Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/350ea7b6-341f-3658-b587-cb35709b08e6.roa
File:                     350ea7b6-341f-3658-b587-cb35709b08e6.roa (raw, json)
Hash identifier:          G6EFUeqO5WJaUQdpjd6gTW7DC+AKGeyAgbR38EFO6T0=
Subject key identifier:   20:B3:20:62:68:DE:4B:4A:A5:2D:0D:6B:9A:3D:64:49:91:49:A2:46
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF871D073F477773EB47F8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/350ea7b6-341f-3658-b587-cb35709b08e6.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.19.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:87:1d:07:3f:47:77:73:eb:47:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=3e6ba113-0eda-41f4-a0b7-77448e1cab4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:52:00:eb:69:d9:85:ee:b0:b6:e9:5f:4b:
                    ea:68:41:02:fb:c8:5c:0f:d1:34:03:a4:04:b2:2c:
                    08:0d:5b:a4:e6:7a:81:e6:3f:44:49:7d:73:0e:18:
                    2b:87:af:b2:4b:5f:63:e9:80:85:ac:02:2c:f5:6d:
                    ad:b3:0d:3e:21:64:a7:85:89:73:43:8b:10:ef:8d:
                    50:fe:8a:de:cb:c6:14:9a:42:68:0e:4a:97:62:70:
                    35:2b:56:ee:9f:66:82:ea:ac:14:96:a7:3f:01:b4:
                    83:df:74:6d:ed:47:db:03:63:df:db:62:76:f5:34:
                    f0:56:2e:16:30:57:c3:51:4d:1a:53:88:ed:a8:74:
                    ba:24:d6:60:68:ad:7d:f6:28:8c:4e:73:0b:01:91:
                    7d:cc:7b:69:6b:a0:78:b9:f3:b7:9c:f8:f7:8d:1c:
                    3a:12:ee:10:e1:63:db:d4:22:b2:34:5a:fa:f5:0f:
                    25:96:5e:e0:16:8c:e1:96:f1:17:c1:2f:c3:3e:32:
                    3a:88:01:4c:20:7c:69:a1:9d:92:e0:c1:04:a4:47:
                    70:36:6a:5c:c4:cf:f5:f5:c3:24:cf:fa:e4:66:d2:
                    e6:e3:2d:16:ec:4c:8b:cc:99:36:66:83:65:a3:5c:
                    1b:ae:21:2b:01:f4:c2:ef:cb:d8:cc:e0:2a:15:da:
                    20:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B3:20:62:68:DE:4B:4A:A5:2D:0D:6B:9A:3D:64:49:91:49:A2:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/350ea7b6-341f-3658-b587-cb35709b08e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:46:94:dd:01:75:68:a5:23:b0:5d:1e:42:64:d5:15:51:40:
         e3:37:f5:f8:50:83:37:28:a1:b3:4c:6e:40:eb:70:5e:34:14:
         b0:ff:a4:01:32:1e:d8:dc:6d:c6:be:73:1e:49:e0:1d:51:ca:
         cf:06:16:61:d1:a2:09:20:3d:69:2b:dc:3f:7e:57:b7:ec:5a:
         25:83:84:4f:0a:5d:bb:fb:49:13:2c:f8:51:b7:5f:f9:a2:8d:
         4b:ff:a6:17:0c:59:4c:92:c0:1e:d7:4f:bc:86:77:7f:b7:96:
         87:a0:04:ed:f9:27:f3:ef:74:c3:63:41:0f:d0:14:69:4e:ca:
         94:e3:ad:6b:5f:61:83:72:23:98:bb:f9:cc:e3:6e:f2:ef:ef:
         51:90:a7:5c:3e:0c:f5:1e:07:3a:d8:92:80:ea:eb:f0:5d:52:
         be:3f:da:0f:9d:f4:2b:38:03:91:2b:e6:d6:97:08:5f:dc:da:
         d1:2c:ca:e5:5c:da:ef:31:cc:ae:82:75:a5:da:67:b8:f6:e6:
         20:30:6b:f5:32:33:ad:11:19:96:78:55:85:8c:00:7c:5f:52:
         b8:54:02:f8:66:a3:3f:e5:cf:15:88:6d:3d:90:50:01:32:a2:
         96:66:89:96:e4:e9:f6:4b:7c:c1:82:a7:50:f5:2f:67:b3:10:
         b6:4b:73:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:51 2026 by rpki-client