Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db9bf452-c471-39fd-ba43-156ca6b64eff.roa
File:                     db9bf452-c471-39fd-ba43-156ca6b64eff.roa (raw, json)
Hash identifier:          WfFARrClhTXvgArWp3omO0rbkMvZkYfHFDBIay0D8S4=
Subject key identifier:   C2:5A:8C:EB:3B:DE:02:8C:2C:FE:89:96:9F:B1:60:8C:5E:23:B2:99
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DF7A5D734B434647CC6B5A200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db9bf452-c471-39fd-ba43-156ca6b64eff.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     30036
IP address blocks:        173.30.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d7:34:b4:34:64:7c:c6:b5:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=92bb76da-c2a1-438f-bb09-b80a7b261d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b9:c9:43:0c:89:f9:64:97:fc:c5:20:14:d1:
                    87:7b:b8:39:e4:50:3e:59:c6:57:73:c3:29:5d:4c:
                    16:b0:94:23:6b:be:a0:ff:a4:7a:69:2a:02:4b:a1:
                    c7:98:b2:43:3b:ea:24:e1:80:31:be:f8:56:61:35:
                    da:9a:4a:f7:43:d8:e3:1b:80:0b:a8:5d:c6:12:a0:
                    c7:f0:1e:db:d5:ac:5f:d0:f9:8f:50:f4:51:41:ef:
                    87:17:94:51:c9:9e:d4:11:82:bc:95:f8:36:bd:3b:
                    78:11:9c:17:e6:9b:2f:84:eb:3c:74:55:05:6b:10:
                    f9:84:20:65:6b:8d:fb:ed:77:98:44:d1:e8:f6:24:
                    65:e1:fd:26:74:d4:74:5d:a8:c9:3a:60:e6:72:9c:
                    f2:e9:fc:b7:2e:0c:18:34:b4:9c:2e:d9:dc:8b:82:
                    b2:01:e0:4a:20:09:be:4e:5c:e0:a2:21:cd:f9:7d:
                    4a:98:3d:c8:10:c5:b5:1d:31:3f:b3:9a:0e:64:1f:
                    fd:ca:6f:2a:96:6f:7e:09:9b:80:e8:9f:c5:80:14:
                    8c:fb:39:63:bb:f9:92:49:a0:d3:44:45:02:60:40:
                    47:2f:7c:46:20:b7:a2:df:ff:08:6c:8c:ae:ab:cc:
                    77:a5:1f:ed:d6:c9:ab:b2:2f:c9:be:51:1c:f5:95:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5A:8C:EB:3B:DE:02:8C:2C:FE:89:96:9F:B1:60:8C:5E:23:B2:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db9bf452-c471-39fd-ba43-156ca6b64eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:97:b7:47:f7:00:97:04:e6:2f:ab:2d:21:b0:a6:5e:49:50:
         cc:d9:08:df:74:33:36:39:35:13:82:cc:fe:29:54:01:a8:4c:
         64:6d:07:ae:19:30:5d:60:fe:04:dd:81:63:e2:15:03:18:95:
         fe:17:bb:89:d3:40:99:72:18:57:f5:58:ff:bf:ec:0a:89:6d:
         a0:18:aa:f8:85:97:b6:1b:e3:af:a4:21:12:32:ff:b4:a5:62:
         2a:72:0d:16:a9:e4:b3:7c:02:9a:e7:58:3a:01:b2:2d:49:be:
         9b:3b:5d:0c:22:97:19:00:78:29:2a:b3:00:76:09:9f:29:7e:
         0c:3d:ca:e2:79:fe:e7:01:43:1b:00:3f:6a:59:0f:47:d4:e4:
         3c:d2:01:4a:82:61:63:f2:85:3c:4e:71:dc:d7:2b:f8:4e:53:
         76:99:20:a2:ea:5b:3a:87:aa:d3:eb:e7:e9:9f:d8:dd:88:a7:
         46:80:5a:6a:c7:dd:12:0f:f1:12:fa:ce:92:ce:c0:ae:6b:a1:
         3e:58:0d:0b:08:46:1b:e2:a8:d7:b7:23:7d:ce:97:7f:69:50:
         3d:b7:8d:51:6d:7f:1f:fd:b4:da:1f:39:59:1e:bc:ae:99:ce:
         b5:bb:e8:0b:84:28:81:53:45:ea:6f:67:c7:fa:01:e5:9e:45:
         56:51:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:07:40 2026 by rpki-client