Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dd298ee-24e0-3c13-b217-b234529b88ac.roa
File:                     4dd298ee-24e0-3c13-b217-b234529b88ac.roa (raw, json)
Hash identifier:          dCEgXcxTCdIkN53GfWm9bufFSzkUHQJIQTuwdWXf850=
Subject key identifier:   64:C2:3B:42:86:1F:02:A1:AF:47:77:6F:4F:56:AC:9F:1F:0F:27:2C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CF2BD0C9450AD4370C340B6C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dd298ee-24e0-3c13-b217-b234529b88ac.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        173.18.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bd:0c:94:50:ad:43:70:c3:40:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=46d07d1d-7ee5-460d-877f-b218aa82f1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:36:d2:55:70:7c:0b:24:10:9e:83:fb:0d:
                    5b:d5:cc:0d:31:fa:9e:34:d5:9b:73:31:35:9d:53:
                    91:36:cf:ea:93:b5:30:63:e9:e7:f2:6d:0e:07:b7:
                    6b:50:9c:94:7a:ed:cd:48:01:18:33:09:71:41:7d:
                    1b:92:32:a5:4a:e9:a2:77:9c:43:ef:fc:41:9c:2f:
                    65:12:58:07:d3:10:fe:b7:e6:ef:c8:47:ed:a1:b9:
                    bc:59:ee:2a:03:95:a0:9c:de:4d:40:d4:c7:cd:52:
                    0a:69:dc:33:2f:f9:66:92:45:d4:56:76:d3:a9:67:
                    1f:d1:49:65:63:fd:70:19:14:00:10:1b:31:16:65:
                    ad:85:8a:24:cb:ca:ca:9c:c3:c9:ab:ff:8d:b3:8e:
                    e0:96:2c:5b:c2:2b:46:6f:27:e4:4c:84:03:dd:52:
                    b9:61:93:7b:2f:3c:ff:71:f2:9c:83:18:0b:c7:1a:
                    4f:50:35:14:6a:4a:49:1a:1a:e2:2d:b1:07:67:a6:
                    9f:94:5a:88:c5:01:5f:76:aa:6e:c6:2e:57:92:6f:
                    35:d0:5a:dc:fc:26:a5:4c:31:66:c1:df:21:79:1c:
                    d0:e6:3b:af:d3:f0:35:12:e8:b0:dc:65:6e:3c:36:
                    bc:3c:cb:0e:13:f0:9e:e9:73:ce:99:b3:8e:90:72:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C2:3B:42:86:1F:02:A1:AF:47:77:6F:4F:56:AC:9F:1F:0F:27:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dd298ee-24e0-3c13-b217-b234529b88ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ba:fb:b3:e1:ba:dc:43:3e:a7:ee:0b:30:6c:eb:33:de:00:
         b8:55:f1:5f:8e:cd:f0:bd:7c:8d:81:28:72:4c:28:1e:ab:f2:
         a1:fa:25:b4:83:b1:a5:9c:a3:84:b5:b7:cc:03:6e:ee:ed:0c:
         bc:4b:db:eb:08:b7:3d:41:28:2f:44:34:04:70:55:4f:96:0c:
         10:c0:b3:09:c0:f2:f6:6e:d3:78:64:a6:2e:7b:77:cc:8c:60:
         b5:eb:3e:e7:4e:da:fb:d8:08:51:7e:1a:a2:1e:b5:1c:0d:7f:
         ea:ae:d1:3f:66:df:fc:10:a3:a7:02:6f:b8:f7:26:37:69:c1:
         f7:c6:f5:91:94:4e:77:93:79:83:1d:2d:8a:5a:e5:f9:ce:ca:
         89:d9:59:46:71:07:bc:5b:81:3b:78:9b:39:df:67:43:c8:c1:
         56:7f:ef:6b:1a:1d:65:4c:6c:c9:7e:c2:3e:b6:b5:d4:82:32:
         2d:67:3d:40:47:d6:16:8d:1a:04:52:44:29:6c:58:c8:8e:a0:
         66:cb:7e:a7:de:61:4b:23:f9:c7:a7:3a:22:b1:00:57:aa:e6:
         47:c6:cb:db:0e:ba:78:e2:a2:b0:d2:98:20:73:59:aa:d7:be:
         09:e8:75:a5:57:44:0f:09:25:9e:98:3f:11:d9:1d:a8:d9:a2:
         73:06:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:04 2026 by rpki-client