Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa
File:                     9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa (raw, json)
Hash identifier:          uCFsF19kzPHYIONVK15V6wkEdDyQIVJ0gwEb3Uksifc=
Subject key identifier:   62:16:B1:1F:26:5D:3C:AF:7E:3F:E2:91:8B:DF:26:7C:CB:C1:F9:A4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E043630F6ECDB83F733E38770
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        173.25.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:30:f6:ec:db:83:f7:33:e3:87:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=8244a38f-1b2c-44a7-a088-f930a031b4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:bb:4e:a7:2c:aa:f1:98:51:cc:47:c9:27:
                    97:0e:92:33:61:62:e9:38:b0:79:91:dd:48:da:83:
                    73:50:b3:ef:8c:61:37:26:bd:93:a3:f2:2d:50:5c:
                    f3:12:54:73:1c:ad:b7:3c:77:55:6b:05:0a:ce:ed:
                    ca:9b:d3:aa:57:12:e1:23:1e:7e:c4:f2:99:30:9b:
                    72:65:fb:2c:84:b7:ed:53:0f:15:93:7b:de:b4:45:
                    77:0f:cb:02:26:b6:f0:05:59:4d:ad:63:80:87:78:
                    3d:bc:bf:bf:e8:be:b4:cb:20:a0:6a:c2:25:fc:74:
                    49:34:6e:e3:bf:a2:2f:30:b9:37:70:6e:3c:d0:ec:
                    87:5d:1a:d8:34:0f:c3:5e:d6:5d:35:06:f7:fe:dc:
                    ee:c6:53:30:ff:31:48:47:62:58:e5:2c:aa:3f:2f:
                    9b:d5:78:47:27:a8:42:1d:23:42:99:17:ac:67:a1:
                    bd:8b:b7:15:0d:b7:4b:2d:84:67:07:48:ad:cc:1b:
                    4a:c1:52:6e:84:51:ec:33:e3:f9:c3:70:5e:e0:b2:
                    f1:63:ba:ff:26:48:0e:96:8f:1a:18:bd:b3:65:08:
                    0b:c9:d2:97:14:0f:53:f3:b0:f0:f0:46:08:36:93:
                    34:83:6e:0e:e6:f6:78:6d:c0:8c:f7:7c:db:2f:41:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:16:B1:1F:26:5D:3C:AF:7E:3F:E2:91:8B:DF:26:7C:CB:C1:F9:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d8:c1:fd:d2:49:a9:27:d0:21:8d:10:63:4c:85:9e:dc:c8:
         b6:e2:34:09:5c:7a:2b:68:3d:ad:f8:70:de:d0:ad:91:fc:d9:
         f8:50:3b:f5:7c:3e:90:19:94:65:c9:64:83:82:d4:68:96:8b:
         1b:1a:29:94:22:9d:11:d2:39:1e:54:65:ef:b6:f6:25:59:ce:
         d2:9a:8b:5b:0d:a4:e4:89:67:f1:c7:9a:70:d5:9a:e2:6e:36:
         0a:17:e3:26:d6:42:06:d6:f4:ee:ee:3b:da:67:38:b4:b3:3a:
         d8:bf:14:31:ac:40:c5:e8:63:1d:3c:d5:b7:3e:03:e9:82:3c:
         e5:0d:bd:4c:ee:80:19:5d:2b:7d:f7:3a:b2:05:e7:65:cf:1c:
         5e:d6:d0:40:66:f7:d7:bc:64:d7:f9:7d:82:f3:3f:e4:73:3d:
         3a:25:42:db:b6:d7:99:eb:a1:ce:13:d4:b7:12:bf:f9:ed:09:
         16:fb:36:1f:ee:db:1c:b5:75:f4:37:60:e6:d5:fa:61:15:e4:
         a7:1b:01:0c:36:aa:bc:3f:a0:62:40:7b:9e:da:f4:c3:3d:e5:
         fe:a9:b2:ef:c5:1a:f0:3e:f4:ed:22:86:22:6c:f5:01:2e:d2:
         9f:90:34:0d:ce:fd:f3:d4:af:b2:da:41:ba:55:ce:ff:b4:4d:
         35:89:6c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:02:24 2026 by rpki-client