Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21b90b06-0562-3166-bb24-55d7c6c64755.roa
File:                     21b90b06-0562-3166-bb24-55d7c6c64755.roa (raw, json)
Hash identifier:          0V+6+/+mjzfYzyi79tkRu9xaHfjWbMwIljP+lQwgDGg=
Subject key identifier:   BB:31:A7:83:7C:BE:0A:8B:E4:7B:29:03:67:C5:67:FD:C9:69:E6:A5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7A0C11E144580873568EC80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21b90b06-0562-3166-bb24-55d7c6c64755.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        150.195.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:c1:1e:14:45:80:87:35:68:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a7523e1f-55f1-439d-97f0-4e58ede5d3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:c0:8f:ec:99:7c:1e:e9:27:dc:17:31:0f:
                    76:ee:d2:cf:e1:cd:13:fd:44:80:58:90:c0:0c:c7:
                    82:47:f5:5a:90:27:fc:bf:9e:ee:a9:4a:e1:a0:44:
                    c2:c9:8c:a4:90:be:8a:0f:b4:5c:76:27:b9:17:8c:
                    16:2f:19:0c:89:55:4f:b0:c0:67:69:7a:01:8b:15:
                    24:58:e8:d6:58:0f:b0:85:ac:4c:15:a4:56:03:0b:
                    de:0b:55:a6:3c:57:9a:87:05:d8:27:1c:6d:ff:4a:
                    ea:86:04:0f:07:d5:b2:71:54:ef:fa:f1:cc:72:dc:
                    05:ee:85:52:45:56:da:51:9b:5e:71:03:e3:a5:89:
                    95:59:0b:53:ed:25:da:80:67:3a:d8:b1:1b:b3:a7:
                    f6:97:32:c1:2f:fc:8f:af:fe:ba:73:4e:cf:e1:36:
                    20:59:b7:2e:87:d2:17:f1:6d:ef:a7:cf:31:ed:76:
                    48:02:6e:5b:ee:ca:b3:df:3e:9c:ef:b3:4f:05:c1:
                    09:a7:5e:23:f9:b5:68:4b:7e:31:75:f2:c7:10:85:
                    c3:c7:fa:01:f4:7d:c7:14:68:57:fe:ae:dd:ce:89:
                    a0:dc:89:cb:69:64:ee:4a:75:48:6f:2e:7f:0e:99:
                    f5:5d:63:d9:8a:0e:98:7b:5f:00:20:c0:df:6b:11:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:31:A7:83:7C:BE:0A:8B:E4:7B:29:03:67:C5:67:FD:C9:69:E6:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21b90b06-0562-3166-bb24-55d7c6c64755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a4:33:e4:8c:66:39:c2:38:8a:34:1f:b0:e8:ca:36:ad:b3:
         3e:0f:5f:15:de:f1:83:7a:fd:34:28:40:a2:65:ab:71:f7:94:
         bf:e3:d2:df:1b:ff:ac:02:19:6c:cd:b8:08:c3:d4:cc:28:75:
         b5:85:dc:05:89:b6:68:56:da:17:33:23:36:0b:c3:86:2c:04:
         fb:31:60:f4:7c:66:fd:3f:ad:a4:30:07:6c:1c:a3:68:4d:91:
         1b:6e:a7:0b:74:49:05:8d:b0:51:27:88:a2:00:a8:cc:35:dd:
         9a:b9:09:02:18:12:ef:88:04:a9:40:3a:c6:d7:44:91:3b:b9:
         15:f7:a3:0c:2d:04:02:2b:4d:c3:33:c4:36:b6:b6:f1:76:5f:
         63:15:3d:44:0b:ee:33:4a:35:22:96:5b:5d:21:93:36:f8:b4:
         5f:8d:d2:3e:2e:c0:62:9f:20:71:d8:3c:cf:af:c5:c4:0b:97:
         d7:11:4c:7e:0b:6c:53:f4:d7:93:05:e4:7a:a1:16:13:a7:c2:
         d1:83:2b:b5:a1:05:7e:e5:33:f1:27:1c:ef:20:89:3d:e8:f4:
         d6:30:ca:7a:14:94:fe:a4:b9:52:94:c5:1c:ee:91:fd:cf:dd:
         af:db:8f:57:42:43:9b:33:ff:60:18:98:22:82:03:f0:eb:12:
         58:c3:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:53:47 2026 by rpki-client