Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaba19c1-68aa-3949-9002-013681e0e87e.roa
File:                     eaba19c1-68aa-3949-9002-013681e0e87e.roa (raw, json)
Hash identifier:          Jk6yjlkSGitMz4NEX4u92wk6UrXyWc3M55fJKmqHlm8=
Subject key identifier:   30:11:52:2F:8C:14:93:CA:9F:03:14:62:E8:44:72:C3:38:51:DE:10
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A38352BFF98A44A73AB80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaba19c1-68aa-3949-9002-013681e0e87e.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.27.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:38:35:2b:ff:98:a4:4a:73:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=2b8728e7-74d8-4273-97e5-725faed51d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:b3:18:32:0b:a9:d4:20:45:c5:ab:0e:e0:
                    48:e4:31:45:4b:34:5e:0f:9f:4c:63:1d:b2:6d:ab:
                    a0:fd:28:73:05:e6:71:b1:c6:3e:9e:91:f3:b9:89:
                    29:bb:66:51:6e:cf:72:d6:4b:21:1c:b1:2d:2f:91:
                    70:e6:a9:17:5d:00:38:86:8c:22:51:45:b7:b6:86:
                    56:49:81:ef:9b:e2:f0:6e:36:17:52:95:21:ef:98:
                    38:55:12:cb:2f:7d:fa:cb:2f:ab:87:3f:c1:19:cb:
                    f0:38:7d:27:48:41:57:1e:0e:a9:69:44:c8:38:18:
                    55:be:c8:99:b7:58:0d:a7:02:3a:95:28:43:de:4d:
                    e6:cd:8f:89:06:a5:d2:de:5c:d4:a0:63:25:c0:34:
                    20:06:43:77:4c:5b:ce:a1:ff:78:17:87:83:61:50:
                    a6:de:aa:8b:e4:3b:f4:17:70:f8:b4:4c:57:d0:a8:
                    8a:e7:29:c4:1b:1c:69:4c:23:07:39:7b:75:b4:61:
                    3c:11:69:8a:35:17:d7:2f:85:2d:23:58:5f:a2:75:
                    dd:5a:4d:ad:b2:3f:3e:c3:52:21:7d:61:92:e7:25:
                    79:52:e5:f2:f0:f9:15:d3:ef:db:6a:d6:e9:dd:de:
                    ee:62:53:59:00:72:cf:77:54:cd:42:2e:c7:9c:63:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:11:52:2F:8C:14:93:CA:9F:03:14:62:E8:44:72:C3:38:51:DE:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaba19c1-68aa-3949-9002-013681e0e87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:1e:1b:25:7f:58:fe:f3:3c:3c:9c:28:89:b2:cc:56:f5:
         a4:99:97:a5:a7:b2:88:d7:ab:50:73:c0:31:0e:98:b9:3e:d1:
         4d:86:67:77:b0:5d:17:44:a3:8b:cd:4a:65:14:c3:c1:d2:fc:
         46:7a:dd:0e:08:79:28:c6:b4:b5:2d:25:08:89:a9:ad:da:30:
         82:da:5f:4c:fe:1f:2c:d8:2a:4e:3f:f0:54:46:7d:a4:ce:a2:
         20:a8:2e:55:68:93:3f:33:93:0d:fe:1d:7a:12:bc:36:ca:95:
         c8:cc:03:c5:e1:15:85:d3:80:7f:de:f7:0f:36:45:92:a4:26:
         48:1c:09:91:a6:5f:f4:3e:c3:24:35:96:ba:42:17:35:b6:03:
         21:e9:47:9d:50:e4:43:a1:1f:c5:d5:04:e4:58:80:f1:94:f8:
         19:95:64:cc:c3:b2:51:40:0e:bc:fb:33:39:e6:76:eb:46:28:
         47:87:99:7f:02:b2:50:cf:c4:2c:28:7e:1d:0b:8d:71:e7:ad:
         7e:35:18:b2:d9:87:f1:68:86:4f:b8:83:b3:53:31:88:d2:28:
         21:88:57:dd:92:d9:d2:54:bd:c3:52:df:65:e3:50:bb:32:64:
         ea:b2:6f:d3:bf:2f:81:74:51:bc:9e:49:48:5c:b8:41:5f:5a:
         51:98:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:06:57 2026 by rpki-client