Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1dbca5c-f887-312b-b2ba-91f820006676.roa
File:                     f1dbca5c-f887-312b-b2ba-91f820006676.roa (raw, json)
Hash identifier:          oy5PPSdy4KsRY89lFuey1jCzU7U7tP9vDk1r+X+Sl+0=
Subject key identifier:   03:19:3F:2A:F9:93:26:D5:71:28:49:BE:B7:6C:97:54:9E:B4:19:73
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CB2CE2CF51321B9B5CF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1dbca5c-f887-312b-b2ba-91f820006676.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.16.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:b2:ce:2c:f5:13:21:b9:b5:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=011945dc-8676-4ae3-bfdf-e3e956dd84e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:b2:e6:79:87:b3:2f:14:94:96:0c:42:31:
                    75:af:d4:17:9f:3d:c6:31:09:d2:1d:1b:26:e1:3e:
                    dc:33:5e:82:dc:b6:4a:3f:90:e2:88:77:f8:09:f8:
                    bf:c9:aa:62:3c:bf:6f:41:8d:57:7c:9c:9b:21:65:
                    25:72:ed:b7:2b:0e:11:e0:c0:b8:7c:e8:43:9c:20:
                    a6:d0:44:9e:9c:35:c3:0c:49:5d:cb:b0:24:15:a9:
                    72:8d:8f:c5:e3:77:34:e7:08:0e:57:a5:47:0e:dc:
                    17:6b:bb:74:58:48:12:8a:f7:7f:b4:e5:a0:13:9c:
                    27:f7:19:f4:4a:e8:33:22:55:35:f8:51:df:56:4b:
                    9c:d3:ab:df:ad:68:d0:7a:22:c4:da:04:40:40:56:
                    90:80:c9:8c:b8:b8:42:3b:a6:c1:58:d7:c0:58:15:
                    d5:ca:12:3a:08:1b:0e:a1:31:2c:9b:c0:fe:b3:e9:
                    48:17:a7:bc:31:72:5a:a5:78:4a:18:03:50:5d:31:
                    df:29:83:9b:b5:e0:ed:c7:5e:52:e6:ba:68:34:fe:
                    53:bf:30:7c:fe:a6:58:c0:6f:d1:2a:63:86:37:b0:
                    ea:0c:e6:4b:dd:fb:fa:81:1b:52:32:a0:20:df:db:
                    83:66:a3:22:05:cd:51:93:b6:17:7d:fe:16:b5:8b:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:19:3F:2A:F9:93:26:D5:71:28:49:BE:B7:6C:97:54:9E:B4:19:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1dbca5c-f887-312b-b2ba-91f820006676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:93:21:bb:23:7a:8e:3a:73:44:cc:8c:78:f8:bc:78:9c:b5:
         48:b5:59:1c:32:70:12:cc:8b:74:82:8e:21:50:ed:86:0c:6e:
         51:ef:83:aa:40:c9:de:40:ab:07:4b:23:f1:fa:30:07:fa:7e:
         80:9e:7e:b7:ad:38:86:5e:be:ce:cc:3f:18:e4:ef:15:1c:85:
         77:c8:ec:7a:de:17:e3:48:05:f3:c4:c3:ec:78:65:dd:1f:ef:
         c0:a8:65:e1:34:09:5a:d0:2a:3e:95:c3:8d:00:54:5a:bb:44:
         9a:8c:a8:fe:4d:71:26:f4:de:0c:f2:58:5d:88:6b:dc:16:58:
         4a:de:49:26:da:f4:43:f1:4f:02:7f:e0:06:a4:3d:f7:17:4e:
         8d:37:90:b5:02:69:1c:bc:61:96:04:e2:13:21:94:fd:12:08:
         8c:4e:b7:35:c5:b2:9d:15:b6:61:1a:b1:be:ed:70:b3:2c:43:
         85:b6:3a:91:83:aa:de:50:98:23:20:b8:01:a8:db:ea:43:e2:
         fe:90:ca:b0:99:42:71:91:e2:1c:58:dd:b0:c7:50:34:bf:e1:
         89:c7:af:01:98:82:38:84:bc:ee:de:c0:a8:58:f5:2d:92:92:
         02:66:c8:86:8c:4f:0c:72:a7:66:6a:82:d8:ed:05:ad:c5:b3:
         78:c2:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:43 2026 by rpki-client