Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/3c34b981-f342-363f-ab54-2ae8afc61d3a.roa
File:                     3c34b981-f342-363f-ab54-2ae8afc61d3a.roa (raw, json)
Hash identifier:          BCA0TuGGJ7yw3vKGZDDddbaaiTl0OYHdrFMNuHWiwVw=
Subject key identifier:   B4:D2:1A:78:83:B1:14:5E:85:DD:E1:05:11:93:C5:59:9A:BF:3D:48
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F4328584E11B4365E544A80C16CB2A680
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/3c34b981-f342-363f-ab54-2ae8afc61d3a.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     400110
IP address blocks:        184.169.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:36:5e:54:4a:80:c1:6c:b2:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=7d277427-7e0f-47fa-a886-15fef9e7a56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:07:8d:e3:80:5a:7c:95:39:a4:49:5b:08:
                    58:af:4f:30:0e:17:89:09:46:ac:5f:8c:4a:72:a9:
                    8a:8a:ce:88:39:d1:7d:84:b1:78:c6:2e:a0:43:ef:
                    49:40:51:df:f5:4b:19:76:93:b1:2b:58:7f:7b:78:
                    26:c5:50:55:20:13:be:68:1c:50:76:6b:5a:7f:ec:
                    f5:7c:9a:4b:10:65:ba:fe:e7:9e:ea:91:d5:af:2a:
                    e3:53:23:ca:e3:c1:48:5d:64:cd:e9:c5:8a:eb:05:
                    70:d1:45:59:69:50:8c:11:53:8d:e7:91:e6:0e:2a:
                    75:61:17:e9:82:ee:2a:de:05:af:67:72:0f:5f:19:
                    c5:ee:b7:82:14:70:2b:b4:41:8e:e2:bd:57:f0:07:
                    68:ca:e1:a2:10:0a:ca:12:b0:73:20:15:44:09:d1:
                    a9:6f:c6:e9:6e:48:e5:76:ae:b1:86:fd:50:74:ab:
                    d3:25:4f:6b:ae:02:f1:bc:6e:8d:67:3c:8b:66:d4:
                    1f:b8:10:10:de:4f:af:81:fd:82:04:a2:f3:5e:d0:
                    d7:f1:27:af:f9:48:c3:aa:08:ce:61:1a:8a:5f:69:
                    2c:a1:f0:5c:5f:5d:04:e0:4a:1e:cf:77:27:aa:c9:
                    e8:83:88:5b:7b:17:84:bf:52:92:1a:f8:fc:fa:d6:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D2:1A:78:83:B1:14:5E:85:DD:E1:05:11:93:C5:59:9A:BF:3D:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/3c34b981-f342-363f-ab54-2ae8afc61d3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:dd:6f:b6:5e:61:9e:a2:16:2a:b2:f9:91:96:7d:ac:23:
         50:cd:b1:ac:2d:10:a3:c5:1a:cd:fe:7c:16:35:eb:a8:c5:57:
         b3:4f:f5:c9:88:70:6e:be:1d:37:35:bb:c4:90:16:b3:f5:01:
         48:8c:e0:f4:ea:a0:98:0f:a3:46:a7:0e:2c:20:c3:bf:0a:82:
         a4:26:05:63:a1:66:55:a1:5b:a0:81:c7:09:e2:d3:0f:da:f7:
         d2:63:3f:f6:eb:81:da:39:dd:fa:e2:49:d7:c1:19:b3:ac:2b:
         f1:1e:e8:4a:5f:66:d0:71:0a:af:61:9c:c8:5e:d4:94:0b:23:
         43:5a:0c:12:3e:78:ee:ca:fa:36:ee:ba:11:c2:46:da:26:49:
         c1:3d:eb:79:11:05:cb:72:49:23:77:d6:ff:61:b6:8a:4f:c0:
         c5:6e:c0:2e:1b:d8:6a:e4:d6:72:1e:3f:05:83:c9:48:ed:95:
         84:81:81:78:18:c6:9b:2d:b0:81:22:29:34:3b:e7:3f:61:8b:
         56:ec:27:0d:3e:eb:41:f8:46:69:5e:a8:6a:0d:54:55:89:09:
         01:05:f3:c3:43:20:d2:4c:c7:fd:98:d7:71:f7:36:69:b2:e8:
         a5:11:bc:ed:d7:c5:a5:8e:eb:bc:27:92:93:79:a0:a4:bc:10:
         ab:fb:56:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:30:29 2026 by rpki-client