Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17b60825-7f8d-34d1-bae1-1270c806af11.roa
File:                     17b60825-7f8d-34d1-bae1-1270c806af11.roa (raw, json)
Hash identifier:          BRN+h8icnCm4BY4veG+AUIE03F/tHQPRkt/YPAmUX9A=
Subject key identifier:   C2:A1:D1:DF:14:90:E1:EF:04:21:76:FC:7A:53:AE:B0:35:B8:D6:7A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0435E56B7B6F516F022EAA00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17b60825-7f8d-34d1-bae1-1270c806af11.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        173.22.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:e5:6b:7b:6f:51:6f:02:2e:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=ef709bb3-abd0-41a0-bc0e-402f30b022ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:25:e4:2b:dc:41:0b:8a:2a:83:cf:b5:67:
                    0d:f3:ce:db:ff:f5:2e:1d:40:c4:5e:e9:f6:79:bc:
                    89:3c:02:ad:7b:f6:7b:c3:25:2b:9a:36:5e:89:52:
                    f9:68:7f:70:36:34:2d:e5:57:7d:bf:dd:59:e6:65:
                    9e:a8:87:5e:2a:c0:4e:92:e7:20:63:ed:c6:f1:a3:
                    d7:51:7c:e4:15:9e:f1:af:3c:94:d7:fa:03:74:40:
                    88:4c:24:b0:94:c0:61:e3:1e:e7:49:f9:c4:7a:20:
                    6c:be:fa:0a:c6:ea:ff:b4:01:c8:41:24:b4:30:47:
                    c3:fd:c2:3f:92:d3:b8:6e:c7:b6:1c:ed:3d:0d:b2:
                    86:f1:f9:75:09:91:80:ae:9c:0f:50:14:d1:ae:ab:
                    50:5d:2a:ed:c0:d4:64:52:43:4d:29:24:32:b7:fd:
                    e0:d5:e0:bb:a2:0a:1e:27:07:63:9a:e0:43:d3:4c:
                    5e:af:1c:a0:a4:c2:c7:bd:38:d9:61:bd:ce:de:03:
                    32:c1:06:41:7c:e4:61:47:d3:33:84:ce:e0:ac:3a:
                    0e:32:1c:47:51:e0:20:01:b9:e1:db:5b:55:ee:50:
                    8b:71:95:c7:07:c7:18:27:33:a9:a7:00:12:49:00:
                    f7:54:71:7c:b8:ec:3e:44:7d:21:68:fe:b0:aa:8c:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A1:D1:DF:14:90:E1:EF:04:21:76:FC:7A:53:AE:B0:35:B8:D6:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17b60825-7f8d-34d1-bae1-1270c806af11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:31:73:76:f1:de:bd:2c:79:b8:d6:f2:05:bb:3b:f1:3d:3a:
         87:1c:f1:c6:0a:85:cf:fc:87:97:ee:4f:a1:a1:80:04:be:9e:
         7a:aa:77:77:91:3c:65:2c:06:61:ad:fa:6a:26:2d:54:6e:3d:
         14:e3:c1:f8:30:ff:08:4f:cd:ca:6c:89:46:70:65:67:71:68:
         a1:d3:b4:b7:02:72:8f:4e:74:7d:85:65:98:9f:a7:75:2d:89:
         8f:b5:2f:72:09:b7:c7:8e:72:de:b4:a1:f9:12:47:2f:59:ab:
         3d:25:77:22:08:09:b6:09:b1:9d:1f:92:bb:eb:72:e0:6c:73:
         fd:c9:0d:02:88:e8:c7:5e:47:a8:3c:06:cc:d8:28:38:f5:3c:
         8d:7d:5c:40:04:b8:07:da:3b:24:4f:3b:25:23:61:4e:eb:67:
         7e:02:18:f3:a0:4b:41:de:3f:f2:e6:c6:90:f3:58:38:07:9c:
         a1:a0:fe:f9:5a:d1:23:52:af:6b:ed:f1:49:e6:e3:e5:51:2d:
         32:8d:6d:16:68:c3:ae:a1:10:46:a1:ae:4a:a8:7a:55:ab:b7:
         b9:0f:9f:47:9b:8e:73:bc:02:7f:c1:f7:8c:06:2c:93:49:72:
         a3:d0:97:54:56:ab:1e:8b:64:46:ba:b1:8a:59:ae:b6:f4:9d:
         c7:4f:ab:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:36:23 2026 by rpki-client