Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05ae186f-9bdb-3f1d-8ddd-351ad60f27db.roa
File:                     05ae186f-9bdb-3f1d-8ddd-351ad60f27db.roa (raw, json)
Hash identifier:          cz8L3AX5ibkdJwMbb++EM+H4zsiOMKhHXIuNxYVQ5Es=
Subject key identifier:   5A:CE:A2:AD:9A:C0:0F:02:B9:00:44:97:04:41:CA:FB:0E:39:16:9B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E119A0B961BA6E012B7C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05ae186f-9bdb-3f1d-8ddd-351ad60f27db.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.23.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:19:a0:b9:61:ba:6e:01:2b:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=9ca86b03-e90a-4dc0-a333-75dcd1275225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:da:80:bd:bb:cb:de:9c:77:a7:95:39:33:27:
                    13:e3:af:da:15:cf:0d:ca:68:2c:2e:e0:c1:c0:c0:
                    83:2f:72:c6:e0:67:de:5b:4c:56:3b:f4:59:66:70:
                    9d:c5:10:32:6e:4e:53:a5:2f:7d:55:58:88:57:11:
                    1a:0a:67:29:46:bc:f7:66:e7:00:b9:8e:d8:5e:9b:
                    65:98:ae:88:29:b0:45:c8:e4:1c:13:9d:c5:b6:0a:
                    c3:e5:5a:9c:ba:9f:1b:eb:73:79:92:74:4e:fd:52:
                    c3:a7:68:65:34:e7:ec:ff:13:7d:3d:eb:92:11:19:
                    90:ce:a0:14:df:e6:29:25:0f:6a:46:55:3f:24:4b:
                    77:f3:19:ad:46:7b:b1:a8:3c:43:8e:98:24:9f:86:
                    26:c5:61:5e:94:e5:ec:8a:f4:f6:42:02:b3:c5:c4:
                    89:62:20:1a:d8:ab:2e:de:65:f7:b8:14:eb:08:09:
                    2d:67:91:5f:f0:13:83:89:f0:c2:26:a9:ed:8d:81:
                    bf:c6:94:b4:b0:98:7a:14:4b:85:d8:8f:fa:c0:f3:
                    de:ea:d3:4b:5e:50:63:1c:89:69:ce:c8:a1:2a:d1:
                    66:72:e8:e2:fb:23:a8:34:c5:4e:e4:e8:47:28:7a:
                    be:c2:20:7a:57:45:9d:4a:be:ea:9f:e0:5c:e8:56:
                    7f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CE:A2:AD:9A:C0:0F:02:B9:00:44:97:04:41:CA:FB:0E:39:16:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05ae186f-9bdb-3f1d-8ddd-351ad60f27db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b7:ce:77:44:bf:3f:34:63:82:d5:75:d7:ed:fa:14:3d:8d:
         42:a8:ef:79:62:ad:7f:73:74:f5:79:bf:f0:7d:cb:fb:60:60:
         4b:a2:db:18:15:da:13:20:72:fb:bd:1b:7f:8c:b5:d7:90:40:
         a8:88:ea:11:f6:aa:ef:24:6f:7a:73:92:a2:c2:d2:46:b1:a1:
         03:9c:1c:9b:7c:e0:ec:34:3d:58:a6:e6:a7:fe:8c:93:b9:8f:
         50:1d:be:da:6c:64:fa:e7:2d:ae:1a:27:93:b8:58:c6:26:67:
         9f:3b:0e:7f:4d:90:07:e0:7d:a3:f2:80:3c:81:ec:b1:a7:f3:
         de:50:14:65:46:77:8d:5b:88:18:32:2d:aa:14:85:6f:68:74:
         91:49:d3:79:bf:e4:0c:fc:89:de:9a:58:e7:21:c3:a7:7e:4b:
         12:61:3b:0b:e1:97:0c:84:fa:32:bd:73:7b:8b:f0:f6:d3:42:
         ef:78:f0:50:75:fb:19:43:4e:d3:90:00:94:e1:19:de:cd:b4:
         65:7d:a3:e4:47:b3:38:f4:d7:43:6d:85:14:d2:ee:95:dd:00:
         83:f6:f7:b0:7a:4d:7c:8f:0d:c0:2d:41:51:62:88:a8:94:72:
         bb:e6:81:b1:2b:f7:f9:91:c4:e7:e8:1b:38:13:19:56:2f:7c:
         a7:da:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:22:34 2026 by rpki-client