Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa
File:                     8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa (raw, json)
Hash identifier:          MSCfrq+KsunQjhSZK2UE7rJi4xbu6BvHkchyAr3+MK8=
Subject key identifier:   5B:FF:89:AF:19:A1:2B:DA:0A:FC:AF:2C:C8:96:75:AF:19:67:B6:99
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0700A360E8DC1987A7469DE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        173.17.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a3:60:e8:dc:19:87:a7:46:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=1eeafbb1-c221-4d4f-bdf8-7902945b4cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:69:18:cb:ad:7f:e6:42:f0:4c:0c:1e:97:
                    1c:25:c0:39:10:2f:d5:70:b1:58:b9:f3:50:d9:1e:
                    9a:fb:e8:b6:aa:b0:a9:48:c6:77:6f:1b:19:af:28:
                    e6:4b:ee:4c:93:9d:f9:76:a3:b7:d9:10:50:3b:95:
                    60:5c:83:df:00:ec:77:01:29:18:5d:6b:7e:d2:bf:
                    7d:6f:a9:f3:f4:19:78:d1:ae:91:06:43:c9:7a:00:
                    80:fb:f0:da:c3:7f:bf:da:3c:e6:b7:08:7a:b5:28:
                    3b:11:3c:57:cd:d0:3b:fd:5d:8d:4d:16:a5:bd:c5:
                    16:35:fb:c1:e7:57:b3:75:58:05:e4:f0:df:2d:e8:
                    ae:1b:2d:c1:35:54:bc:81:bb:ea:93:ba:fe:56:d0:
                    c2:47:c3:28:80:5f:22:45:10:37:7d:74:d6:3c:21:
                    14:37:b4:86:32:33:6b:9b:07:da:7e:31:d9:d2:74:
                    71:67:39:a1:99:3e:fe:6c:e0:53:27:62:91:01:47:
                    fc:cd:ad:db:d4:14:bc:3d:9c:3c:b7:34:35:3e:92:
                    ab:1b:73:ec:a9:55:66:43:07:10:3a:b3:1e:1c:90:
                    82:95:65:5c:db:cd:09:7a:e1:d8:50:81:7a:69:0f:
                    58:e4:14:c5:6c:b1:24:59:19:b0:3b:df:6e:84:90:
                    8d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:89:AF:19:A1:2B:DA:0A:FC:AF:2C:C8:96:75:AF:19:67:B6:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:3b:6e:fc:61:e6:81:fb:8e:1c:b2:7d:a2:c9:43:8d:1b:
         eb:63:d0:91:a4:fd:cd:7a:a5:e0:7d:c6:bb:ca:f4:f9:c9:51:
         18:da:e9:08:bd:72:dc:04:c9:1a:ae:aa:87:96:6a:f9:50:02:
         ad:4e:76:7f:e2:c0:1a:14:67:c1:a4:1d:58:4f:8d:56:c1:0d:
         b6:3b:42:b7:d0:b9:a6:7f:13:6e:d4:06:e8:84:ca:b7:a8:25:
         6d:7e:35:f4:22:1a:f8:04:67:e1:e5:5e:22:8e:7b:7a:98:f0:
         0e:a2:7b:ca:0d:78:c3:e7:86:aa:03:ba:25:ea:1b:2b:74:9e:
         47:56:62:a3:8c:99:f8:40:1b:08:11:8d:86:18:73:e9:f9:8f:
         34:20:a8:79:b2:56:53:c6:8c:1e:fc:8b:2a:43:c6:c7:67:95:
         a8:fa:e3:b3:ec:a7:fc:e3:2d:8e:0e:da:95:33:95:dc:18:66:
         76:a1:3a:2e:3f:08:bd:4b:38:01:f2:0c:5c:d1:1b:74:fc:36:
         02:6b:2a:ff:a0:c1:ac:8d:25:5e:44:8d:15:38:3d:93:ec:5a:
         9d:9d:44:1d:f8:ab:35:13:64:fd:aa:d6:1f:90:82:93:42:fa:
         90:0f:0e:4b:2b:96:bf:16:96:06:d6:b4:2d:7f:12:26:ce:8d:
         3e:2f:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:27 2026 by rpki-client