Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f47e8d2-4abf-3caa-8c48-d446e0956aae.roa
File:                     3f47e8d2-4abf-3caa-8c48-d446e0956aae.roa (raw, json)
Hash identifier:          SR+3B7ivQBw8vbLEVOn3fooq2Sf4HrYglP25lcYuo+g=
Subject key identifier:   08:E3:90:C5:48:CF:8B:A2:58:D5:B8:B8:E8:95:9A:0C:3C:F3:0A:FE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D3DFF8031E6B97A2A8D394CA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f47e8d2-4abf-3caa-8c48-d446e0956aae.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        173.24.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:80:31:e6:b9:7a:2a:8d:39:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=326ca1bc-4314-49ae-9ed3-1dcb352971b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:61:db:39:a3:73:aa:72:f9:b7:38:fa:6e:
                    2d:5c:73:78:4a:5f:74:16:ca:88:88:bb:dc:89:53:
                    ac:a8:f3:ff:67:f2:31:a7:fb:97:12:8c:8f:e6:db:
                    68:0d:ae:1f:4e:24:ca:e2:d3:2f:68:a1:94:0b:05:
                    c5:af:37:be:33:73:c8:03:81:6c:29:23:9d:ca:1f:
                    14:ec:f7:ef:ee:5b:01:94:c3:1e:5a:47:a8:12:de:
                    0e:f9:ef:dc:1a:b2:bf:7c:5f:09:68:59:3b:48:80:
                    73:a8:21:09:f5:68:b7:3f:ed:28:b4:61:9c:96:07:
                    38:c6:2a:00:7c:2a:cb:b3:64:c2:18:d1:36:cc:78:
                    27:c4:4d:31:c0:c1:9b:78:10:db:81:80:52:20:9f:
                    b2:19:ae:6e:82:63:d8:c7:8d:9a:1d:94:41:c6:92:
                    13:b4:d1:9d:3c:de:78:79:a8:3c:fd:c9:91:05:ac:
                    31:6e:4a:26:12:d8:57:dc:ce:06:8d:3a:88:0b:d7:
                    53:23:8e:38:50:f1:6c:04:21:8a:0c:90:2e:64:f6:
                    0a:2c:f4:05:f0:ad:b9:5e:fe:e2:a0:19:9a:88:45:
                    e4:72:ec:c6:ec:1f:2c:10:7c:a3:6f:da:46:4c:b0:
                    e7:86:ba:b1:85:1e:30:10:4d:de:03:b8:1c:e3:d1:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E3:90:C5:48:CF:8B:A2:58:D5:B8:B8:E8:95:9A:0C:3C:F3:0A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f47e8d2-4abf-3caa-8c48-d446e0956aae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:83:60:0f:55:cc:ac:3a:db:a7:50:b2:d2:d8:3c:55:d5:a8:
         cc:78:fd:bc:71:8d:99:c4:20:82:e5:e7:47:08:09:e9:37:ad:
         7f:a9:1a:e7:be:9b:e6:00:c4:f3:ed:27:b4:b5:4b:6d:29:12:
         9f:7f:51:ef:f4:14:7b:56:5f:ca:76:32:c1:63:2b:83:48:41:
         1d:dd:8e:34:08:63:c4:f1:b5:30:9c:a9:ff:36:58:67:a3:8b:
         6e:8d:e4:8b:c0:d9:da:74:fa:47:14:6d:57:06:18:4a:f6:cf:
         b8:1e:5c:23:82:f0:9b:20:0b:96:71:74:12:d3:d8:7b:83:c5:
         1c:4d:79:df:0f:2d:90:1f:4c:2f:d0:bb:33:e5:22:fb:a5:26:
         4f:a7:8c:96:19:a6:24:b2:ce:fa:95:ae:fb:f9:dc:d8:f7:09:
         63:8e:1d:2b:86:77:4f:1d:91:5a:bb:18:bc:d1:56:56:01:7d:
         ff:c9:95:b5:f9:0e:34:57:de:ba:d4:27:b7:0a:15:74:50:63:
         99:ce:a1:bc:4a:67:ba:75:24:b0:cc:ce:a9:b0:cc:b9:2f:34:
         96:66:1a:a3:b8:50:1e:c3:33:ee:e4:25:d5:b7:58:c1:c9:66:
         ea:71:93:ad:07:12:b0:f6:c3:84:96:78:05:35:ef:52:47:84:
         23:f5:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:19 2026 by rpki-client