Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb70d8ab-f744-306b-928d-3397d20319cb.roa
File:                     fb70d8ab-f744-306b-928d-3397d20319cb.roa (raw, json)
Hash identifier:          xn2LhYDp19uaKALXCuGv3zSkj/DYxC4D8+cqoIpd0Uk=
Subject key identifier:   43:03:D6:5B:37:7F:DC:26:72:A6:77:CC:4B:51:97:91:1B:93:63:7C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79D310A7247E40AA200A200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb70d8ab-f744-306b-928d-3397d20319cb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.22.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:31:0a:72:47:e4:0a:a2:00:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=564d2593-dac5-49f5-8d79-176d024e0c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:93:11:91:9a:34:c1:2e:4e:85:70:68:97:f3:
                    24:fd:46:67:76:4d:4e:56:c9:19:e5:a7:f4:92:b1:
                    61:64:7c:3a:41:83:45:7b:4b:03:3a:ce:86:4e:b6:
                    d9:b7:c4:62:87:1e:6b:e3:6f:17:ed:3c:5d:49:3f:
                    7c:c8:0c:fe:c5:cf:89:85:b7:a1:e9:96:85:a2:c5:
                    df:2d:77:2b:af:5c:27:3e:d5:db:03:e5:ad:0d:87:
                    36:45:f5:98:23:52:4c:de:f6:80:15:96:eb:6a:cb:
                    ed:3d:8f:5f:28:d4:b0:b6:a7:23:a3:7b:fe:90:42:
                    21:84:35:d3:89:c5:6a:d9:c6:ec:1f:8e:d7:96:0f:
                    de:d9:1d:d5:38:8f:13:d0:d9:85:91:0d:4e:48:f6:
                    d5:86:af:53:eb:6d:35:ac:9a:7a:be:27:c4:4c:17:
                    b2:e9:7b:7e:b5:80:5d:d6:e1:b4:a6:52:90:4e:c9:
                    27:72:b0:f5:8e:b6:85:8f:37:31:01:a0:58:4d:fe:
                    56:65:6b:f6:e7:ec:94:d4:b3:df:c7:4b:e4:25:f5:
                    6e:fc:5e:38:19:78:c8:74:bc:1f:ff:ae:d7:fb:d9:
                    20:5d:8f:26:e7:fc:75:2f:f7:ca:03:1b:b8:4c:23:
                    b7:10:16:0a:29:1a:bd:87:2d:82:2d:b9:33:b2:73:
                    4c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:03:D6:5B:37:7F:DC:26:72:A6:77:CC:4B:51:97:91:1B:93:63:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb70d8ab-f744-306b-928d-3397d20319cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a6:39:23:9a:29:72:f6:83:72:d7:5c:ab:5b:4a:c4:74:2f:
         d1:ec:ed:44:e5:54:13:b9:f1:ea:ba:d9:56:65:a9:b8:dc:23:
         56:b9:b9:af:dd:8f:24:32:b4:06:51:dd:99:64:0e:52:99:32:
         89:07:9a:e6:0d:5b:2d:65:7c:72:8d:30:51:d9:3a:ac:9a:7e:
         1d:9d:80:73:b7:8c:0e:76:e3:31:1d:90:bd:70:0e:2e:88:b3:
         64:68:5b:dc:38:7e:ff:35:dc:12:44:09:15:0e:59:6b:85:de:
         77:77:8d:2b:e9:72:54:6b:14:eb:08:d7:c1:f1:ee:ff:97:e3:
         b8:d9:af:95:ed:2b:79:25:f9:2f:34:a4:74:71:b9:3a:ae:6e:
         85:be:05:ed:93:47:bc:c5:2b:26:25:96:74:a6:d3:30:5d:d0:
         4d:b5:73:74:e8:55:c7:01:27:0f:79:6e:cc:0b:c2:86:e2:a8:
         04:91:db:19:14:ad:07:1e:cb:e5:88:aa:94:50:8f:82:f5:1b:
         7b:fe:68:93:fb:81:d4:f8:37:84:fe:03:c7:a1:8e:1d:04:db:
         2f:0c:b9:e0:f0:76:9e:7e:88:75:30:17:3f:f0:bc:e0:b1:7f:
         4b:f6:53:79:b0:2c:85:1a:b5:76:fe:18:55:41:82:74:ce:5d:
         41:46:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:40 2026 by rpki-client