Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/16e6baa0-3420-3adf-9c97-fd44a4569527.roa
File:                     16e6baa0-3420-3adf-9c97-fd44a4569527.roa (raw, json)
Hash identifier:          z8fl7j14peosdFvmt/CT8Pmhh6ygcArzsH843Z8q5n0=
Subject key identifier:   EA:1C:3A:F5:5D:56:53:CE:D9:C0:B1:56:6E:6C:82:D8:16:AF:CE:9A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D63AFA329C0EE4A6C8DAEA8C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/16e6baa0-3420-3adf-9c97-fd44a4569527.roa
Signing time:             Sat 04 Apr 2026 01:00:25 +0000
ROA not before:           Sat 04 Apr 2026 01:00:25 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     30036
IP address blocks:        173.25.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:af:a3:29:c0:ee:4a:6c:8d:ae:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  4 01:00:25 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=01661e72-229b-4e8f-a0d1-a06fd1519694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:02:2e:a4:a2:a0:d3:ee:f7:7a:f1:cb:e5:
                    9c:57:cc:59:7a:ed:bc:5e:aa:6e:8a:fd:00:3e:c5:
                    a9:8c:39:e1:49:9b:b6:2a:17:cf:52:15:e6:1a:73:
                    62:9d:7f:6e:bf:c1:02:b0:44:51:e1:b0:66:8b:0b:
                    ce:29:91:ed:44:0c:57:13:fa:63:3c:17:af:b9:62:
                    ee:aa:5a:59:9f:5a:22:96:b7:40:1d:fb:28:e8:5b:
                    ab:1f:8f:1e:52:25:5b:f0:cd:9b:2d:9d:0f:2b:43:
                    aa:d2:1f:bb:44:8f:25:8c:0d:24:6e:28:56:57:ba:
                    b5:26:30:1f:1b:64:33:5c:84:bd:c2:b1:19:a1:c9:
                    ae:af:95:4e:f5:58:b4:13:c6:fa:4f:a3:4b:57:e3:
                    e2:cf:57:8c:8a:5b:06:ad:66:81:0b:8c:fe:b8:e1:
                    c9:eb:e4:45:52:35:05:c1:f8:9e:9d:55:e0:09:5a:
                    2a:ef:d3:d1:bf:e5:57:53:b2:6a:c5:8c:d7:9c:10:
                    7b:4d:4c:50:60:af:76:c1:45:55:08:55:3a:28:ba:
                    5c:28:80:b5:36:e4:0b:34:e0:0f:3d:e4:bb:0f:01:
                    e4:27:ec:53:26:17:d8:c4:86:ce:6d:3a:ab:33:99:
                    eb:a1:e0:69:e4:4e:d2:73:4a:ef:fc:91:3d:c8:c3:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1C:3A:F5:5D:56:53:CE:D9:C0:B1:56:6E:6C:82:D8:16:AF:CE:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/16e6baa0-3420-3adf-9c97-fd44a4569527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e1:30:4e:e4:25:98:fa:51:e0:47:3c:96:d1:74:33:52:fe:
         99:87:b3:1a:9d:5b:96:a6:f0:ca:a4:df:c6:7a:f9:5d:96:fb:
         88:a5:e5:90:63:07:ff:b8:6f:25:f5:61:65:5c:98:9d:10:66:
         98:6f:78:bf:18:b7:c4:32:7f:e7:2c:ee:74:53:b1:71:4b:7b:
         ef:88:58:69:bc:36:17:46:c5:63:8f:4c:cc:d1:f7:bd:6d:49:
         c7:a9:0c:7f:ff:b1:6e:db:66:61:02:0c:66:c1:1e:48:40:dd:
         e7:1e:7b:70:a5:e7:08:0e:fb:30:23:8d:46:c3:e6:19:f3:43:
         63:31:61:91:8e:aa:88:48:b9:3d:88:ac:4d:bf:b4:8d:d4:81:
         db:c4:86:72:fe:38:95:ec:6d:9b:be:8a:c7:f8:33:be:20:0a:
         ac:be:22:42:fe:20:c6:d4:5e:e7:a2:5f:03:ea:6e:ce:33:35:
         5b:df:d4:65:6f:04:26:09:d5:71:71:cb:2f:e3:fd:fe:91:f9:
         a3:a1:e4:30:6d:ee:51:2c:6c:42:33:10:4f:4d:f6:b2:2a:a2:
         45:67:3e:b6:5b:2e:1a:b9:d5:c8:65:c8:1d:01:02:cc:61:ff:
         9c:9f:cf:36:45:40:dc:5a:51:31:b1:e3:b9:e8:4d:25:61:2d:
         d9:1a:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:40 2026 by rpki-client