Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30c8d333-0d73-3df4-ab06-9f066dc14248.roa
File:                     30c8d333-0d73-3df4-ab06-9f066dc14248.roa (raw, json)
Hash identifier:          f7vhA8jZqnJqV83GYhUmVh9DUOxbjF15ls6ihDKtxEI=
Subject key identifier:   D7:CE:FE:1E:0E:BD:5D:BC:A3:D0:3C:63:4B:E1:67:DE:9B:7E:B8:0F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F331D2139786C836BA27AC420
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30c8d333-0d73-3df4-ab06-9f066dc14248.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     30036
IP address blocks:        173.26.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:21:39:78:6c:83:6b:a2:7a:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=54303d53-3cb1-4dfc-9f36-3b5e4cb87aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:af:0f:41:72:aa:78:40:e4:89:1c:a8:53:0f:
                    b5:ba:3c:6b:33:bd:06:41:7e:d2:96:40:e2:61:90:
                    14:79:6e:54:d4:58:e7:98:38:81:20:1f:d3:b5:9f:
                    8c:14:36:bf:ee:b0:76:10:46:34:8e:df:6f:29:3a:
                    90:20:a8:e1:eb:34:f7:cf:d3:e7:cb:bd:55:ae:4c:
                    c2:41:62:d0:c0:f2:00:f9:7e:1d:2f:a0:9b:4a:d2:
                    5c:e5:10:a8:1b:78:5a:2e:cb:50:a1:ef:ad:2f:ba:
                    7e:e9:79:d0:e1:72:ba:68:26:ef:4e:b1:95:b8:4f:
                    50:99:c0:f2:f7:f9:b0:ca:18:bc:6a:58:10:35:7a:
                    00:5c:1f:89:18:ac:de:16:55:d5:50:9c:ce:02:29:
                    7a:1a:36:27:50:f0:bb:d5:7b:5b:31:09:ab:11:e5:
                    05:dc:6d:00:0e:d8:1b:73:88:26:a3:68:08:71:05:
                    5f:cd:a2:e9:97:39:b1:bc:9d:85:b9:dc:89:77:4a:
                    4a:14:5c:50:72:1e:09:aa:0c:56:69:b5:b2:d1:1e:
                    50:3c:1b:97:d4:4a:53:74:84:71:8a:99:b8:33:1b:
                    4b:9a:e4:7b:9f:32:74:78:26:f1:e9:45:b3:9b:c1:
                    29:8f:28:14:99:15:e5:cd:bf:24:fd:98:8b:ed:d0:
                    a5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CE:FE:1E:0E:BD:5D:BC:A3:D0:3C:63:4B:E1:67:DE:9B:7E:B8:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30c8d333-0d73-3df4-ab06-9f066dc14248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c4:71:53:53:54:59:39:9d:29:7a:dc:25:d2:83:41:9d:63:
         ff:ae:7e:22:23:75:2e:50:b8:34:39:98:03:b3:63:2e:ee:2f:
         3b:14:e9:dd:fd:07:54:00:ec:65:24:86:52:7c:0f:ed:2a:a5:
         99:1d:98:80:4e:82:40:5b:e8:24:62:b0:3f:f3:75:bd:ae:b8:
         cd:9b:57:99:fa:77:7a:db:85:eb:5e:7c:71:95:c8:c0:7b:72:
         5e:ad:cd:f4:b8:44:40:8a:3f:f7:05:37:20:f9:bd:91:a1:60:
         f8:ca:aa:6d:1e:24:e5:36:59:7f:fc:c8:e8:cf:84:4b:3a:a2:
         95:8e:65:49:10:9c:e9:ec:dc:33:61:fd:3d:dd:a7:d6:25:d6:
         99:a2:a8:7f:c2:fd:23:9c:f5:58:8a:b9:6f:d9:f5:3a:d3:54:
         d2:ad:b3:34:e4:4a:0b:72:96:d3:6b:ec:37:2f:ae:54:60:c9:
         a8:34:55:70:9b:c3:1c:d1:99:04:fe:3d:c6:dc:58:31:75:c4:
         c7:0f:f9:ce:75:f8:8b:16:81:2a:3d:9e:78:a6:34:a8:a7:90:
         87:50:6c:c0:99:70:fe:f7:dc:53:83:42:0c:07:b4:f7:17:e5:
         18:ef:93:df:92:50:b4:d3:5b:b3:c0:b3:03:fd:47:a8:30:1a:
         01:e6:d6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:23:51 2026 by rpki-client