Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e78f7f7b-7d92-3116-82df-58484bc83f46.roa
File:                     e78f7f7b-7d92-3116-82df-58484bc83f46.roa (raw, json)
Hash identifier:          +Iw8nXshwS3cdC1AQkuJZ9KxrVtU2W57w2EJYRZ32cg=
Subject key identifier:   F1:70:81:53:6E:09:6D:6F:E9:19:04:F4:40:B7:8C:9D:E4:DF:B9:8A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EAA51997D333EE608EB191380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e78f7f7b-7d92-3116-82df-58484bc83f46.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.21.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:99:7d:33:3e:e6:08:eb:19:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=e5eb9d8b-1b7d-4c78-9021-9421933f19e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:12:82:ed:99:b2:8f:13:55:27:b0:e5:b4:
                    cb:b5:12:f5:c3:3f:94:3f:bd:06:ed:30:11:ba:bb:
                    cb:b1:6e:73:f1:f6:fc:33:ea:06:2a:5f:93:02:b8:
                    43:da:7c:56:e9:42:ae:8b:ed:0a:a3:fc:f3:53:17:
                    63:1d:f6:2b:d4:b5:a0:b7:3f:19:ad:6d:ae:8a:75:
                    50:c5:20:93:dd:e1:c7:93:60:21:a6:1f:21:0c:fb:
                    ad:f7:1d:1d:15:ee:81:7f:f3:4b:be:aa:72:21:e5:
                    ba:73:e7:08:15:52:fc:36:40:8b:a1:0a:34:f3:91:
                    6e:90:70:e0:88:50:ee:72:2c:3e:b1:f6:0c:bf:0a:
                    02:97:d0:c6:af:43:1f:db:05:4c:b3:da:03:3f:8b:
                    6c:e8:3c:4b:ff:22:a1:3b:81:29:2c:67:6b:57:1f:
                    61:f9:b5:13:65:25:a9:7f:3b:2d:39:53:c0:84:95:
                    80:e7:38:8f:33:d9:79:8b:c6:64:50:74:a1:71:45:
                    b6:ee:1a:4d:5d:3f:38:c4:3f:1c:77:ad:0b:bf:ec:
                    73:e4:89:25:78:dd:ba:b5:ba:89:31:81:ab:7a:c3:
                    ce:57:d6:dd:df:97:d6:42:78:bd:9b:c2:10:45:bf:
                    a4:56:fd:c4:c8:a9:ed:cf:65:4e:97:46:42:88:08:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:70:81:53:6E:09:6D:6F:E9:19:04:F4:40:B7:8C:9D:E4:DF:B9:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e78f7f7b-7d92-3116-82df-58484bc83f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:92:cc:64:04:84:59:44:b6:cb:25:6b:e2:83:ab:80:4e:b2:
         a0:4a:a8:78:31:60:0f:d8:c6:a6:5b:f8:d6:1d:8c:b0:ff:9a:
         fb:ef:86:82:52:95:2e:64:4b:78:bc:6b:55:39:97:d0:9e:73:
         4d:07:0c:a4:1c:66:fe:ba:48:cd:4a:27:4c:53:fa:03:35:40:
         22:b0:d7:c9:28:2c:81:4c:0a:c1:63:a8:18:0c:18:de:f3:fb:
         12:e0:68:3d:3d:d0:0a:38:a3:6a:d0:93:e5:40:f3:5e:9a:6a:
         2a:5c:4d:56:56:ed:47:bd:29:11:9e:31:63:59:26:98:31:11:
         c6:62:55:f1:f7:e8:54:ba:d0:84:c1:c9:51:34:c3:bf:64:dc:
         20:3e:9d:69:21:fe:93:7c:51:b2:af:e4:41:d0:fc:74:13:30:
         c9:12:87:8d:2b:66:7d:6e:7f:b6:af:c5:82:52:80:45:96:13:
         f4:a5:91:62:86:72:3b:bc:a8:64:44:62:2d:ec:fc:73:2d:da:
         26:b6:86:3d:83:48:32:7b:94:7b:dd:40:cd:13:2a:51:0d:b8:
         95:df:ef:cd:86:6e:0b:c1:6e:0a:27:5e:59:cb:f4:87:8e:9b:
         76:68:03:e7:d4:ad:05:c3:f7:9f:97:dd:b6:ca:11:fe:7c:3a:
         b5:f9:df:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:45:09 2026 by rpki-client