Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45db7033-023e-3a55-b502-440a7e6599a7.roa
File:                     45db7033-023e-3a55-b502-440a7e6599a7.roa (raw, json)
Hash identifier:          xEF00UzYMh7PKTjdFCsBjYl8g4NEMhtlvf2tF+jIjD4=
Subject key identifier:   43:2B:7D:BF:A8:8A:6F:70:D8:16:40:5E:C7:34:92:16:0E:C7:57:D7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E08665E8B37035939E8A58D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45db7033-023e-3a55-b502-440a7e6599a7.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.21.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:5e:8b:37:03:59:39:e8:a5:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=c21df5f8-59ee-4100-a445-d04a829d6070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3e:80:86:6c:46:9a:37:e7:ec:89:57:22:a8:
                    75:6c:64:b5:f3:cc:6f:ba:f1:84:b3:99:13:0c:0a:
                    f2:60:4d:a8:76:db:61:db:c6:eb:c2:24:a0:53:56:
                    ce:e6:7b:cd:35:27:38:ee:e5:6b:be:e2:da:bc:bd:
                    a6:8c:07:96:28:94:85:6c:ec:00:1d:6f:79:6b:ff:
                    cf:c4:4e:25:df:11:43:d2:29:d0:7c:95:a9:b8:11:
                    e1:b8:4e:1d:9f:c5:6a:40:ea:8f:ee:bc:3c:e8:8b:
                    11:d3:7d:56:ca:1e:5e:8c:54:4d:1c:6d:e8:13:02:
                    b5:d7:74:ea:8b:81:17:20:06:19:8b:90:52:c4:58:
                    43:e8:1c:87:8f:9b:52:21:ac:b9:b6:ba:75:89:75:
                    3d:db:f1:15:ba:99:3d:3f:ef:e4:72:f9:b6:8a:35:
                    19:d4:7b:54:eb:da:38:6f:3f:ef:99:9f:2e:a5:f6:
                    fd:e6:2f:6a:9f:c0:69:d9:ed:8b:45:08:ef:12:fa:
                    85:8a:25:7f:78:a5:14:91:75:d4:1f:c4:35:7c:e2:
                    93:b8:37:b9:3c:40:a0:e0:4c:4b:d1:17:00:46:b9:
                    65:49:5a:f2:1e:fc:54:c9:97:22:e1:e3:53:4b:59:
                    6a:67:da:af:51:2d:20:3c:a7:30:24:9b:cd:bf:3d:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2B:7D:BF:A8:8A:6F:70:D8:16:40:5E:C7:34:92:16:0E:C7:57:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45db7033-023e-3a55-b502-440a7e6599a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:25:8b:f5:64:a1:a5:c3:72:26:d9:70:da:22:36:93:57:d9:
         01:82:a6:58:c4:74:a6:3d:7c:d8:f5:fa:21:49:27:2f:c7:43:
         7b:40:c5:37:25:eb:bf:8b:39:dd:8a:7f:f3:1d:4c:0f:0f:61:
         41:2a:16:33:b0:49:a6:aa:64:7b:bc:bb:35:65:7d:be:eb:10:
         d4:b2:d2:1d:20:68:65:3f:38:48:f2:b0:91:e8:79:ae:ab:08:
         f7:40:27:49:0a:c2:6f:21:55:d4:af:80:53:53:cc:2c:4b:49:
         db:3b:b5:ab:b5:c2:7b:e4:75:7d:f8:f1:fc:1b:1a:a6:14:2e:
         b2:09:79:a8:42:3e:e8:43:5c:44:68:43:10:1b:53:c7:a7:43:
         4a:f6:8b:7f:92:e4:ca:95:69:d6:f3:7c:5b:45:7b:b3:f0:7d:
         82:a4:43:c8:79:ad:21:71:41:29:44:e0:60:c4:f7:53:92:49:
         f2:62:29:af:96:9b:e1:14:8a:ec:08:d9:74:ee:c9:58:12:e8:
         3f:03:cb:ec:0d:ae:4a:e1:e7:56:16:d9:a7:69:68:81:04:84:
         ed:2b:d4:7f:b1:f0:e1:71:cc:de:bb:73:f0:80:ae:ff:0b:f8:
         b4:b9:6f:14:70:58:05:56:a6:e2:cf:55:fe:56:c3:86:82:c0:
         da:33:d8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:26:50 2026 by rpki-client