Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15799a10-c228-3a30-b11a-e178e403ebfa.roa
File:                     15799a10-c228-3a30-b11a-e178e403ebfa.roa (raw, json)
Hash identifier:          7grF36mXrBYOgkeuRVw8aFT6r7EokyQthkzadd6tsVo=
Subject key identifier:   2F:40:FF:D9:17:EF:90:11:B9:A3:21:E1:20:F9:80:84:80:E8:15:1C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CCFD74BEF0302BA00C896EF40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15799a10-c228-3a30-b11a-e178e403ebfa.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        173.23.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:4b:ef:03:02:ba:00:c8:96:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=d663d07e-9a78-4574-ae60-98ad9eb1059d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:de:e6:7f:08:3f:94:98:a9:85:d2:05:1f:
                    df:4d:3b:27:99:81:9b:23:08:c0:6d:9b:d2:12:a5:
                    69:ed:92:03:d8:fd:2f:30:39:a4:e3:a7:3b:93:34:
                    56:54:90:fa:17:25:e8:e7:14:ea:9f:3b:d1:ce:5b:
                    e1:3a:0d:f9:0e:d4:c8:58:0f:df:4e:c4:94:c4:d7:
                    5e:9d:ce:0a:78:2a:b0:35:b6:3d:25:b7:97:ef:26:
                    be:2b:d6:22:3d:bc:b5:74:98:a0:b9:bb:90:de:01:
                    eb:c9:14:35:2d:ba:09:76:b3:11:18:3f:70:45:8d:
                    89:39:8f:e8:97:e2:84:1d:69:c5:4b:d4:52:86:db:
                    78:6c:ad:f5:22:a9:a1:39:51:06:e6:84:37:f6:ee:
                    96:e8:8b:ea:2b:4e:04:06:eb:89:04:85:c5:f8:5f:
                    35:25:9f:94:8e:42:98:e9:cc:39:cf:f4:9f:6d:3c:
                    34:4f:29:ea:a4:dd:7b:f8:e0:66:6c:46:2f:8e:8a:
                    23:da:43:ae:1d:01:eb:14:4e:14:60:9d:01:6d:9d:
                    49:f0:de:c1:5e:9c:02:b8:7f:f6:a4:8e:8e:aa:bc:
                    a6:a2:e6:07:c1:66:07:a9:0f:df:8e:9a:0e:c4:ef:
                    62:18:8e:67:f4:97:6e:19:a1:ca:38:33:57:d1:68:
                    e0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:FF:D9:17:EF:90:11:B9:A3:21:E1:20:F9:80:84:80:E8:15:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15799a10-c228-3a30-b11a-e178e403ebfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:16:f1:a6:ec:06:62:bd:22:9e:72:d7:61:11:28:bc:13:09:
         2d:b1:d0:66:0d:41:e3:ff:35:9d:f0:ac:d3:f1:b1:9a:19:91:
         bd:7f:a6:ec:30:09:4c:44:58:f9:fc:aa:2c:b9:b2:21:d9:99:
         9b:c1:88:5b:3c:5a:a5:e4:53:45:ee:82:e9:7c:74:90:78:1a:
         76:91:02:2b:a9:7b:51:fc:5c:81:06:98:b0:36:8d:fb:d2:54:
         3e:b0:d7:e6:2a:0c:fb:71:ee:f3:36:6b:b8:86:95:66:98:84:
         28:50:c4:ca:8c:d5:41:b6:76:db:57:8e:a7:6f:c4:ac:c7:95:
         d0:f7:65:0e:0d:0e:99:6b:6c:11:83:46:c7:0f:80:04:04:b9:
         6b:d8:2b:bd:c7:9c:55:cd:9b:2c:cb:51:e3:b6:c6:07:7f:2d:
         4a:a0:ed:60:2f:bc:21:ff:d4:45:09:85:4d:51:60:20:14:32:
         60:4e:99:ee:76:04:e5:98:4b:1a:1e:3c:2e:80:34:73:12:12:
         28:de:40:09:f9:80:f6:1a:6c:6f:64:87:dd:73:f9:e1:1e:b0:
         0f:9d:99:80:3f:2f:5c:82:6d:08:19:ee:da:bf:06:16:de:72:
         73:81:44:3b:69:e1:aa:7d:6c:4e:1b:82:db:89:02:fe:96:a7:
         97:cd:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:27 2026 by rpki-client