Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b90190e1-ad68-3295-93dd-13e420d36dff.roa
File:                     b90190e1-ad68-3295-93dd-13e420d36dff.roa (raw, json)
Hash identifier:          Ifcpr9VMbUhF470kVtkNvQbtJKuZB3FzBddlvyC9mEA=
Subject key identifier:   E7:D1:8C:B0:A1:EF:C2:56:58:6C:E6:1A:33:2A:11:06:44:D6:6E:15
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D65153E626AA12975AB488860
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b90190e1-ad68-3295-93dd-13e420d36dff.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     30036
IP address blocks:        173.31.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:3e:62:6a:a1:29:75:ab:48:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=0eb7062a-bcaa-4c70-b2f0-b8286147e9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0b:c6:5b:f3:5d:62:d2:c9:42:3e:90:58:09:
                    b8:bb:6b:9a:83:0b:ac:8f:98:ba:e8:53:65:f8:96:
                    fd:f4:80:24:89:9f:a9:31:c2:26:4c:b4:4f:db:ce:
                    5d:24:df:16:7a:47:3c:d2:10:76:24:3f:23:83:49:
                    58:52:a5:67:0a:65:62:d8:aa:0b:46:41:5f:16:3f:
                    82:ed:3c:3d:48:8f:cb:d7:b7:dc:95:56:81:dc:45:
                    0b:96:8c:b1:46:ab:56:0c:32:72:71:b2:3e:01:42:
                    1d:0a:0e:9f:65:ce:3a:e9:b2:10:61:3b:47:90:b2:
                    68:31:4f:1b:11:72:bb:ad:76:0d:c4:79:77:15:42:
                    ca:24:cf:92:93:4e:53:60:77:9f:43:75:06:ac:8c:
                    78:85:85:7a:61:e8:0d:3e:6c:f5:d0:e3:83:cf:d0:
                    f8:79:0e:d1:12:8e:ee:b7:7d:55:1d:65:1b:6c:0d:
                    95:3e:cc:df:ad:ce:b0:42:61:f8:c5:42:21:e2:a0:
                    78:f3:f6:c8:4d:f3:36:0d:2f:75:9a:60:b1:76:41:
                    92:ce:cc:b4:b6:8a:49:5b:7e:b2:31:89:81:24:92:
                    de:78:0e:af:70:2c:c0:a8:08:4a:d3:03:c5:d9:42:
                    48:72:a9:8b:a3:69:71:19:81:e8:8c:56:e4:e4:27:
                    af:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D1:8C:B0:A1:EF:C2:56:58:6C:E6:1A:33:2A:11:06:44:D6:6E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b90190e1-ad68-3295-93dd-13e420d36dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f0:7c:71:2b:93:9b:3b:e2:32:a0:16:04:ad:63:03:93:e9:
         d1:16:a4:f9:84:b4:45:97:e3:c1:d2:ee:bb:b2:af:98:d2:d0:
         0d:ae:e6:d0:ed:6c:bc:11:f6:b6:3e:e0:2d:35:c2:6a:ac:78:
         d0:c4:a7:0e:e7:ea:eb:e0:00:25:f8:04:7c:ee:cd:6f:c4:7e:
         8d:c3:82:71:b6:11:77:fe:a7:bf:5d:86:c4:96:fa:0d:1f:86:
         2a:97:f5:e9:6e:47:cd:99:83:73:54:b1:f3:e2:60:cc:2f:92:
         5d:8b:48:98:bc:e4:63:d1:1d:bb:f6:45:d0:93:d1:d7:45:94:
         ff:b9:4b:3d:d8:38:4d:76:e0:76:5a:6a:a8:53:c9:a6:d8:45:
         79:68:b9:d7:9f:33:4d:20:9e:d4:ce:39:a8:fa:e0:33:c2:49:
         fd:7b:f7:56:3b:9b:ab:bc:ae:6e:bb:27:03:30:41:58:dd:c4:
         53:eb:27:5b:14:86:8c:61:1c:d1:ab:61:f3:9b:1d:63:af:00:
         9b:d6:f6:8a:e1:58:dd:d4:00:16:ec:ed:04:d3:32:2e:93:ce:
         c7:49:68:17:87:33:62:d9:f9:5d:cb:6c:8f:47:cb:48:11:98:
         6b:9e:ed:a7:9a:c2:76:52:89:33:36:a6:73:81:43:3b:90:d8:
         fe:b8:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:21 2026 by rpki-client