Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c03f3e1b-57cb-3f0d-a477-4cb6bf364586.roa
File:                     c03f3e1b-57cb-3f0d-a477-4cb6bf364586.roa (raw, json)
Hash identifier:          SXvW7MKuhO5yCxkctv3hraC1xwBsdG4A3wmYKNhj0WE=
Subject key identifier:   D7:8E:2E:9D:73:14:8C:2E:E2:8A:6E:99:94:E3:26:7A:D3:42:55:A0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7A0F68ABB2A9F3A62816F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c03f3e1b-57cb-3f0d-a477-4cb6bf364586.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.16.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:f6:8a:bb:2a:9f:3a:62:81:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=26758d73-da04-4bb4-9731-e139483b0520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6e:a4:a6:38:f2:bf:5a:a1:83:a6:51:da:ba:
                    9d:11:49:b7:1c:02:62:98:64:4b:cc:6d:55:8d:84:
                    b1:a4:b9:6b:ac:29:5d:9c:7f:cc:d0:d8:a2:c0:8f:
                    e5:5c:ea:fc:36:2c:db:7f:66:1f:62:dd:14:50:e9:
                    df:20:35:35:83:4f:44:9e:53:e0:d3:20:a0:38:ee:
                    f6:ba:48:9c:87:74:ae:e5:07:5c:57:5d:0d:9b:1f:
                    60:7c:2b:6e:e5:58:bf:70:40:03:cd:85:c7:1f:3a:
                    b0:67:d1:0d:c4:14:da:c6:c8:45:bc:3e:c0:0f:46:
                    6f:3b:c1:51:78:ce:aa:cc:66:1b:fe:d9:63:cc:0e:
                    4e:a2:11:85:c4:b5:e2:45:c9:66:7b:f4:14:37:e5:
                    c3:a5:91:78:5a:6e:14:df:85:2d:6b:17:3a:47:3d:
                    80:0a:f3:76:db:70:67:eb:56:d2:37:38:8e:1c:5d:
                    dd:08:0d:8e:e0:79:52:4c:7f:30:df:cb:17:0a:d0:
                    28:c0:02:d6:fe:c8:e5:6f:58:50:89:d8:1b:8d:d4:
                    fe:fd:5c:e2:54:b7:31:64:01:ad:5d:92:82:ce:f9:
                    87:f8:79:7f:a3:94:06:94:ed:7f:58:56:4d:5f:a2:
                    95:f0:39:5d:5a:9a:6a:75:22:96:76:f1:9f:22:02:
                    ec:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8E:2E:9D:73:14:8C:2E:E2:8A:6E:99:94:E3:26:7A:D3:42:55:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c03f3e1b-57cb-3f0d-a477-4cb6bf364586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:02:8d:12:d2:00:98:60:61:19:77:dd:2e:d6:3b:a3:bf:ab:
         84:9b:62:e3:a1:54:e7:27:41:1e:75:2e:38:ae:31:58:04:03:
         db:48:04:8e:89:b5:ae:c7:94:14:c7:55:a6:67:d9:c4:64:0d:
         46:3b:da:89:b4:48:88:52:63:f6:32:34:00:10:77:39:fc:bf:
         df:72:53:2e:7a:b7:a0:38:02:23:3d:65:41:98:81:c6:e9:4c:
         1e:17:ae:8a:b5:58:1b:1d:df:3c:65:cc:6e:c1:62:e3:b2:a0:
         8f:0a:3c:60:ca:b0:a7:13:c2:a6:5b:a1:8b:9f:12:d8:84:a3:
         87:4a:9e:21:6e:a3:94:dd:d7:36:d4:aa:c6:59:d0:95:97:7a:
         d2:7e:a7:9b:f5:a4:13:2b:ba:68:f3:2c:24:8d:d6:c0:7e:cc:
         37:cd:73:a2:21:c3:ad:af:89:ac:af:3a:0f:e4:6e:9a:52:89:
         81:56:1f:52:41:e2:f5:08:92:d7:1d:07:cc:fc:fd:2e:85:9b:
         de:61:c2:f9:4f:07:a2:61:3b:4b:4e:44:f3:80:32:77:1a:6f:
         f5:1e:b2:2c:42:0b:69:05:74:45:5f:7a:32:61:6a:f4:c0:ec:
         c2:4d:6e:eb:d3:dd:ee:79:1a:26:a0:16:6c:6e:83:fd:45:45:
         38:4e:5c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:07 2026 by rpki-client