Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f85c0a7f-c5b9-3787-8857-f631c0f43879.roa
File:                     f85c0a7f-c5b9-3787-8857-f631c0f43879.roa (raw, json)
Hash identifier:          VgumZzKS5oPf5PCQkOZxloh15TBRUV3p87P/14n/KfQ=
Subject key identifier:   A5:DB:52:6E:A9:CB:EB:A8:0B:9D:E2:D1:CE:9E:2D:B4:27:D9:12:ED
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B50C1A4C8E633598574C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f85c0a7f-c5b9-3787-8857-f631c0f43879.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.31.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:50:c1:a4:c8:e6:33:59:85:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=1135b4e7-392f-4cb1-8504-369776a697b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:39:0a:aa:52:f5:0a:cc:c9:e5:f4:f3:3b:
                    35:fe:2f:35:94:f1:ca:b2:17:e3:d4:8b:8f:30:13:
                    5f:45:11:c4:41:a8:93:ae:11:7b:3b:a7:7f:f0:93:
                    cc:f0:94:d0:2f:03:de:70:f4:c6:b7:62:d9:4b:4d:
                    6f:a9:bf:5b:de:87:64:7a:2a:53:4c:2a:a0:38:1f:
                    bb:fd:7f:76:48:63:e7:70:f2:82:c8:14:f7:5d:90:
                    32:64:79:1c:35:a0:1e:b4:a7:6e:3b:7e:ba:6f:6d:
                    0f:cd:ec:2c:39:87:39:1f:b5:2f:9f:e3:64:07:67:
                    5b:6c:14:a4:b2:82:62:2d:64:6d:62:ba:b1:46:b5:
                    71:9f:0c:5d:5e:80:93:f1:78:9b:26:d8:49:42:bf:
                    80:5b:92:e2:a4:83:c1:48:d1:d2:65:4c:bc:b1:8b:
                    29:a6:94:d6:21:eb:a1:b0:78:76:6a:51:f2:2c:97:
                    a4:e3:a4:a3:bc:2c:a0:86:24:c2:ea:cc:a4:f3:56:
                    10:8c:06:26:b5:ce:02:18:70:61:15:40:ed:55:d1:
                    3b:67:e3:64:9d:29:a8:92:ed:6e:da:bd:ae:6f:bc:
                    43:9b:7f:34:2b:e6:ea:ab:31:47:9a:b4:f1:b2:4c:
                    81:3e:7d:bb:f2:79:cb:2b:e7:8d:3e:22:54:b4:d4:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DB:52:6E:A9:CB:EB:A8:0B:9D:E2:D1:CE:9E:2D:B4:27:D9:12:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f85c0a7f-c5b9-3787-8857-f631c0f43879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0d:27:05:4b:20:d3:15:7e:cf:8c:73:5c:4c:13:dc:60:16:
         6b:e8:5f:5f:ca:75:c1:bf:08:c3:0a:54:b4:5b:8b:48:6d:2d:
         3d:98:e8:f3:16:3e:c1:c6:01:85:25:bf:1d:f0:5f:2f:9f:06:
         bb:28:0d:17:7b:38:a5:96:de:ba:80:fb:65:64:9e:03:15:1b:
         21:e5:ed:f7:08:01:74:f2:af:38:71:d8:4e:1e:cb:a5:99:ae:
         24:a2:73:95:10:ca:e3:c9:c9:2f:9a:f2:49:b3:65:2c:f3:53:
         8c:fa:4d:57:24:6c:49:f2:29:ce:6a:61:0c:e4:81:63:74:36:
         cd:82:33:e9:23:55:ee:2f:77:d1:f3:2c:48:20:c0:69:a5:a7:
         80:a2:67:84:5c:16:bf:44:42:81:89:10:96:7e:44:01:e1:8d:
         67:62:a6:99:99:8a:32:c0:8b:e2:f2:e3:0b:50:8b:13:75:e4:
         65:54:2d:f8:5f:83:ae:7b:9a:42:02:1d:aa:4f:7f:dc:22:55:
         03:ca:b1:6f:a9:54:67:00:83:2f:b6:d1:0c:82:ff:f4:03:83:
         11:64:0d:0a:fa:39:56:8e:fd:b1:92:58:29:ff:d9:9f:4c:f8:
         00:e8:b4:21:3d:52:36:de:16:68:db:8f:bd:3b:a7:61:4b:2b:
         ad:23:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:47 2026 by rpki-client