Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/432e200e-0f71-3d9d-b9bd-af77278240dc.roa
File:                     432e200e-0f71-3d9d-b9bd-af77278240dc.roa (raw, json)
Hash identifier:          8g44i5YG/SlOzWAxG7Wu9llPCMh2wnfGVLepwwTZ9pM=
Subject key identifier:   AB:EA:57:09:12:73:30:51:BE:82:A9:76:78:4D:BC:4F:C2:B2:2D:DC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D773A7E1F93574E14FE3A9880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/432e200e-0f71-3d9d-b9bd-af77278240dc.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        173.20.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:7e:1f:93:57:4e:14:fe:3a:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=0dd532d6-a6ef-452a-8ffb-44cc032fe52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:d1:a8:d9:0f:e3:7d:5f:26:f2:6b:12:44:
                    2a:0e:71:e6:bb:3c:c9:ff:d6:01:47:76:ef:d4:5d:
                    c2:eb:bf:e2:82:ea:ec:92:a3:a3:44:53:e0:48:d8:
                    9d:cf:77:00:c5:24:50:e8:e1:a8:15:b9:b0:19:89:
                    fe:54:3a:2e:c5:18:6e:26:c1:6a:71:e5:ea:34:d2:
                    41:03:35:b5:f0:90:d8:4e:0c:2e:79:7e:88:d0:46:
                    24:dc:40:e0:7d:1d:4e:ec:20:28:1b:4f:67:c0:31:
                    c4:8c:f8:ff:34:f7:cb:d9:3e:29:d2:ad:c8:1b:7f:
                    bd:65:fd:97:f2:4a:3c:da:f8:03:69:41:9c:8e:cd:
                    80:5b:ee:0f:38:1f:d4:a3:a4:b3:7e:55:e9:d2:fd:
                    69:95:2d:f5:a1:4a:d8:84:a8:bc:ff:a3:ea:3b:89:
                    18:af:d3:66:01:9e:94:f8:85:b9:33:44:4d:aa:62:
                    d3:8a:da:02:ab:d0:41:bc:bb:f6:dc:b8:7d:b8:de:
                    2f:fa:d3:9d:92:6b:15:9f:55:f4:b4:1c:52:88:2c:
                    75:e6:0b:5d:b9:22:5d:a2:6b:3f:2a:e9:19:5d:31:
                    2c:25:1f:51:e2:d5:ea:a8:12:12:5b:a0:3a:c9:db:
                    c6:65:5f:eb:07:29:e6:b3:1d:e4:fa:10:d0:fc:27:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EA:57:09:12:73:30:51:BE:82:A9:76:78:4D:BC:4F:C2:B2:2D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/432e200e-0f71-3d9d-b9bd-af77278240dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:74:bc:c8:fc:06:40:92:25:91:f4:47:b8:c7:b7:bd:1d:
         ac:e5:80:bb:5a:35:5e:15:fe:6d:05:b1:40:88:b5:2f:2b:11:
         44:45:b0:41:af:1a:1d:32:ec:47:f4:3b:30:9f:ce:40:4a:bc:
         3d:c4:15:46:d3:d6:3c:98:f8:19:9a:5b:ad:76:1d:81:dc:a9:
         ee:18:e1:b1:31:24:3a:cf:d5:51:e7:c7:e3:34:ce:d9:73:18:
         df:9d:82:f4:7e:fc:56:8f:f4:d6:44:aa:37:cb:1e:20:b5:44:
         8c:a4:b6:2d:04:69:8d:13:fa:d5:76:8b:1b:94:d4:63:f7:50:
         5a:5b:3a:0c:f5:1e:c8:97:02:c3:c3:18:74:0c:8d:6b:e4:e4:
         c2:59:1d:4b:d5:5b:cf:28:e8:36:96:0e:6f:6c:f8:2f:f0:22:
         71:cb:9c:7e:d8:02:14:36:a1:30:73:cc:a9:e7:97:b1:dd:db:
         bc:3f:ac:52:2f:75:bb:2d:0d:c5:d3:23:b2:b9:cf:eb:83:b3:
         7c:cd:e5:13:40:f2:c1:5d:a7:2e:a2:12:1e:0c:a3:ea:3c:86:
         ec:3f:64:0e:ce:b9:88:75:4e:33:ca:59:82:3c:92:73:89:af:
         5e:60:47:8f:78:5a:a0:38:7b:bf:52:c5:52:d8:c2:99:df:e5:
         75:9c:ed:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:35 2026 by rpki-client