Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c8fbbc-c9c2-3b4d-ba5b-8e5024450011.roa
File:                     c1c8fbbc-c9c2-3b4d-ba5b-8e5024450011.roa (raw, json)
Hash identifier:          iqeh+xlIj1FAe49+Z9IgFRLztZ3BXvObk22XTH5HoyE=
Subject key identifier:   D3:95:03:42:4F:76:F1:0B:68:12:42:95:D1:C2:8C:7D:55:AA:13:D9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DF7A5D18A0C28BFEA452DB000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c8fbbc-c9c2-3b4d-ba5b-8e5024450011.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     30036
IP address blocks:        173.18.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d1:8a:0c:28:bf:ea:45:2d:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=742bfa61-8fab-4efe-bb48-af432143c647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:10:5b:7a:86:32:3a:cc:5c:c7:de:aa:e7:
                    2a:5d:6c:c4:4c:07:a1:f6:64:50:93:df:a5:d8:50:
                    00:21:e9:bc:03:1e:c3:db:5b:b6:c7:96:96:f4:2e:
                    5b:3b:b3:00:cf:29:38:d5:9d:54:0f:1e:81:d4:b4:
                    1c:6b:7e:4f:04:35:c4:f3:5e:d8:2f:58:68:d7:f8:
                    a8:61:54:09:f5:a6:43:f4:98:3e:e7:4e:0a:45:16:
                    75:a2:54:e6:55:e6:e1:30:94:3d:b6:7b:ea:ed:6d:
                    e4:ac:9a:64:3e:9b:02:a9:78:b4:eb:05:3c:44:21:
                    13:3f:94:5f:1c:32:84:e8:0a:6d:60:92:3d:70:86:
                    7f:4b:f4:bb:6f:8c:32:05:3a:15:b4:80:17:7f:fb:
                    e6:ea:1e:ff:95:a8:11:55:1b:53:b8:4e:7f:2e:b5:
                    82:fc:12:80:44:0a:c7:93:c7:e9:86:72:d5:46:54:
                    7d:4b:fd:1e:5d:66:06:ab:c9:11:94:63:e2:e4:8a:
                    26:c3:fd:44:a3:81:3b:d7:ca:4f:9b:ca:5a:e7:5c:
                    3f:9e:85:8b:06:fe:c4:ed:c2:03:1d:64:2e:e0:9a:
                    1f:5c:44:e7:4c:16:85:c4:e2:a3:8d:0d:77:3e:47:
                    51:8d:1c:6a:fd:65:21:1b:25:a1:0c:c4:09:f0:fd:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:03:42:4F:76:F1:0B:68:12:42:95:D1:C2:8C:7D:55:AA:13:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c8fbbc-c9c2-3b4d-ba5b-8e5024450011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0e:c4:db:0f:e2:8f:7d:9c:c7:28:13:e8:dd:9a:2f:75:94:
         09:a5:c5:eb:8c:2b:df:59:da:26:c5:24:fe:c6:21:c5:6c:db:
         f0:c9:94:56:44:4d:d4:68:4e:1f:95:a9:fd:72:fb:9d:d6:7e:
         99:84:66:70:54:b5:d4:ff:77:f7:c7:8c:58:e1:65:2c:37:31:
         78:59:47:cb:70:63:12:fe:01:03:bc:6c:fd:bf:66:85:b3:57:
         a7:24:22:7a:f9:09:57:0b:a7:b7:de:4d:74:60:69:90:51:9b:
         21:67:fa:c7:9f:f9:16:eb:d2:cf:f3:ec:cc:d1:68:2c:d1:9c:
         9e:d5:f0:ed:ae:13:d2:74:35:d3:21:34:66:88:04:8f:6b:f0:
         d5:b8:48:8a:28:18:50:5a:4c:6d:43:e2:01:b8:d8:85:20:34:
         94:53:3a:55:b3:ba:ef:db:94:25:be:84:4d:b3:15:df:4c:a1:
         ed:37:81:26:26:81:86:dc:df:e7:48:e1:d2:1a:9a:14:1c:cd:
         9a:b9:85:fb:13:a7:16:1a:31:9a:5d:1f:3e:bd:95:3a:a9:84:
         0b:e9:43:7d:8e:29:b3:b0:da:a9:c4:76:08:15:6f:5d:a7:b8:
         73:8a:69:c8:36:5f:28:cd:4c:6f:9b:ef:fb:7f:1d:06:8b:b2:
         5d:2e:56:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:49 2026 by rpki-client