Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cd7604b-4a56-3bdf-87ab-c0522c530121.roa
File:                     1cd7604b-4a56-3bdf-87ab-c0522c530121.roa (raw, json)
Hash identifier:          nEsrys1anBYpI5an3xXb51ohFDPSc7loSQVCTPZng7w=
Subject key identifier:   AF:1C:49:67:54:52:88:D5:DE:83:8C:18:9B:8C:9C:A6:41:A3:CA:4A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CD99CEE477A9F2274D251CF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cd7604b-4a56-3bdf-87ab-c0522c530121.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        173.30.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:ee:47:7a:9f:22:74:d2:51:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=03414ea3-f2fa-47cb-b52e-7b35113a38fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:95:7d:8a:b7:73:88:5f:90:9d:d6:b9:dd:fd:
                    26:97:ad:bb:d1:f9:7b:2f:00:0a:6c:b6:08:ef:31:
                    6b:ee:3f:97:07:a7:3c:2c:3d:29:55:d2:95:4d:00:
                    36:3e:b5:58:42:f3:9b:b5:15:7a:07:82:28:41:30:
                    09:93:11:06:8d:57:5d:2b:57:02:cb:2c:b9:10:15:
                    b5:3c:63:cf:11:35:01:69:10:01:3e:ce:c1:14:d5:
                    7a:da:72:61:9e:f5:77:fb:97:7d:b7:f4:52:b4:b0:
                    78:be:a8:af:5e:d6:be:33:7b:4f:5a:ab:a5:04:38:
                    50:7b:b3:8e:44:6c:88:96:66:65:85:6d:a6:72:af:
                    16:e2:7f:ed:7e:39:44:47:1e:5f:4c:42:18:58:ba:
                    0f:75:e1:2b:88:7b:1b:f7:f1:0e:f4:f7:46:d6:a5:
                    1a:92:f0:ff:01:db:20:69:1e:1f:12:42:c2:5e:04:
                    83:bb:09:6a:35:47:6f:25:97:c8:e2:57:4e:c7:23:
                    f6:8c:1e:fa:73:3e:b1:bd:8d:e0:c8:aa:a3:bb:14:
                    af:a8:13:dd:e8:23:e7:58:39:61:72:dd:ae:38:8c:
                    53:56:32:7f:9b:74:44:68:c5:e1:8c:37:f7:c0:46:
                    d5:7a:cf:5d:7f:12:b2:59:c9:0c:5e:4b:de:aa:93:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1C:49:67:54:52:88:D5:DE:83:8C:18:9B:8C:9C:A6:41:A3:CA:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cd7604b-4a56-3bdf-87ab-c0522c530121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6f:79:3e:ea:fe:64:ea:b0:2a:5e:15:d7:c6:63:d9:17:f8:
         c4:5b:1a:f5:c9:6f:85:db:a8:f1:69:6e:3c:00:f6:1d:c5:c0:
         db:b4:4b:96:b1:49:b1:1b:4b:e8:54:78:fb:58:16:95:27:ed:
         72:3e:ba:8c:42:8d:6b:61:b9:1b:de:ea:53:00:bd:94:cb:7c:
         e7:59:ab:4a:3e:c8:ec:35:4e:96:1e:25:b4:e2:56:ec:a4:cb:
         e9:11:03:30:0a:45:7d:7d:73:00:18:01:ca:16:10:01:1b:68:
         7d:80:01:46:7a:9d:75:46:3a:1b:b7:1e:43:7d:e3:9b:b5:74:
         52:4c:69:ec:83:9f:4a:29:c2:ba:51:1d:4c:de:a7:2e:01:c8:
         0d:ff:c2:2e:bc:12:a4:2d:f6:33:b1:af:9c:4a:3a:69:77:22:
         38:f9:42:be:29:6a:13:5b:48:11:ea:eb:9c:5e:92:b2:ab:90:
         a7:06:b0:5b:c5:ca:d8:36:b2:ab:9e:49:3d:53:bf:bf:d6:19:
         20:4e:be:a3:ec:8b:ff:22:47:1d:f1:33:11:0a:d6:03:4d:f3:
         36:d6:2c:64:28:a7:28:4c:f2:7e:d5:c3:d8:ce:cb:50:99:9b:
         e2:4e:d3:79:da:e6:47:8b:fb:4e:3e:c7:1c:68:11:df:e2:6d:
         d4:e1:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:51 2026 by rpki-client