Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5f88e92-6da7-3a14-82a9-ecf706af7016.roa
File:                     c5f88e92-6da7-3a14-82a9-ecf706af7016.roa (raw, json)
Hash identifier:          VV5uv/lk3wJbj0l5Ox7mQ5WP64uwRCOuK9tGrP/utTg=
Subject key identifier:   6B:A8:65:82:2C:3B:C9:B8:6D:DD:AD:31:4E:DD:9E:A1:DF:95:91:AE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B2DC84614AA3B2BE4AFE8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5f88e92-6da7-3a14-82a9-ecf706af7016.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.18.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:2d:c8:46:14:aa:3b:2b:e4:af:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=94dbd56a-e38c-48db-b135-22aea75bf805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:10:58:b9:4a:b5:23:81:d6:56:cb:71:06:e2:
                    08:b3:e7:1f:af:1b:92:e5:a1:0d:cf:53:ea:59:d3:
                    fb:97:0f:5d:19:cc:69:1a:5b:ef:01:55:18:74:93:
                    f6:00:5d:4c:72:f9:e2:f6:f2:7f:19:6f:7a:b9:3b:
                    58:5f:fc:2f:4f:16:a8:c0:51:ac:c1:d0:0c:17:10:
                    6d:5c:5c:5c:1f:d3:77:a4:a3:73:2e:cd:ac:34:14:
                    1d:e7:c9:17:1c:0e:6e:23:98:d8:11:3d:9b:5f:3b:
                    43:93:59:24:8a:78:4e:03:b3:16:77:14:86:0e:9c:
                    d6:9d:2b:c7:ba:3c:12:5f:42:68:9f:87:35:99:23:
                    82:33:21:a6:88:67:cc:80:6f:9c:ca:10:fe:f1:27:
                    22:89:13:8d:62:cd:c8:37:fa:18:3a:67:6b:27:75:
                    7b:bc:26:92:f5:2e:70:c0:61:23:a3:f7:55:81:31:
                    2c:21:5f:71:28:d7:f7:f4:fa:46:01:0e:87:1b:9f:
                    0c:e2:1a:4e:26:3e:80:06:36:76:eb:44:ec:72:44:
                    63:61:04:56:43:87:1a:2a:40:28:31:8a:4b:5d:d4:
                    5c:eb:6f:4a:1f:4c:4a:7a:b4:d5:41:d1:bf:dd:31:
                    3c:31:cc:08:ac:be:48:7d:e6:28:01:7c:03:a4:be:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A8:65:82:2C:3B:C9:B8:6D:DD:AD:31:4E:DD:9E:A1:DF:95:91:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5f88e92-6da7-3a14-82a9-ecf706af7016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ab:7e:fc:08:c8:0b:bc:f0:df:41:51:10:09:27:7a:8d:d6:
         ea:4a:fe:27:06:49:89:9b:90:ac:0a:f7:36:a1:26:63:14:39:
         b7:0f:fd:f4:a2:c9:cb:b7:40:20:7e:d4:7b:f0:1b:bc:25:a1:
         04:58:e0:6d:0d:df:0f:30:1b:22:b6:f5:ad:a3:2f:b7:90:d6:
         70:b7:1e:4a:ea:6f:47:aa:b6:c2:61:88:05:e3:2f:bb:91:b3:
         17:78:a8:e5:b0:27:74:14:8d:a9:5f:76:fd:6b:cf:9d:0a:22:
         17:ab:f4:bb:1c:7b:c6:57:c1:09:62:c5:61:78:51:a1:ee:c3:
         45:af:b2:c6:ec:f9:d1:dd:c1:b4:7a:6e:1a:6d:9e:28:12:a9:
         06:08:db:75:09:17:d5:57:e9:e7:bf:39:3a:fe:61:0f:e0:5c:
         37:1f:d0:f2:8f:e3:d2:ae:a1:fe:7c:c9:f8:c8:d0:e3:c3:12:
         39:a9:2b:9d:7b:32:05:bf:69:3f:e6:12:86:dc:67:3e:f0:af:
         6d:2f:a9:73:4b:a8:b8:19:52:30:30:53:ec:f2:e4:34:d8:04:
         21:87:b2:b3:e6:a6:6e:bf:09:d7:8e:65:45:c5:13:8c:2c:99:
         ff:38:05:48:78:db:ed:9c:2f:3a:93:54:ca:56:c8:ed:32:0b:
         dc:aa:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:40 2026 by rpki-client