Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f880dbf-1650-30da-8777-197c7f35c869.roa
File:                     4f880dbf-1650-30da-8777-197c7f35c869.roa (raw, json)
Hash identifier:          DcXnj3TkiJQjbiIz75HkpDR+Wo5ZV3XsCv26MpagpO4=
Subject key identifier:   CC:A4:7A:5C:1C:5F:53:C0:E3:8A:D1:B0:09:16:36:3C:03:A6:03:45
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B2A7F801DB14F5F080AC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f880dbf-1650-30da-8777-197c7f35c869.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.22.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:2a:7f:80:1d:b1:4f:5f:08:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=15eba63b-eccd-4cf8-a44a-798eefa6eb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:c7:38:72:8e:39:11:2d:cf:9d:22:f1:11:
                    eb:fa:06:02:5f:39:17:f2:a9:76:ec:ce:64:de:3e:
                    6d:a5:df:e9:a4:db:d1:08:c2:6d:ac:da:e0:e6:2a:
                    cf:5a:36:55:c2:b4:10:c0:c6:79:a1:ff:8d:ed:45:
                    8d:22:18:96:59:dc:6e:04:ce:37:0c:0e:ad:b4:4e:
                    f3:a4:12:ee:0f:c9:71:50:8c:10:3b:42:ca:90:0b:
                    76:81:cc:48:28:b0:f6:f8:29:44:a6:d2:f6:7b:54:
                    f4:cf:e1:df:9b:84:fb:42:7e:8d:03:ac:44:73:99:
                    80:7e:90:a3:da:4e:8b:84:3b:74:46:97:56:9e:78:
                    89:c7:81:c2:f6:4e:50:7a:a6:2b:b0:4c:1d:9f:23:
                    8f:19:0b:ae:99:f9:36:91:2b:7e:f9:c5:46:f1:a5:
                    77:81:c0:2c:cf:19:c3:e9:98:42:6f:6c:e4:de:d5:
                    a7:81:b4:f1:92:19:76:de:35:a2:84:5a:44:5b:b6:
                    be:e6:6d:e3:79:8d:9e:b2:e3:52:88:9a:1f:60:3c:
                    f0:b2:03:f9:f9:ae:12:96:65:04:4b:7f:81:ed:23:
                    f8:19:9e:df:96:d7:5d:9e:db:c4:32:68:f8:33:dc:
                    b8:e5:b7:15:27:5d:4e:3c:c2:ab:73:6a:3b:3d:b8:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A4:7A:5C:1C:5F:53:C0:E3:8A:D1:B0:09:16:36:3C:03:A6:03:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f880dbf-1650-30da-8777-197c7f35c869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:df:43:8b:5c:40:ae:f2:de:42:e4:56:a3:ab:75:bf:fc:76:
         d8:3a:8f:08:f7:1f:3e:d8:a3:72:09:51:cf:a2:89:55:60:8b:
         ee:ff:f3:55:5e:6f:43:1e:4b:d0:f9:33:0d:31:e5:b6:84:b0:
         ea:b5:fd:62:15:a2:2e:9c:91:eb:ee:c9:5d:80:c4:48:67:87:
         2f:58:aa:f8:06:fc:d8:55:78:a9:d3:1b:4f:46:fc:cf:ba:2b:
         29:8d:74:98:e3:e4:6d:4e:20:5c:dc:1b:17:a9:f0:18:5f:ee:
         5b:77:89:fe:d5:dc:65:be:e1:bf:29:6d:2c:e9:32:09:fe:ab:
         e4:27:1f:83:a3:c0:ef:8b:26:03:fb:37:f4:ee:89:46:5a:63:
         e0:03:80:9c:97:82:21:61:0a:09:30:35:79:ea:88:c4:f7:b7:
         b8:a9:75:21:d0:dd:8f:72:f0:c1:58:1c:79:0b:dd:2a:c6:bc:
         20:c8:bf:f8:7f:88:43:0f:d5:0f:f8:53:c8:e5:14:b9:ad:45:
         5b:a0:b4:25:f0:03:7e:f2:14:3e:5d:38:9f:43:1e:57:e4:d4:
         dd:64:fc:3a:a9:62:d2:d3:f5:a0:bd:ba:e6:ca:12:df:04:1b:
         64:e1:2c:2d:0f:f6:bc:03:9c:76:56:cb:00:06:10:94:ee:7c:
         07:b4:52:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:28 2026 by rpki-client