Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99a331ea-d489-3974-8fea-af84c3034d58.roa
File:                     99a331ea-d489-3974-8fea-af84c3034d58.roa (raw, json)
Hash identifier:          W0cRIKrPmsU0idgiefyE7iMGrJSyPvmUW1wMGotOnWg=
Subject key identifier:   7F:8F:8A:7E:46:A9:AC:41:00:1E:D4:92:A1:F9:D1:F8:BB:CE:B2:07
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49744CDFB072E9D9D63575C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99a331ea-d489-3974-8fea-af84c3034d58.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.30.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:4c:df:b0:72:e9:d9:d6:35:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bc8a9db0-d75a-43b5-806f-5afaafc6aae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:6c:96:f6:f7:83:12:d9:d9:d3:2d:d1:b3:
                    c1:4b:fd:d5:7a:93:73:fe:5c:5c:a7:51:5e:74:e6:
                    ff:58:9c:06:df:80:53:68:dc:43:3f:26:ac:b1:fc:
                    70:0b:a9:bb:e3:c4:d8:74:8f:3b:9c:bf:cc:de:cf:
                    fb:38:2d:c3:d2:a8:df:c9:41:7f:6b:43:6a:3a:07:
                    5e:96:a3:6d:e4:2f:bf:70:e8:87:06:5d:cc:a3:72:
                    44:b6:b4:08:ef:1e:72:54:33:a0:41:6c:fa:7b:6d:
                    21:21:af:e1:1f:32:7a:e9:6f:35:65:74:a7:84:1e:
                    4e:51:4e:99:76:22:c9:b4:15:29:a2:4e:29:25:8c:
                    fe:49:5e:f8:62:77:f2:82:aa:8b:b2:7b:25:37:f6:
                    fd:57:a6:47:23:ee:98:0a:98:c8:17:ed:97:bd:b7:
                    85:d7:a6:30:db:08:93:46:65:a6:d2:77:20:02:ea:
                    1e:ba:08:8b:af:2f:fc:99:92:29:da:c3:fa:d1:1d:
                    bf:e0:a1:b0:1d:dc:7b:c6:c7:8e:97:97:da:0a:6f:
                    b6:1b:b9:95:63:eb:19:ba:9c:ef:1a:55:bf:2b:55:
                    1f:d4:66:b1:ca:d2:aa:84:cc:93:d1:75:04:6d:1c:
                    6b:b1:ad:b5:36:a4:3e:d9:e1:35:4a:2e:1c:96:9b:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8F:8A:7E:46:A9:AC:41:00:1E:D4:92:A1:F9:D1:F8:BB:CE:B2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99a331ea-d489-3974-8fea-af84c3034d58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b1:fc:05:b7:00:2c:5c:c2:4a:9e:46:d8:de:33:95:7a:f8:
         2e:88:c5:81:68:9b:e4:2f:0b:14:df:46:62:3b:5c:42:8c:5a:
         52:23:b2:33:69:ed:4d:82:ea:98:f7:47:5f:39:9b:0c:1c:2f:
         4a:4f:77:2c:18:bc:e3:f8:2c:a7:28:04:c5:77:12:66:69:48:
         9b:2c:51:9b:a6:50:b4:01:bf:38:55:fa:da:ed:82:5f:c4:f5:
         36:b3:8c:19:c8:09:65:03:c6:8c:ca:d8:66:58:24:43:cd:5c:
         cb:63:eb:b7:a4:8c:1b:05:b0:4c:e1:61:58:f0:36:d2:0b:70:
         0f:6e:b7:2d:7d:26:18:a1:71:8f:79:d9:77:d5:9e:e8:d6:22:
         00:9c:69:09:f0:bf:e2:26:65:d2:02:66:43:fb:83:ea:ec:9d:
         25:fc:13:65:22:a3:0c:63:0f:93:4d:27:ad:78:c0:01:af:d2:
         34:d4:d9:17:fa:f2:90:7a:df:3b:fd:a7:bd:09:7a:08:e6:fb:
         22:b0:6d:1e:77:ec:4c:a0:75:db:89:59:cc:40:3c:e3:a4:c8:
         a8:bf:10:47:ae:a9:ae:50:d5:a0:b1:80:8e:70:3f:e3:9f:01:
         91:45:da:c9:5e:02:b5:85:d4:7f:70:f0:59:4c:8f:ca:b7:08:
         4e:21:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:17:34 2026 by rpki-client