Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa
File:                     d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa (raw, json)
Hash identifier:          OEZ85wkzA71xRmbbUOMMm86cIV2qpYNnyaA+ZhPuzLQ=
Subject key identifier:   49:98:E1:FA:16:45:60:8B:03:DC:17:6B:6A:E9:E8:EB:27:C2:AD:C4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0700A2C55C02D4C41301A580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        173.17.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a2:c5:5c:02:d4:c4:13:01:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=609500eb-8ff1-48be-9e19-3d43fb5180cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:8d:8b:71:91:d0:ec:11:43:15:d6:b3:88:
                    51:db:65:fb:3e:fc:88:09:2b:e5:90:a4:2d:4d:b9:
                    46:05:e2:da:e1:ad:be:cd:9e:76:3f:42:46:a7:18:
                    9c:ac:dd:cb:81:d1:aa:dd:7e:0a:b9:8b:1c:e1:65:
                    8b:54:3c:88:07:f5:45:3a:d0:ab:7e:a4:0f:c9:4f:
                    49:55:6a:2e:01:f0:5c:90:83:73:aa:bc:bf:51:89:
                    e8:c6:4d:af:b5:b7:a1:66:60:e8:21:b4:9e:25:1b:
                    17:20:a9:d6:a2:e4:a0:33:a9:12:4e:cb:25:fe:6f:
                    f7:1a:f7:a1:f5:45:8e:69:a3:03:ef:d5:af:7b:f5:
                    36:f6:d7:c6:be:1a:72:a7:db:8f:e3:2e:b4:2c:11:
                    31:03:9e:40:de:68:24:64:0c:fb:67:0a:40:4c:62:
                    23:13:51:8d:20:58:14:e1:46:b8:53:5d:e4:2a:f2:
                    5c:c7:7f:ef:cc:db:35:66:ed:99:3e:8a:2b:26:3a:
                    59:b0:b9:0e:00:d3:22:ff:ba:1b:fe:d2:46:57:c7:
                    90:f9:10:35:53:b9:cc:4f:3b:3b:28:56:7f:91:9c:
                    8d:42:ce:ff:ed:6f:3d:c9:de:d1:c1:fe:a2:80:6c:
                    07:8c:0a:3b:26:40:63:87:1b:2d:0f:83:ee:1e:79:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:98:E1:FA:16:45:60:8B:03:DC:17:6B:6A:E9:E8:EB:27:C2:AD:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9e:4f:f8:f5:4a:2d:52:88:c4:b2:cc:4d:68:f9:40:3e:90:
         f7:03:89:8d:c3:99:ac:a5:7c:92:bc:1a:6f:6a:c2:4c:7f:3f:
         2a:bc:9d:5e:0c:0c:0e:31:5f:4e:9d:12:13:d4:d8:58:34:76:
         57:c2:c7:1c:59:64:56:d2:1f:bf:4f:59:2e:52:1d:72:a7:73:
         1a:34:1e:93:d8:dd:11:76:76:99:92:27:1b:f6:2d:cd:d7:c1:
         8b:4b:63:ba:a2:6c:65:f1:a2:29:fb:c9:86:57:e7:93:b1:4c:
         ba:3a:c9:d6:65:f1:eb:99:83:da:74:e3:63:a4:9b:a5:4b:5d:
         54:9a:d4:b2:e5:5b:d8:86:f4:03:79:33:11:57:22:4d:da:6d:
         a1:3b:21:05:49:89:4c:84:04:ac:e6:7e:c6:73:74:bb:3c:c1:
         99:82:4e:3d:93:83:5b:39:23:92:10:d8:6c:b6:9a:70:a3:d2:
         33:ed:a1:c9:ce:e2:b3:2a:23:29:e5:97:8f:d9:a7:30:87:b1:
         fe:b7:97:36:eb:d8:31:48:4b:41:73:e5:af:f4:1a:01:49:ae:
         ed:33:92:d4:e5:4e:1b:ed:1a:9f:bf:03:3a:43:a0:2d:07:22:
         7b:f2:5e:fa:97:37:56:44:26:e5:2e:48:26:f2:c7:92:eb:43:
         1d:6c:a0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:23:24 2026 by rpki-client