Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa
File:                     967f720f-5e94-318c-bedf-d2b5a2038177.roa (raw, json)
Hash identifier:          f3Saz02s/SJBiq2/Gko2fs+DtLp2mzDTofJAIHzRCNg=
Subject key identifier:   3E:FE:65:D8:38:00:67:C4:01:EF:94:21:64:5B:5A:A8:25:2B:0B:AF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D7B6A9B1BE96B12BF6B2DAEC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     30036
IP address blocks:        216.108.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:9b:1b:e9:6b:12:bf:6b:2d:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=273cec10-66e6-4e5a-bc92-8550117120cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:a1:06:83:11:d2:79:ca:6a:3f:55:c3:d3:
                    86:e7:b1:f1:dd:3f:b9:15:87:3d:6b:6e:fc:37:16:
                    0e:04:02:82:6f:02:a1:c0:e5:59:de:02:4c:42:14:
                    0f:44:e3:12:8f:e2:29:2f:7d:69:c8:1e:ee:91:6d:
                    2f:c2:a8:d0:69:ce:d3:7a:d2:16:21:9b:8b:c8:57:
                    e4:9a:f9:51:b1:96:74:a6:08:08:93:b4:1b:73:c7:
                    21:ca:dc:88:72:36:98:2f:24:a6:e0:70:bd:a7:ac:
                    ca:95:e2:50:50:2c:dd:95:15:87:c7:8c:f8:1b:2c:
                    91:08:c6:7e:16:e2:c9:44:2d:b2:9d:61:85:83:e6:
                    0e:a0:22:14:5c:f7:48:db:db:c6:37:4c:dd:eb:ca:
                    f8:33:6a:27:f3:5c:5b:bb:c1:56:a7:11:59:31:1c:
                    bb:3f:ea:fd:e3:b0:69:82:46:17:8a:01:97:b6:19:
                    3c:ee:d7:d7:a4:81:81:e4:88:0f:f3:81:89:09:42:
                    49:00:49:24:83:88:56:c4:56:85:11:75:6b:88:7a:
                    cc:dc:05:c3:a0:06:56:25:4f:0a:36:3b:5a:d7:38:
                    c9:77:11:34:61:ed:50:a7:2c:f4:a5:0d:77:4b:71:
                    6e:22:dd:e7:2e:8b:8b:4e:25:98:92:48:8d:43:f2:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FE:65:D8:38:00:67:C4:01:EF:94:21:64:5B:5A:A8:25:2B:0B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/967f720f-5e94-318c-bedf-d2b5a2038177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.108.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:2f:64:5d:21:71:1c:ce:87:b2:b7:19:ff:4d:ea:5a:99:
         d3:2c:cb:25:62:52:ab:b5:67:88:50:a0:5b:1d:99:00:ea:e5:
         84:84:33:96:b4:60:bc:53:d5:64:e4:14:0f:cf:0a:db:ed:4b:
         bf:07:e9:d4:36:a7:db:b3:a1:fc:d4:6c:b2:31:ef:83:b0:b8:
         99:dd:3f:f8:dc:ab:8f:ba:6a:d5:0f:cb:d1:4f:c9:ec:88:8e:
         ae:b6:c4:8b:20:b3:eb:c7:e9:c5:4f:43:d9:69:78:f1:e1:45:
         12:fb:b2:8a:64:67:60:72:36:f6:a3:6b:9b:1b:41:1c:a7:45:
         ba:32:3e:e9:a0:b3:78:a0:e5:16:e1:17:c0:fd:e3:da:b1:38:
         d3:aa:49:dd:54:69:7f:f0:75:22:4d:b1:ab:78:a2:93:f6:f9:
         95:64:69:9a:9c:16:59:25:82:f3:16:6b:42:5f:fa:55:0e:05:
         86:da:64:d6:bb:5a:83:be:9a:16:ac:66:3e:4e:2e:06:c4:17:
         39:de:9f:81:08:57:a2:de:e5:5d:a4:9d:ee:86:01:75:c3:cd:
         ae:43:5a:7c:dd:c0:f0:91:20:94:1e:3d:e7:db:3c:9c:46:3a:
         40:0e:c2:8d:17:38:a0:b2:e2:24:31:d2:c0:62:5b:af:2d:ca:
         30:71:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:52 2026 by rpki-client