Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4698492-8bf7-3bc4-bf6c-137506aace77.roa
File:                     a4698492-8bf7-3bc4-bf6c-137506aace77.roa (raw, json)
Hash identifier:          5he+E2LTFk9+oEBR4jly2CLe78CmLML2zYcJgDtb0is=
Subject key identifier:   9B:26:CA:78:D7:CB:C6:7A:C5:E7:E1:55:88:78:6A:BC:B0:D3:CC:25
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B4B0FE7B3F3627EEE2BC8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4698492-8bf7-3bc4-bf6c-137506aace77.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.16.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:4b:0f:e7:b3:f3:62:7e:ee:2b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8f00bcd6-6a54-4398-a76b-a2d5cd65aa00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:c7:1b:c9:56:d5:55:4f:1d:70:0d:4d:6e:
                    06:af:65:b3:b3:5a:03:49:f9:37:83:32:53:a0:28:
                    c7:93:1b:bf:ac:bb:2d:20:37:3e:f9:93:54:5a:cc:
                    af:b7:63:07:a3:89:0e:3c:13:86:c2:5e:93:3d:a2:
                    b0:b5:f9:da:01:da:6b:a6:f1:cd:ca:a7:f0:c0:1b:
                    1f:f7:9e:0f:fe:43:e4:2b:0a:99:47:62:62:51:7f:
                    e5:ae:6e:38:58:c6:0b:da:34:a6:0e:ef:db:7d:96:
                    fe:28:01:44:0c:a2:7f:c6:2e:6d:00:0a:76:fb:b9:
                    dd:66:a1:cb:fd:ef:33:a1:da:15:85:6e:27:43:1d:
                    e6:93:c4:59:7b:85:2b:a2:02:f6:55:2f:bc:08:67:
                    20:bf:4c:92:f1:ea:d1:96:a2:8a:b2:91:22:52:4c:
                    30:60:c5:3f:3a:54:73:c2:d0:ec:e3:68:60:e4:bd:
                    22:da:1e:c3:72:5b:f9:ef:18:15:28:57:21:90:d6:
                    6e:e1:ce:0c:34:c6:61:f3:e6:4e:bb:41:21:60:f9:
                    5e:27:4e:5a:53:46:93:f6:b6:54:1f:17:29:fa:bb:
                    6a:c4:1f:3f:3c:f4:2d:13:ff:9f:1d:cf:c2:ce:60:
                    f5:a6:60:31:c8:93:b6:dc:7e:21:f1:d0:0b:69:c4:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:26:CA:78:D7:CB:C6:7A:C5:E7:E1:55:88:78:6A:BC:B0:D3:CC:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a4698492-8bf7-3bc4-bf6c-137506aace77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:69:46:be:0e:7f:b2:7d:e6:9f:2d:4a:24:3e:67:79:5c:42:
         ba:73:a3:5f:75:a2:5f:fc:15:ff:9b:36:eb:0e:ac:a8:b8:f1:
         60:eb:3e:8f:5d:83:bd:c0:82:6b:3d:b3:44:a5:33:39:ef:02:
         bd:0a:28:bd:d3:30:c0:05:d1:74:b2:56:16:f6:cb:89:6e:cb:
         99:e3:2b:7d:83:b6:51:10:a2:44:80:4d:69:23:f6:3f:e3:cd:
         aa:bd:ae:a3:b8:9a:d7:0d:26:b8:9a:6c:5c:41:28:62:d5:4f:
         b1:15:1d:cd:4a:4a:65:3b:e5:3a:45:cb:a1:42:cf:b3:ce:c0:
         e3:ad:dd:cc:b1:94:5e:ca:bf:9d:33:b2:40:11:35:57:a6:19:
         70:ea:a3:ca:64:8e:de:35:a2:00:f4:a4:d9:cf:32:1e:2a:e3:
         3e:bb:04:9f:71:10:3d:82:37:56:08:a3:28:a2:7f:6e:75:14:
         6a:38:50:b8:f5:0a:7e:44:29:f9:73:a6:e1:44:a4:a5:74:b4:
         b9:22:8b:16:f0:3d:a2:f3:67:80:14:ab:f5:8a:96:2a:e4:00:
         f4:aa:b1:ce:88:57:ce:cb:fe:5e:a0:b9:24:8a:ed:dc:f0:e1:
         19:b9:2e:0a:ee:1a:a2:0c:de:d4:a6:bb:7e:3e:92:3a:36:1a:
         0c:05:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:05 2026 by rpki-client