Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0280746b-f468-3278-8ef7-d81a91a7771c.roa
File:                     0280746b-f468-3278-8ef7-d81a91a7771c.roa (raw, json)
Hash identifier:          7PVgBHnLKHRx395rpCHQYEZawJNZMJ3K3B/0hU8x8lM=
Subject key identifier:   C3:9A:EC:63:7C:B2:78:2F:C0:34:24:DE:91:41:72:C5:2E:44:7C:7C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7A0E491EA41547DE93F9300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0280746b-f468-3278-8ef7-d81a91a7771c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        150.195.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:e4:91:ea:41:54:7d:e9:3f:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c5b96107-44c1-4e58-ad0a-7c5be14d788d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:a3:2f:f9:c5:ad:39:c3:17:f3:e1:b8:13:
                    1c:05:af:7e:ba:f8:af:90:ed:61:e4:a1:59:04:a7:
                    e9:5d:0e:a7:19:ef:7a:07:77:a0:3c:88:cb:0d:e2:
                    18:dc:ce:cf:f1:74:6f:50:d1:38:54:f6:2a:66:26:
                    ce:da:3c:5b:b5:b7:a0:06:e3:d3:04:a1:34:2e:c0:
                    49:ea:72:cc:60:f9:c6:78:9d:12:b5:2a:76:43:9f:
                    c3:43:00:8d:27:62:f5:60:b8:aa:57:e0:0e:0a:27:
                    ca:be:b8:be:9a:4c:b1:99:65:96:9f:2c:55:7d:94:
                    00:49:db:af:62:9a:d0:60:5b:10:44:48:22:4a:14:
                    a9:f5:13:11:31:48:5c:4c:58:e6:23:6e:7b:49:d9:
                    c2:fe:d7:59:19:e3:97:b7:54:dc:a6:d3:48:5d:ea:
                    35:bd:77:ee:1e:42:ec:4a:0a:05:42:3c:1c:9a:8b:
                    ce:03:14:07:0d:ad:d1:81:a7:07:3e:a3:6a:5c:b1:
                    45:da:cb:11:1b:8b:9f:12:b3:da:30:a4:63:46:cd:
                    25:2f:bf:71:ba:70:90:74:67:ab:4d:c3:81:a7:9d:
                    88:f1:de:a0:10:1f:f8:ce:b2:f9:93:60:33:d5:3a:
                    c2:2c:fd:ae:5a:7b:58:1b:50:1b:09:34:a0:d1:8a:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9A:EC:63:7C:B2:78:2F:C0:34:24:DE:91:41:72:C5:2E:44:7C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0280746b-f468-3278-8ef7-d81a91a7771c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:9e:72:d7:88:17:44:05:47:0e:3e:7f:49:ad:a0:e7:1f:
         42:a0:76:45:15:e0:9f:9f:97:d3:bf:0b:05:63:87:e2:e0:9f:
         bb:20:9b:35:b5:25:8f:73:22:a3:65:7f:aa:86:43:26:45:fc:
         33:a2:41:cc:1c:5a:98:eb:2e:e0:fd:b1:34:e5:75:6e:a4:29:
         25:ec:f6:4a:30:ff:48:a6:e2:e0:05:01:d6:03:57:ab:6d:6d:
         05:9c:82:66:aa:5e:9e:36:58:f4:84:2b:44:f7:2b:04:9f:b4:
         83:06:5f:4f:3b:ba:c8:02:9c:81:df:06:7d:97:33:f4:83:36:
         6c:05:ac:b3:60:ed:e7:ea:6b:07:b1:98:41:22:88:c8:3b:d1:
         d9:c3:ef:85:b5:98:c7:7b:7e:bd:40:9c:c9:db:54:aa:22:ce:
         04:d7:68:c7:79:0b:12:26:04:65:ae:4a:6a:9a:f3:58:75:fa:
         f0:dc:61:1a:43:74:a8:65:c6:57:8c:60:71:6e:c4:0c:aa:05:
         e9:33:e1:84:58:ee:da:1e:5b:fb:a7:d7:73:78:87:77:ea:ab:
         47:5e:d6:dc:87:c4:ef:b4:96:29:0b:3e:4b:8f:23:29:ab:bd:
         1a:31:c7:69:c5:32:68:9b:e8:48:33:b4:49:71:62:1e:96:e0:
         29:59:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:43:17 2026 by rpki-client