Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c43c01c-6469-3a83-9e10-dab70df62829.roa
File:                     6c43c01c-6469-3a83-9e10-dab70df62829.roa (raw, json)
Hash identifier:          dWuhb3mu5Dcc8XSor+vf2HYh2Idx2egehaiVQfPaBLs=
Subject key identifier:   EE:6E:A0:74:C8:F7:B1:C4:13:73:DE:65:94:67:B5:51:CC:D4:1F:D8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DF7A5D46E02633106FDA86A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c43c01c-6469-3a83-9e10-dab70df62829.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     30036
IP address blocks:        173.24.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d4:6e:02:63:31:06:fd:a8:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=f0ba0eec-799d-4931-8b9d-df731d706d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:d0:f6:01:37:75:4c:09:c9:0a:b2:5e:16:
                    53:a9:cb:12:58:c6:5b:06:aa:d6:c7:1e:53:3a:5c:
                    88:ca:59:71:ab:2b:01:38:08:85:7a:9f:64:38:12:
                    d8:ba:b0:52:22:02:81:5f:37:30:fe:34:c0:9a:48:
                    54:cf:b0:67:ef:a3:eb:5e:81:6a:f6:c4:9a:5d:f3:
                    c8:5a:f2:84:5c:d6:2c:37:f9:ed:03:01:c4:b8:a4:
                    a5:10:a8:a3:3d:e2:85:48:05:0d:21:44:1c:83:22:
                    74:95:ae:f1:81:ea:0e:bc:ea:2b:96:1c:a3:80:b3:
                    aa:96:6a:c2:dd:e2:19:cc:15:20:d3:37:b0:1e:03:
                    4a:61:89:c4:95:20:1f:50:69:6d:a6:6f:b4:d5:38:
                    bd:42:42:fa:6b:f0:67:5f:52:04:7b:96:36:b1:08:
                    58:19:79:1d:a3:bf:5b:3d:4c:26:d9:86:61:b1:93:
                    d2:3d:7b:f2:2c:6c:99:81:8a:ae:30:76:50:3c:de:
                    47:1b:13:93:18:84:e6:c3:74:f1:6c:e7:14:6f:6e:
                    8c:6d:24:b4:0a:cc:f6:16:87:63:f1:bd:2e:04:bd:
                    42:ff:0f:20:6e:a8:98:85:47:0e:11:bb:72:64:3e:
                    22:8e:7e:28:bc:ba:a8:5c:ce:ed:37:59:2d:cd:e7:
                    00:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6E:A0:74:C8:F7:B1:C4:13:73:DE:65:94:67:B5:51:CC:D4:1F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c43c01c-6469-3a83-9e10-dab70df62829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:0c:8c:23:8a:30:cb:26:3f:84:96:ea:4c:61:85:da:9c:
         1c:fa:6f:2c:fb:fe:fc:66:23:18:10:d7:6e:a1:62:10:f8:fa:
         ec:23:78:81:58:f6:71:1e:82:a7:99:13:10:89:45:72:5d:34:
         cd:30:f5:b1:cf:47:19:bf:cb:65:ea:3f:24:8a:ce:51:09:a1:
         29:9b:bf:00:1f:21:ed:99:7f:e7:c5:74:b7:fd:5b:5c:fd:5b:
         7f:19:86:00:4e:ea:21:95:64:a8:68:05:d7:8e:31:76:76:47:
         1f:6b:a4:ca:06:0f:2f:cd:27:d4:17:dc:ff:e5:41:52:9f:2d:
         6c:b5:cf:97:5c:33:55:67:23:76:5e:23:ee:82:2d:ae:67:1a:
         d4:b8:54:23:2e:2d:9b:a1:e1:0d:c4:0b:1f:02:71:e9:68:bc:
         cc:f8:90:3a:fa:f8:53:31:8d:e6:47:1f:ed:b4:26:02:c1:29:
         e2:dd:95:d8:5e:ea:93:51:e8:a3:87:22:f5:c0:95:32:1a:db:
         61:70:79:a2:fb:3b:74:1c:b9:dd:fe:7d:4c:cb:96:13:7f:36:
         9c:2f:d3:a1:ef:0d:05:38:55:bc:3d:1d:d7:d7:48:69:62:64:
         9d:bb:b5:ff:3b:68:3d:8d:bc:11:93:fe:bf:98:18:c4:52:ac:
         43:8b:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:03:54 2026 by rpki-client