Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa
File:                     8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa (raw, json)
Hash identifier:          oUH+G9uMkQ1e5L0/eNCvGOFHrZiI8SOfJ02UWiTPHHM=
Subject key identifier:   22:59:18:13:52:31:1F:AF:92:51:E6:8C:A3:9B:84:12:A3:28:BF:D5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CBDB210C6FB0DA43979DBB2C4
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        173.28.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:10:c6:fb:0d:a4:39:79:db:b2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=7872a1ed-1c79-40e1-9ac6-03af6b360bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:70:3e:0e:91:ad:d0:34:08:86:95:04:2b:2b:
                    4f:dd:c7:5e:1e:48:4d:3c:5c:32:77:85:d1:72:ef:
                    dc:6a:14:95:0e:91:d4:38:db:21:03:35:ad:eb:e5:
                    a8:01:85:89:d5:bf:1f:40:e3:3d:cb:cc:44:66:bb:
                    80:c8:51:e4:55:3f:68:e1:fa:08:99:da:fa:6f:cb:
                    6c:9e:09:d3:8c:bc:9e:3b:87:3d:36:5c:65:f8:5f:
                    9d:d9:12:e0:3d:0d:2e:96:e7:0e:01:9a:ad:97:04:
                    d9:27:ec:bf:60:b4:f9:fd:8f:d1:d1:e9:54:ce:0f:
                    38:0d:74:f3:0b:7c:2f:1a:bb:24:1b:24:66:a5:f0:
                    9e:79:25:64:df:e6:99:49:36:54:62:f2:5a:84:93:
                    7b:b3:04:82:d1:9d:97:04:92:c8:4e:39:af:81:4b:
                    dc:d6:54:8c:5d:bb:8b:07:79:f4:e5:55:38:f2:ef:
                    b8:fb:53:75:90:ad:c8:a0:b6:7e:44:8d:b5:f6:e2:
                    26:50:25:41:82:24:4a:bc:64:59:16:e5:cc:c5:b2:
                    75:bb:18:8b:2c:d6:4e:0c:d2:96:9c:81:07:0a:f7:
                    71:9e:a3:73:c6:e2:65:65:13:6f:01:0a:9a:a8:e4:
                    1d:c6:a3:b7:c2:6a:78:70:9c:da:2b:51:9f:02:51:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:59:18:13:52:31:1F:AF:92:51:E6:8C:A3:9B:84:12:A3:28:BF:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ea:87:6c:cc:8a:9b:ec:ab:4e:82:47:fe:d2:d9:fa:ff:51:
         03:30:a9:a5:35:ac:9c:7d:0c:bc:0f:90:b8:bf:2b:7f:cc:7f:
         b8:71:62:bf:df:cb:49:c5:3b:6f:7f:11:8c:7c:95:20:9a:08:
         31:e5:05:51:b3:f3:81:42:e9:10:c3:5e:58:d9:d5:3c:64:0c:
         c2:b0:4a:e7:a6:e0:72:ae:c6:6d:82:fd:35:02:59:c7:0e:df:
         e2:25:52:96:c5:48:35:95:a7:52:86:a4:a7:21:f7:ef:cd:5c:
         6d:6b:76:89:14:7c:f5:d8:bc:a9:19:49:8e:54:65:b7:75:42:
         fe:57:d2:ff:ab:8d:26:98:4f:53:c4:96:af:2e:e2:2f:0c:23:
         79:a5:95:7f:1d:0f:cb:d3:74:c9:1f:2f:2a:4f:31:ae:c9:ff:
         d1:31:dc:b2:44:37:f2:25:c2:a8:c5:d7:dc:c7:8f:4a:9c:c9:
         51:e9:bb:96:70:2f:c2:ae:f0:95:f6:99:ce:e4:db:4f:5c:8e:
         06:9b:63:09:f9:10:20:cd:bc:f2:35:99:b5:85:f7:34:1c:b0:
         2e:ff:aa:ce:d8:35:aa:b1:a5:ce:1c:3c:07:3d:78:49:a8:72:
         4c:f7:d8:13:de:92:33:69:4d:81:fb:0f:92:37:2a:2b:b5:4e:
         c9:f9:93:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9shDG+w2kOXnbssQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
Nzg3MmExZWQtMWM3OS00MGUxLTlhYzYtMDNhZjZiMzYwYmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnA+DpGt0DQIhpUEKytP3cdeHkhNPFwyd4XR
cu/cahSVDpHUONshAzWt6+WoAYWJ1b8fQOM9y8xEZruAyFHkVT9o4foImdr6b8ts
ngnTjLyeO4c9Nlxl+F+d2RLgPQ0ulucOAZqtlwTZJ+y/YLT5/Y/R0elUzg84DXTz
C3wvGrskGyRmpfCeeSVk3+aZSTZUYvJahJN7swSC0Z2XBJLITjmvgUvc1lSMXbuL
B3n05VU48u+4+1N1kK3IoLZ+RI219uImUCVBgiRKvGRZFuXMxbJ1uxiLLNZODNKW
nIEHCvdxnqNzxuJlZRNvAQqaqOQdxqO3wmp4cJzaK1GfAlEAcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJZGBNSMR+vklHmjKObhBKjKL/VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFmMjFhZTMtNDVhZC0z
YmViLTlmMzgtYzMwYzZlYTM1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLqh2zMipvsq06CR/7S2fr/UQMwqaU1rJx9DLwPkLi/K3/Mf7hxYr/f
y0nFO29/EYx8lSCaCDHlBVGz84FC6RDDXljZ1TxkDMKwSuem4HKuxm2C/TUCWccO
3+IlUpbFSDWVp1KGpKch9+/NXG1rdokUfPXYvKkZSY5UZbd1Qv5X0v+rjSaYT1PE
lq8u4i8MI3mllX8dD8vTdMkfLypPMa7J/9Ex3LJEN/IlwqjF19zHj0qcyVHpu5Zw
L8Ku8JX2mc7k209cjgabYwn5ECDNvPI1mbWF9zQcsC7/qs7YNaqxpc4cPAc9eEmo
ckz32BPekjNpTYH7D5I3Kiu1Tsn5k3A=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:54 2026 by rpki-client