Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0007240a-f637-322f-9aea-35b99d46ffde.roa
File:                     0007240a-f637-322f-9aea-35b99d46ffde.roa (raw, json)
Hash identifier:          79krR0XE8TAhPRCWVAtARIFvtX4WDKc09mKNUoa+2DM=
Subject key identifier:   DD:59:9B:D6:BE:7E:69:2A:7C:FB:6D:20:11:93:81:75:9A:FC:3F:C5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF8061B09476604AB9F1D8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0007240a-f637-322f-9aea-35b99d46ffde.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.23.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:80:61:b0:94:76:60:4a:b9:f1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=25153f80-802e-4a0d-a698-e23c6afb9cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:78:82:50:ee:db:42:12:ae:86:78:e5:ac:
                    b1:7f:6e:12:66:6d:d9:9d:91:f2:af:08:cc:9d:b3:
                    a3:96:6d:1b:c5:a1:f2:a3:bd:d0:50:11:b3:20:f1:
                    61:76:cb:5b:ba:7b:21:07:05:48:ad:7b:80:bc:65:
                    5a:d2:66:fb:d9:99:06:ac:75:8b:7b:41:1a:ce:cc:
                    bc:19:ef:14:a4:b2:78:24:f1:24:f1:68:b0:77:cf:
                    cb:5e:c4:41:e5:98:85:c0:5c:1b:d3:da:13:39:18:
                    5c:2e:7e:35:15:fd:68:37:04:9c:73:ba:34:a2:28:
                    73:95:6b:ca:62:25:a5:49:db:25:4c:20:95:58:07:
                    f7:8a:4d:8e:e5:f9:73:fb:83:db:ee:c4:e4:34:4a:
                    84:a7:4e:83:d2:c6:fa:85:94:3d:4a:79:15:f0:4a:
                    41:69:a7:e0:da:1f:49:28:ea:4c:0f:b9:63:10:21:
                    23:9e:b5:12:b1:1f:43:4b:65:a5:d8:2c:9b:66:b9:
                    bd:6c:e3:77:e7:02:b2:d1:ce:0e:ee:7f:99:ac:61:
                    54:e4:f7:10:27:97:61:c7:b5:c6:6a:9b:6c:9a:6c:
                    74:97:3c:4f:4e:60:68:7e:ec:0c:83:d3:5e:b4:53:
                    61:8c:74:0f:ce:65:ce:6d:14:3e:fc:cf:28:b8:30:
                    52:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:59:9B:D6:BE:7E:69:2A:7C:FB:6D:20:11:93:81:75:9A:FC:3F:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0007240a-f637-322f-9aea-35b99d46ffde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5c:8a:a9:2a:2f:88:8e:52:d4:70:2f:ae:1c:c2:96:7c:71:
         5f:1d:83:f7:8d:0b:47:4f:b4:fe:42:d4:a6:fc:31:44:fc:f2:
         2a:3b:72:08:7d:54:3b:e5:f9:9a:d1:c1:c9:ad:56:87:0c:1d:
         91:23:57:8f:ff:1d:bb:02:b6:90:da:49:f9:b1:ec:8b:e6:91:
         19:a1:f5:26:15:fb:74:16:c3:40:a7:34:64:69:cc:30:59:81:
         90:e4:56:d2:72:9e:09:cf:59:d4:95:6a:64:7a:a2:e4:8d:84:
         a6:21:f0:57:20:0e:b4:c4:a2:5a:71:c9:e2:65:df:d5:44:b1:
         9f:6c:f7:af:8b:16:f1:09:9f:76:e1:e1:c6:15:7d:ba:f9:1e:
         c4:12:1b:70:14:36:05:a3:dd:14:eb:bd:33:4c:26:83:24:f1:
         36:66:d4:03:3d:bc:49:24:18:9c:c7:fb:b0:e1:b1:f2:01:d0:
         7d:01:23:ca:15:85:b4:dd:45:91:3a:a7:2a:65:5b:0c:ef:6d:
         5a:f9:42:59:ca:65:fa:d1:b0:4f:eb:05:71:2e:0d:3b:a9:bf:
         f5:54:50:b8:bd:45:c7:a8:45:1b:fe:b5:55:9e:c1:d7:4b:57:
         ab:7c:b6:29:4e:d1:41:86:fa:05:af:e1:23:76:78:e2:7b:f3:
         cd:26:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:04:05 2026 by rpki-client