4:2d:ea:c4:b7:99:00:a0:e3:52:f5:8f:6c:
                    ae:9a:38:6e:48:fe:e8:a4:c2:7c:35:f5:4f:b4:5e:
                    fc:71:f5:38:f9:1e:e6:42:24:73:f6:22:f9:f4:1e:
                    e2:5a:37:9a:a0:fa:4e:e6:c5:67:cf:b6:01:fd:9e:
                    9e:ee:f4:aa:70:1a:45:c9:2f:ac:db:93:61:71:61:
                    88:e1:bd:7d:6c:37:4f:ff:ca:fe:6a:8b:bc:89:42:
                    f9:0f:a5:29:c7:7c:a6:66:1d:4b:71:6f:b3:cf:8d:
                    91:27:92:2b:8a:0f:f9:e6:45:bb:1c:86:c9:de:10:
                    67:0c:92:f0:d5:4b:40:9e:f6:5f:99:3d:b7:1f:c8:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:81:4E:78:5B:2F:39:30:F0:BA:C4:5E:DB:59:97:BA:EF:37:2E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4dddb2e-63a6-3480-ab9a-d46cad988093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:3b:81:bc:b4:16:fb:60:80:52:58:18:e3:a8:2a:d9:45:
         b8:d9:48:1c:10:cd:a9:a5:21:a1:e6:31:3b:ef:73:ca:09:6e:
         e4:4d:11:6e:8a:07:d2:2b:6f:04:0c:03:93:ef:15:91:5d:b5:
         78:55:02:ec:16:b4:75:69:45:b1:3c:a9:52:3f:78:b0:0b:04:
         93:39:7c:a6:8f:2e:56:a8:09:ad:82:32:70:fa:b0:0f:53:08:
         41:8e:91:6f:b8:e1:9f:bc:99:9c:c5:a4:ab:62:da:49:68:b1:
         4f:69:a9:43:b2:5f:89:2c:d2:f2:04:17:03:1a:18:a4:92:b2:
         f4:bf:ad:ce:c2:89:59:32:d6:05:ee:1d:6d:4f:d0:9c:fc:58:
         28:00:1f:e3:23:51:cd:7b:51:2b:39:6d:d2:47:24:a0:fe:13:
         82:43:7f:9b:a8:ad:5b:32:0c:8b:bd:50:48:ce:bc:06:10:6a:
         57:c7:c2:88:8d:e5:77:03:d5:35:88:a0:c4:f3:f9:51:3b:40:
         d5:ef:b9:5b:cf:7a:7a:40:30:46:22:19:12:dd:f4:7f:83:6b:
         d4:f9:7f:04:42:30:c5:8a:58:3b:ca:2e:72:b9:1e:04:15:ac:
         6f:10:9d:d9:fd:6e:34:93:04:f8:df:0b:75:dd:f7:bf:d4:4a:
         41:eb:47:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:45:05 2026 by rpki-client