Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f1aaa40-361e-376d-b3e5-374b77410ad5.roa
File:                     0f1aaa40-361e-376d-b3e5-374b77410ad5.roa (raw, json)
Hash identifier:          MR/SZYvuiVY0iNEbJvDJeN5zsP6khd7Q4IEUTSskV6A=
Subject key identifier:   77:31:AA:FC:8A:92:6C:78:18:53:32:8E:0D:68:99:EC:B1:DD:99:BB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0865E1C3E8A866A2823F2A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f1aaa40-361e-376d-b3e5-374b77410ad5.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.30.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:e1:c3:e8:a8:66:a2:82:3f:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=03c3d7f5-fcde-4f8a-ab4b-6ae07061db14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:39:86:6c:53:60:11:07:28:b2:a7:32:ec:
                    c4:30:70:ea:9d:1b:b4:23:c8:19:7a:eb:79:f9:0f:
                    bb:a0:70:34:ca:18:a8:dd:5d:c0:76:b8:4a:a1:c9:
                    18:49:d7:8b:6e:d3:b7:27:9a:91:f3:f1:16:8e:bf:
                    94:cb:a0:97:70:a5:68:c0:5b:49:6a:5c:ec:cf:e3:
                    16:8d:32:6e:33:36:69:6b:e2:49:07:83:cc:43:e3:
                    5a:a0:32:78:df:fd:68:27:10:8b:5b:a2:1f:78:4c:
                    23:1f:d2:84:55:8c:89:a5:25:03:02:83:62:19:c4:
                    8f:93:f2:85:4a:d9:d2:fb:b1:45:5f:5f:40:6c:04:
                    a2:d5:7a:75:ac:ef:84:bb:63:be:a9:ba:b1:2b:b9:
                    3b:70:28:53:0f:9e:d8:59:f3:fa:87:df:28:fb:51:
                    06:14:7d:be:61:20:6e:9b:e6:77:1a:e2:7c:4c:78:
                    38:f6:07:01:5e:34:5a:00:db:05:2c:8f:f5:40:a7:
                    cb:13:30:65:d9:02:02:e8:28:12:e8:04:ec:c4:40:
                    b8:ef:3a:79:54:17:94:c4:0c:29:09:04:62:ae:4a:
                    9e:48:15:12:9d:7c:3e:bd:54:74:f1:57:2f:63:78:
                    45:33:af:62:ae:4a:c2:7b:e2:8f:48:e1:76:80:60:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:AA:FC:8A:92:6C:78:18:53:32:8E:0D:68:99:EC:B1:DD:99:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f1aaa40-361e-376d-b3e5-374b77410ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:0d:73:8a:0a:e1:3d:41:4e:0c:af:52:b8:bb:41:e1:71:
         f0:a8:ef:62:88:c3:a0:9f:5b:30:69:7a:d0:9f:b8:a6:ab:ec:
         72:b0:6c:1c:a8:da:53:c7:39:05:37:28:c8:78:12:f5:27:94:
         70:96:59:d3:da:c9:71:95:d7:35:69:b0:26:fc:e8:81:37:7f:
         80:59:c5:84:ff:ce:4f:d5:16:ad:7a:6e:17:54:58:2c:ff:ce:
         f3:15:96:1c:b8:4a:df:3a:54:3b:d4:8c:da:cc:cb:05:c9:13:
         e7:ca:27:e7:70:a9:9e:ea:e4:d3:cd:3d:59:d6:de:ef:e5:4c:
         d5:eb:bc:f5:1e:ae:18:ee:f2:c6:11:28:f4:db:06:24:15:cf:
         94:f9:e0:b7:af:f8:5d:8b:7d:f9:1c:6a:6a:5d:d3:dc:ae:f8:
         bf:ec:62:0d:ef:de:c4:f7:94:6d:bf:eb:85:08:c5:31:79:78:
         07:d7:45:a0:0d:b6:74:87:52:76:15:ea:9d:f5:03:5e:70:98:
         6a:f3:3a:1a:2d:d5:3b:d2:00:ce:bd:12:e8:c6:09:a3:4f:7e:
         02:0d:a3:05:15:42:25:c8:f2:13:23:c6:6e:c3:c0:36:b3:92:
         2b:fa:26:ea:17:20:bb:5a:13:ed:7b:cd:3b:73:46:83:3f:20:
         41:b9:8a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:33:23 2026 by rpki-client