Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4e47809-b130-30c1-95ce-efc6bc728060.roa
File:                     d4e47809-b130-30c1-95ce-efc6bc728060.roa (raw, json)
Hash identifier:          DfjrdMKiwurNQuSf0oxkzJVCBlKAKa6kFmlwBg7LqDc=
Subject key identifier:   D8:93:E3:F6:C5:17:3A:FA:4A:CA:F6:BD:C0:3A:DE:D8:20:33:7E:12
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E086652545F684E2DDEC9E200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4e47809-b130-30c1-95ce-efc6bc728060.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.17.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:52:54:5f:68:4e:2d:de:c9:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=b513a13b-1a1f-49ae-af00-36042894020b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:73:78:be:37:43:11:f9:a0:fd:d7:59:dd:
                    42:4f:53:4f:ce:03:6b:ea:00:9b:16:20:cb:12:7d:
                    c2:05:65:87:1b:47:d8:31:76:86:8d:1b:ef:6e:6a:
                    c3:2e:64:72:26:10:f3:7d:9e:27:20:06:9f:a7:71:
                    ac:47:0f:23:12:1a:ac:c5:fa:83:da:be:23:0a:17:
                    ed:64:40:32:7d:1d:7a:7a:64:20:1c:c7:9b:e4:1b:
                    a1:b3:62:8f:2c:ce:f7:19:f7:e4:00:e0:77:9e:65:
                    d5:ec:44:4f:8e:81:e2:cb:d7:fc:2a:9b:2d:9c:c4:
                    85:a8:39:af:01:03:2d:60:f9:84:34:c6:30:62:91:
                    2f:97:51:c0:44:9d:67:2a:97:23:45:96:1c:5f:a8:
                    09:99:25:5c:66:21:5a:ef:7b:5d:74:c0:cc:c5:e3:
                    e1:0a:1d:2d:55:22:84:a6:3c:7a:91:77:5c:ed:e0:
                    0c:b3:7d:cc:9b:0b:ad:68:67:4b:da:9c:cd:b3:1e:
                    83:eb:86:3d:cc:98:39:a2:00:5a:6e:64:9d:7d:4e:
                    df:13:ff:6d:fc:1a:42:6b:24:5f:87:11:2d:c7:4e:
                    de:a4:d0:99:e2:45:b5:46:2f:be:31:28:63:bb:94:
                    d6:66:78:ff:49:bd:7b:e4:c8:fa:68:b8:9f:c6:08:
                    ba:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:93:E3:F6:C5:17:3A:FA:4A:CA:F6:BD:C0:3A:DE:D8:20:33:7E:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4e47809-b130-30c1-95ce-efc6bc728060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:cf:6b:2d:1e:81:75:03:d6:0c:2f:4d:0f:87:07:7c:15:7d:
         a4:af:28:f4:06:7e:d7:66:f7:6f:f4:ed:89:42:3c:91:fb:6d:
         49:a7:2a:f6:e5:3b:78:06:b9:3a:c2:ab:dd:cb:7e:b3:4d:7d:
         71:ed:d6:2e:55:cd:2e:39:25:5d:fe:95:c0:67:4a:29:57:fb:
         f2:d6:bf:db:12:bd:10:08:74:a8:e0:c0:3e:5e:02:ac:ab:64:
         51:8d:1f:ef:a0:db:30:2b:a8:de:94:ae:ac:24:04:d8:6b:a5:
         55:a8:3c:d2:2c:61:fc:51:44:5b:a2:d2:5c:fa:48:09:73:86:
         64:7f:ff:40:91:c3:c6:c8:b6:02:32:ef:38:54:06:7d:8a:4f:
         f4:1a:18:f0:0b:b8:b6:06:93:ae:fe:11:aa:ac:db:0d:e4:af:
         97:a1:eb:8a:52:7c:b3:16:fb:b3:c3:0e:b3:46:b1:2e:0f:df:
         82:ec:4d:79:f3:d9:8e:68:6a:79:dc:6e:92:47:12:b3:c5:15:
         32:f1:99:0a:ef:68:5c:bd:87:1e:1e:03:25:b3:46:96:8c:ee:
         2f:df:cd:d5:dd:1f:cc:b8:d4:99:6d:d5:53:ae:f3:93:eb:80:
         2c:85:85:35:62:16:b3:e5:48:52:82:f9:3c:67:2c:5e:91:1c:
         2c:81:eb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:21:01 2026 by rpki-client