Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eef4b0ad-9c7c-3e9e-8e65-2f51e2339794.roa
File:                     eef4b0ad-9c7c-3e9e-8e65-2f51e2339794.roa (raw, json)
Hash identifier:          KIJ5Y48BDU+ZO58+s0Sy95wETiV0vfIU9biHo/M/2cs=
Subject key identifier:   24:66:62:35:F2:0F:55:3D:07:70:FD:E0:94:AE:F0:FC:1F:FC:53:FC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D91C01A50FA4317B2BCFD3540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eef4b0ad-9c7c-3e9e-8e65-2f51e2339794.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     30036
IP address blocks:        173.30.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1a:50:fa:43:17:b2:bc:fd:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=0511a227-965e-4bd4-a0f1-eef15a2b0909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:27:d7:f1:0c:d2:ca:5c:34:b7:26:32:30:
                    f1:65:8f:ef:55:4c:cb:ff:d4:30:a4:92:50:6c:d9:
                    ee:ae:05:67:8c:ed:43:be:70:3a:55:ba:3c:ee:54:
                    20:1c:13:24:ba:9b:dd:3e:0b:01:c8:fc:68:f3:85:
                    39:d6:bc:5f:40:d7:0b:75:cb:f7:68:c1:99:32:f0:
                    28:27:f3:c7:4b:7d:4b:91:86:ca:4f:42:ab:9f:10:
                    be:f1:1f:7e:26:2d:21:f2:0c:e9:3e:8f:1a:98:c6:
                    41:12:39:a1:22:1a:99:0a:96:45:a1:38:6a:ec:99:
                    49:f1:b9:7b:97:53:33:ff:2a:d3:d8:e1:ef:70:66:
                    80:56:c3:0a:61:28:46:de:74:fa:51:7f:0c:60:a5:
                    77:46:f1:3c:58:6d:a8:9e:ac:d2:7f:7b:c5:7b:7e:
                    47:49:db:dc:9e:62:5d:38:e7:0a:65:96:3a:bb:ee:
                    30:3f:57:c3:e7:03:c4:a8:91:69:98:45:4d:48:16:
                    e7:ff:b2:42:ae:7b:d8:5b:dc:98:45:ba:0c:e3:46:
                    1a:5c:ad:fa:2c:5f:03:14:b3:b2:e0:ba:9a:45:d5:
                    53:19:9a:07:3d:bc:da:50:30:2e:6e:f6:1f:d3:f7:
                    9f:b6:60:54:a8:8d:04:a2:cf:94:88:52:53:c3:aa:
                    1c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:66:62:35:F2:0F:55:3D:07:70:FD:E0:94:AE:F0:FC:1F:FC:53:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eef4b0ad-9c7c-3e9e-8e65-2f51e2339794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a4:6e:05:cd:be:8d:54:cd:37:6a:9e:9f:f3:15:19:19:5e:
         38:62:93:19:5c:68:df:3c:02:91:17:9a:28:2a:26:78:5f:c3:
         a8:fc:8a:2d:12:9f:3a:96:5c:ae:89:20:5e:92:f5:02:3b:0a:
         b8:b6:09:01:52:8b:32:04:24:66:fc:98:fa:1f:39:7f:41:45:
         5e:8a:7c:1c:b5:62:24:5c:7c:18:9c:69:53:17:96:88:2b:69:
         16:9c:a6:0e:bb:02:45:49:98:0b:93:7e:6b:63:20:4a:59:24:
         96:93:77:dc:63:8e:f9:a1:1b:76:52:29:e5:ce:bb:9e:ec:8d:
         dc:c6:b8:cc:2b:46:1b:32:41:e6:e8:0c:e5:81:62:c2:70:8f:
         8d:79:77:c0:49:26:f0:79:77:ab:fd:5a:a3:9d:0c:01:71:94:
         f6:fb:58:3d:ad:d0:72:37:9b:5a:23:54:30:be:76:d8:9c:08:
         85:e6:f8:32:a0:14:14:f6:96:9d:55:14:aa:0e:d2:a4:7b:58:
         1d:bc:f8:26:2f:c3:91:20:ed:8f:6f:cc:c0:56:c0:7e:38:f4:
         56:91:ec:3f:b8:01:8c:75:22:57:ed:e9:af:45:17:d6:15:7c:
         66:9b:63:3a:61:99:bf:90:f9:61:73:2b:6c:74:fe:0c:24:c9:
         50:2c:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:24:11 2026 by rpki-client