Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa
File:                     d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa (raw, json)
Hash identifier:          GJLeL7OXsxn8LxBIwAGZSIsRYtWOWdCbONzHLCZjJyo=
Subject key identifier:   7A:93:B1:B8:26:0B:38:59:A4:6A:03:B1:71:6F:B7:2F:8D:0D:A0:1E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B3197850E8DDA4DC2C160
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.16.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:31:97:85:0e:8d:da:4d:c2:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=87ac5234-32bd-4f1f-a89d-ae133b833af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:79:7b:fa:74:e0:29:c3:19:50:d4:65:c8:
                    92:a5:38:9d:aa:44:e0:e2:4c:c5:f3:d7:a1:a0:f2:
                    0f:10:2d:74:b8:c9:2d:bd:79:b6:8c:75:aa:d7:71:
                    9c:84:0c:7c:38:4b:03:9b:06:bb:66:8f:58:4b:65:
                    e9:83:a9:5d:7f:a3:8b:66:51:bc:28:c3:8b:25:14:
                    39:8d:be:fe:79:fa:2a:36:e3:97:72:4c:85:8d:31:
                    8f:5a:74:8e:05:35:77:7e:0e:6f:aa:95:18:94:7a:
                    2f:67:3f:6b:6f:c3:f3:59:f9:6b:27:d5:e5:f4:5f:
                    f4:b8:32:fa:60:f0:01:2e:23:86:41:e4:60:f4:cd:
                    18:6b:0c:c4:a0:41:e2:d6:3c:3c:e1:98:91:89:ab:
                    96:f2:b8:25:b2:18:61:21:29:7b:7e:8a:c8:f7:f4:
                    a6:5d:74:2f:90:0a:64:68:13:50:4a:25:e4:9e:11:
                    2f:39:e6:f4:03:63:a3:be:ff:b7:b0:6d:16:48:cf:
                    93:77:f8:78:d9:ed:e2:92:45:fb:4a:c6:55:19:bc:
                    48:b0:c4:d8:aa:4b:e3:1f:34:8d:5a:3b:3a:1f:a3:
                    50:60:ec:60:a8:8c:76:0b:5e:e5:b8:e0:dd:0b:0c:
                    ac:ba:48:be:9b:ab:b7:8c:c4:c6:73:19:e8:58:4e:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:93:B1:B8:26:0B:38:59:A4:6A:03:B1:71:6F:B7:2F:8D:0D:A0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:04:96:85:4e:92:a7:0e:70:73:b4:af:78:14:b8:35:8d:0a:
         cf:21:85:2a:4b:b0:24:ca:d2:76:10:d4:8f:6c:6f:ee:a1:3b:
         19:8d:c3:9b:1d:2c:a6:de:9f:4a:8d:29:e4:8d:aa:ef:76:b1:
         16:47:2e:1b:0f:e7:b8:b9:ca:d1:b8:8e:dc:a4:bf:59:4f:a7:
         64:0f:87:b5:80:84:fb:d9:e8:1f:b4:81:18:ae:18:65:bc:64:
         85:af:76:95:62:64:5f:d6:5a:ec:01:9f:a9:91:42:ce:54:d6:
         28:62:43:b1:59:24:3e:2a:66:6a:1f:13:9c:6d:e1:9e:e4:42:
         29:04:6c:e7:f6:cd:fe:b4:10:c7:1f:8b:85:c4:8f:0c:c2:20:
         6b:89:8e:13:93:06:de:7d:18:b3:0c:4b:6c:4d:1b:9a:e6:09:
         7c:91:50:d6:3a:ae:e5:10:e0:4f:c8:b1:1f:ec:1f:09:e2:06:
         ee:c9:63:c8:10:f7:51:37:ce:21:0a:03:ec:03:34:eb:d9:e7:
         62:ab:f0:20:23:af:9d:ec:56:da:c9:c2:c3:22:f8:16:83:c6:
         84:f1:03:43:fb:e3:55:80:9a:31:3c:16:17:4e:91:63:a0:cf:
         6d:6c:67:a3:f8:c5:9f:0c:b4:0f:a0:46:07:b1:50:39:d6:60:
         6b:4b:60:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:30:30 2026 by rpki-client