Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f9f66e-19d9-38a6-b99b-095fa533651b.roa
File:                     d4f9f66e-19d9-38a6-b99b-095fa533651b.roa (raw, json)
Hash identifier:          5Fk25JPrkQGHByG9zdln435hv5pXa2lSrvo4bKIfvps=
Subject key identifier:   35:4B:F8:87:09:59:66:C2:3E:25:37:4C:EA:D5:1B:6D:C2:4E:5D:49
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79D3B5CA196D662CE567F20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f9f66e-19d9-38a6-b99b-095fa533651b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.29.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:3b:5c:a1:96:d6:62:ce:56:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dfd849c8-21c2-47ec-bb1b-9acd66417d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ca:ca:ad:c1:f5:42:bc:c5:ad:ba:03:ec:48:
                    67:57:5b:e1:31:f7:6f:17:a4:31:ce:40:ba:2f:12:
                    1a:65:36:7f:ae:d5:93:25:26:28:1a:16:ce:ba:85:
                    33:e3:2e:b1:2a:5c:8a:d8:e9:98:b4:19:6a:e1:95:
                    7a:b3:84:53:30:b9:61:74:9e:78:98:fd:8b:bb:29:
                    d1:da:b6:65:cd:22:34:57:56:47:84:74:24:b6:b1:
                    10:c6:ca:74:48:57:f4:cc:9b:5f:87:40:f7:3e:af:
                    4f:7a:e1:70:9e:13:c4:86:26:4a:45:25:da:6c:18:
                    62:c2:d0:2f:c1:72:1f:71:96:d8:fc:e6:43:6f:c4:
                    fe:3a:bc:00:3c:f5:63:18:ac:c1:aa:e9:bd:12:89:
                    be:c4:ff:37:bb:70:03:49:f0:6b:33:b5:bd:20:cb:
                    dd:de:f7:0d:36:63:be:7f:e5:cd:a3:dd:f4:63:d1:
                    1a:c5:b3:74:cc:ec:f6:ae:33:8a:bb:65:75:af:91:
                    f9:a4:b3:ac:75:67:d3:c8:cf:ae:a9:d0:8c:c5:10:
                    d1:e0:39:bb:d6:e7:89:10:4d:c5:c3:4e:b5:3c:15:
                    e4:96:c3:c4:bf:27:54:0e:42:b7:50:bb:79:80:84:
                    7a:5e:85:3f:43:9f:da:21:91:4f:72:e0:80:da:81:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4B:F8:87:09:59:66:C2:3E:25:37:4C:EA:D5:1B:6D:C2:4E:5D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f9f66e-19d9-38a6-b99b-095fa533651b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:14:a3:2e:34:59:98:d8:7c:68:ff:b3:bc:dd:2a:93:f9:41:
         66:94:4c:59:5f:5f:4f:eb:96:7c:72:f4:f6:71:a1:f4:8c:69:
         f4:a8:ba:61:30:95:1e:39:e8:e2:11:80:df:15:2a:86:f8:91:
         ab:6b:73:18:fb:d9:34:bd:38:5c:a2:0d:03:7f:37:fd:07:bf:
         7a:9d:b9:94:94:f8:67:d8:81:cc:7a:ab:eb:e4:e9:a0:67:50:
         29:a7:52:60:d0:ec:65:7e:68:b9:b9:c7:78:9a:2f:37:2d:69:
         9b:34:05:c8:5a:31:c1:7b:cb:58:d1:cc:68:49:44:40:23:4f:
         b4:a5:9e:09:0f:24:4f:10:1c:ac:f9:5c:73:e0:6f:18:71:b3:
         af:14:0f:07:5d:dd:93:27:42:03:9c:8e:0e:7b:84:40:12:aa:
         ad:6c:08:e7:a5:a6:08:96:7a:93:b6:85:c4:25:47:90:cb:b4:
         14:94:9b:fa:d4:6f:46:46:81:63:1f:5d:c5:a5:63:93:a4:af:
         b0:80:bd:40:d1:32:c0:0c:3e:79:86:44:b5:5b:0e:6b:81:eb:
         c8:cb:8d:78:23:cb:40:46:4d:b7:63:f3:de:e4:1f:ac:fa:14:
         e0:74:c2:d0:7d:ed:eb:2d:ae:41:00:44:3d:01:56:dd:9c:4e:
         fe:9a:b7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:28:14 2026 by rpki-client