Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa
File:                     c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa (raw, json)
Hash identifier:          8gdS1Y5YSyNVoFNqzgY2a5wFKk+pkfWiNZvLq3iYJIA=
Subject key identifier:   45:BC:61:81:C2:AC:FB:95:89:06:B5:5F:02:E6:0B:AD:3E:08:AB:4D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E08665796F72E31C2AD8AD080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.29.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:57:96:f7:2e:31:c2:ad:8a:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=606fe95d-0511-4bfa-b0fe-8575a8bb2167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d9:27:fb:d2:ab:a9:2d:f6:81:2d:52:14:d4:
                    c0:a6:54:29:51:db:14:f1:d0:8f:f5:5e:b0:f8:58:
                    79:29:b0:10:cb:ca:e7:65:81:8d:d2:a1:85:44:87:
                    0c:20:0f:bf:e8:b8:cc:a7:77:f1:fc:41:28:1f:5d:
                    4b:70:cb:1e:b7:f0:a2:07:56:74:44:34:90:ee:5b:
                    d8:2d:33:bc:9c:fb:07:5c:2d:a8:b0:6c:83:5d:87:
                    9a:1c:ce:7c:e7:57:7d:86:63:be:ee:6f:47:1a:49:
                    e4:18:3b:2f:b5:ab:15:3d:fc:8b:43:3e:0a:5d:ee:
                    33:c1:4c:db:37:a1:b9:1f:3f:ff:54:6d:f0:1f:09:
                    d3:e7:45:02:cc:ce:e4:d7:48:e0:fa:f6:d6:dc:9c:
                    02:01:d9:e8:18:a8:41:94:98:e7:59:48:d1:56:eb:
                    92:46:ac:63:b7:9a:5d:21:d5:0c:d8:3a:de:70:04:
                    3c:0e:a4:36:19:27:68:31:c9:9e:f2:cc:a7:7e:b3:
                    57:47:34:3f:3c:2a:13:04:a6:37:c9:04:c2:9c:b7:
                    ce:7a:92:5c:1a:f5:64:2b:ae:ff:ed:11:87:8d:d0:
                    27:a2:bc:60:c2:18:79:50:dc:98:f0:67:0d:5b:c5:
                    16:4f:31:d9:9a:19:e6:26:57:a9:2d:1d:bd:e3:87:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BC:61:81:C2:AC:FB:95:89:06:B5:5F:02:E6:0B:AD:3E:08:AB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c78a19-d9d5-3fa2-bc0c-52eac1540af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:4b:5e:82:c7:fe:88:f4:15:e9:22:21:73:60:95:fb:17:
         41:e9:c1:cd:48:5d:2c:e8:d8:9a:e7:d5:d7:59:13:55:5e:f9:
         4b:26:35:32:7f:72:42:86:68:c4:f0:5a:c6:30:a7:9d:5a:e0:
         43:34:be:49:02:0c:5f:38:2c:ff:34:ad:d7:81:d0:fc:f7:9e:
         29:32:9f:a6:9c:99:cd:69:42:2e:d1:65:86:82:c0:ac:65:da:
         28:1c:b0:d9:90:a8:d0:c4:16:f8:04:b2:a3:ad:c8:50:ec:a4:
         c8:80:52:fb:05:e0:e1:a9:a2:01:7c:59:6b:7e:4f:e5:9a:13:
         94:10:a7:b7:d3:23:8c:a0:00:40:70:3b:42:2f:96:42:da:a3:
         92:25:5e:e7:8c:d7:ed:03:43:a0:16:d1:91:8d:fc:42:3f:e2:
         46:00:81:58:51:eb:d3:fc:bb:8d:a1:72:7f:39:1f:a8:78:6b:
         18:92:6c:6d:f9:01:91:bd:0e:e5:3e:ab:9f:96:b8:80:52:c7:
         98:a8:90:ab:60:f0:96:98:d8:76:ab:86:bc:d9:64:88:d6:66:
         60:d8:0d:7f:c3:1d:2b:80:af:a1:e2:6d:63:90:10:7e:6c:e2:
         35:25:aa:ef:47:cb:27:44:c2:37:c4:0b:cd:8d:5c:b1:32:04:
         26:3c:8d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:05:43 2026 by rpki-client