Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4606e7dc-2e96-337f-b5a2-665e565f71b1.roa
File:                     4606e7dc-2e96-337f-b5a2-665e565f71b1.roa (raw, json)
Hash identifier:          MkMWOsHgGEtbp0F2pnjzZNhBudWsMwlcd9QJKNUsgJ8=
Subject key identifier:   CD:E3:FF:CF:CF:89:03:B3:64:B4:12:BF:EE:A2:3F:F8:40:E5:EF:D3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CE1FCE045A80A1B5971575600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4606e7dc-2e96-337f-b5a2-665e565f71b1.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.17.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:e0:45:a8:0a:1b:59:71:57:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=f266741a-e793-47d8-af08-8746a1a144d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e0:8f:ba:11:20:f6:fe:4e:bd:83:48:7a:f0:
                    2e:f1:a7:9a:53:8c:26:94:36:02:04:24:8a:b7:70:
                    6f:4a:ea:d1:ab:6d:05:47:0d:d2:54:f3:ce:23:b4:
                    08:65:a5:d1:a0:0f:d8:43:23:b3:44:f1:ec:34:af:
                    eb:1f:51:2c:d6:88:01:24:57:bb:b4:bc:6d:5f:22:
                    15:c8:6a:9e:1a:4b:00:85:0b:e5:ca:ef:54:1f:85:
                    59:bc:9f:ff:25:7d:be:b7:02:0a:03:b8:8b:6f:db:
                    60:15:42:99:25:65:25:3b:21:8b:84:2e:84:51:78:
                    15:4f:da:15:64:aa:86:91:83:c4:5c:92:7c:2a:08:
                    10:20:24:e8:f7:db:99:f2:b2:03:4e:65:9c:7d:be:
                    ed:48:ad:e5:ae:eb:ed:1c:bf:37:1d:b9:8c:27:61:
                    92:21:d7:14:3d:62:b1:e9:c6:cd:e6:f3:e3:dd:1f:
                    3d:7e:0f:e5:1e:6c:96:61:63:5c:6d:e3:c4:bc:32:
                    01:73:3d:b1:ec:fd:fa:3a:42:13:5d:43:97:12:6f:
                    b5:47:e2:98:cc:1c:24:e8:6b:8e:5e:28:c8:b4:95:
                    b9:8a:a1:fe:35:b2:8c:63:82:e1:e6:28:f2:b4:2d:
                    84:82:b0:96:ee:48:e7:17:40:b8:bf:c9:81:31:8b:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:FF:CF:CF:89:03:B3:64:B4:12:BF:EE:A2:3F:F8:40:E5:EF:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4606e7dc-2e96-337f-b5a2-665e565f71b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:cb:2b:73:97:6e:ea:ef:6a:74:a9:b4:39:9a:55:91:1a:a3:
         58:89:fd:37:21:03:94:68:bb:a2:42:75:d4:a5:13:e2:67:7b:
         b9:45:d5:7f:30:02:20:f1:54:32:9a:c4:a5:4c:b9:76:98:18:
         aa:9a:9a:69:17:b6:96:42:74:66:75:3d:a0:0b:9f:6d:38:fd:
         2a:2c:db:bc:99:3c:09:62:e9:cc:96:06:6d:97:e6:af:42:ca:
         24:bc:c1:97:54:e8:96:1f:43:ac:ae:db:d5:85:46:01:65:53:
         8c:e1:21:0d:d7:82:ef:4e:3b:3f:65:c7:80:b7:f1:00:57:b4:
         3a:e9:9d:2d:2a:d3:3b:ac:64:6d:4e:0e:28:86:0b:36:d5:c2:
         4c:00:75:14:e7:ee:63:52:bd:c7:10:88:2a:a6:78:a7:9a:9d:
         8d:26:a5:10:1d:b2:f7:75:40:6a:76:eb:85:cf:e0:a8:80:22:
         eb:b9:9d:b2:b3:c9:ac:77:f3:2b:9c:fc:69:dc:a1:44:03:e5:
         95:c1:4d:e7:1c:81:76:c5:f0:69:39:ce:dc:96:e2:1c:9e:df:
         ff:1a:fe:a8:0f:05:65:8a:bd:34:6a:14:35:af:4e:5f:bc:b7:
         90:a3:df:3c:f9:fb:d5:20:8b:c5:c8:6e:b6:eb:40:8b:28:46:
         ad:cd:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:01 2026 by rpki-client