Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa
File:                     4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa (raw, json)
Hash identifier:          zSuY7XBGm+p17a4uFkImN0G/3xC7SHCD11vn/6IW0fg=
Subject key identifier:   DD:65:38:92:DF:40:A1:79:A7:9B:7F:DB:D9:80:D4:08:C6:39:60:80
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AAC036BCC19DD853D52500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.23.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:c0:36:bc:c1:9d:d8:53:d5:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=22ee2d23-185b-40cd-a1fa-9c1cb594b300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:1b:83:4c:e9:9a:29:2c:dc:59:b4:37:82:
                    fb:72:df:52:fa:c5:45:6e:fe:2c:08:c6:bb:0e:7c:
                    3d:2a:76:b8:c5:44:9c:83:99:01:cf:fb:f5:b7:24:
                    21:d1:3b:b0:5a:c2:78:09:57:5e:0c:d6:e8:6e:6b:
                    ae:5c:3c:db:68:cf:b1:d4:2c:da:19:1c:07:30:15:
                    7a:c0:17:a2:33:8d:af:7a:0b:ec:b8:4a:57:a3:84:
                    d5:3b:ce:7a:fa:6c:77:52:01:e1:9c:75:0f:c8:d8:
                    03:f2:9a:d0:ff:c9:c6:6c:8e:65:86:c6:08:16:d4:
                    24:0c:87:3a:a0:9a:37:4e:d3:1a:0f:68:2e:ff:58:
                    87:55:08:9e:62:fd:82:a8:f9:22:1b:56:92:3f:fe:
                    0f:d5:78:c5:33:ec:c0:24:56:76:92:8e:11:43:29:
                    9e:4e:eb:46:00:10:1e:c7:8b:3f:6d:be:37:45:b5:
                    49:c1:9b:8c:81:65:0d:24:8e:ab:28:dc:90:1a:3f:
                    4e:c4:37:e8:8b:c4:bf:e3:93:b5:82:46:81:02:83:
                    5e:63:12:b1:c3:22:2b:98:df:b9:4c:c7:d3:20:d8:
                    e0:c8:e9:75:e3:67:c3:4f:04:09:e3:1c:fe:7f:0e:
                    c2:0f:84:d7:df:f0:5d:84:ed:1e:c8:7a:4d:5c:e2:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:65:38:92:DF:40:A1:79:A7:9B:7F:DB:D9:80:D4:08:C6:39:60:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:fe:a5:f7:1d:07:6b:ff:fc:db:d6:ce:c5:c7:7e:c5:8f:
         a7:4a:69:fb:e2:96:ad:9d:f0:91:7b:b2:c0:ac:32:db:b1:43:
         6f:bb:17:7b:88:c5:6b:db:c6:64:89:ef:f7:e6:13:fe:08:4d:
         1e:b4:54:b2:a2:df:81:86:22:ea:09:38:33:a2:a4:50:10:90:
         99:09:54:3f:21:b3:ad:b2:4d:8f:23:86:a5:05:51:d9:e9:9d:
         ed:f2:42:63:1c:cf:fa:c8:3e:37:0a:52:c5:c7:69:08:a0:62:
         18:2f:bd:16:ce:6c:63:f7:14:07:51:fa:ee:aa:a7:9b:bf:30:
         7c:af:b0:48:2d:8b:ed:92:05:72:8f:98:6b:6e:d9:e5:88:ab:
         29:ea:5f:ee:41:7c:8a:4f:55:ef:ce:d0:31:b8:40:ce:1c:7e:
         85:50:73:9e:fe:cf:8d:80:fb:a2:b4:c0:f3:53:f6:c8:89:3c:
         8e:38:08:5a:02:ad:b7:86:10:b0:bb:c7:e1:f6:40:a7:70:e7:
         d3:1e:3d:3e:f3:e2:67:53:90:4f:b5:c6:9b:71:77:97:0e:90:
         d4:66:da:48:db:50:ec:27:a3:39:34:04:9f:1d:58:e1:f7:8b:
         cc:c3:9b:ed:8f:0c:6b:9c:89:72:ef:55:8b:c8:21:30:50:9d:
         dd:07:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:01 2026 by rpki-client