Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa
File:                     fa38c4c0-2930-37f2-aa5d-8781e808672d.roa (raw, json)
Hash identifier:          YHJwIu5nOo6vKm+LacZ9W3/6irfF7/teCOUG9Q7Tx54=
Subject key identifier:   C9:A6:F1:F2:60:51:55:05:A7:D1:7A:8A:3E:B9:82:A1:43:8F:52:F9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059C7782518CAD1052CB1940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.25.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:77:82:51:8c:ad:10:52:cb:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=abcac418-7111-475e-8f1f-cc28b15f89a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:df:c5:04:33:bc:07:5a:ea:4e:8b:eb:59:
                    14:44:5b:32:16:e6:c6:71:fd:47:4c:26:d0:f4:d8:
                    fe:09:da:c8:40:a0:d1:5c:d1:f8:4f:07:8c:04:64:
                    c4:92:7d:2b:ac:c9:08:61:6e:b0:58:5f:1c:9d:9d:
                    54:32:ae:54:af:5e:42:6c:f9:3b:05:14:3d:5c:0f:
                    d3:4c:a8:8a:14:fb:86:77:49:f8:67:09:82:67:3e:
                    77:d2:d4:3b:96:8b:4e:b7:47:98:d9:a7:17:48:4a:
                    94:f4:cb:79:98:4e:8a:6c:df:f7:1a:81:eb:4d:45:
                    ba:43:0d:fc:b7:0f:be:13:d9:e9:a3:36:9f:be:29:
                    d8:da:06:79:1c:5f:90:41:34:dd:95:b2:ca:f7:33:
                    99:e8:6f:37:e2:a1:80:da:8d:62:98:5a:29:94:5a:
                    63:78:b6:09:e6:43:5d:02:e4:16:93:5a:4c:e2:35:
                    03:44:aa:e2:45:ec:fa:6d:44:99:e3:d2:d7:a6:1f:
                    9c:51:b6:61:ea:18:cb:1a:3f:fa:a7:06:d7:93:73:
                    8b:91:c0:2a:6c:bb:c8:12:ac:04:93:79:93:41:db:
                    58:c5:eb:8b:d0:09:ce:2a:e9:b6:40:a7:ce:b1:f1:
                    02:a9:0b:3b:64:8f:4c:39:51:db:9d:02:82:3d:17:
                    00:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A6:F1:F2:60:51:55:05:A7:D1:7A:8A:3E:B9:82:A1:43:8F:52:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:2e:f8:5b:1b:da:f4:81:72:a7:92:8c:bf:d0:54:f0:62:95:
         27:92:58:fb:1e:69:c1:47:4c:fd:e9:be:ae:b6:f6:dd:d0:ae:
         63:1c:1c:8a:86:1d:10:6c:e7:6a:ad:ed:87:48:84:2d:49:55:
         51:be:94:fb:42:50:9e:76:fe:b3:b5:36:21:0b:f8:fa:2f:7e:
         7d:c1:8a:6d:c9:3f:53:f9:82:3e:a3:c6:41:d5:7f:d9:f2:0f:
         b9:8c:55:bf:61:1d:52:bd:6d:89:f5:c8:c1:ee:71:8b:f5:f3:
         c0:c5:ea:4d:a9:f4:fc:9e:df:0c:d1:26:38:31:61:86:81:d3:
         90:00:94:9b:a0:94:34:5d:be:00:9f:10:57:27:40:ff:64:6b:
         da:26:2a:cb:8c:b5:1f:0d:2f:2f:42:9e:b0:86:a1:01:46:4b:
         0b:11:14:34:75:f0:25:22:32:d6:2a:14:60:16:42:f7:ff:65:
         77:73:e4:af:64:74:80:7b:bf:18:4f:97:56:75:a1:11:e8:46:
         af:b3:28:46:1e:94:95:3d:3a:62:d5:b4:a2:88:5b:8e:5b:b0:
         d5:bb:48:ba:c9:bd:9e:2c:78:ea:3f:21:20:1e:36:a7:bb:58:
         d1:30:fb:08:4c:f4:ed:4d:3c:14:16:6d:90:16:96:48:7e:52:
         92:31:49:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:08:05 2026 by rpki-client