Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/580475f8-2a8b-3b97-9bc6-21cef68965ef.roa
File:                     580475f8-2a8b-3b97-9bc6-21cef68965ef.roa (raw, json)
Hash identifier:          A3GW5EezyaPwfVU0euMqeb7wd4ufTF01kC9qZdWRvas=
Subject key identifier:   4A:98:A0:C4:8E:AF:D5:58:C9:81:51:3E:56:98:A1:22:B6:85:04:99
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E120BEB39A1E60D7104720
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/580475f8-2a8b-3b97-9bc6-21cef68965ef.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.30.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:20:be:b3:9a:1e:60:d7:10:47:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ec5a9424-d4a7-400d-8869-b9fc8927642c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:20:fd:98:93:78:48:f0:2e:52:ad:8a:47:19:
                    5d:b4:2d:69:13:e6:af:d6:fa:96:b5:cf:48:39:d1:
                    cc:41:3b:10:98:17:ad:61:80:0c:4f:0f:99:32:db:
                    8c:b7:1b:5b:99:d5:ed:ad:da:c9:97:7b:7a:73:77:
                    ab:e9:48:60:17:a0:a2:7f:c9:90:1a:59:8d:e2:90:
                    55:bd:85:64:69:fa:15:c1:48:b3:cc:84:f3:06:af:
                    b4:57:7c:6d:24:31:3e:27:3e:2a:df:ca:a5:c2:43:
                    fa:69:ff:5a:fc:5c:b6:ad:55:8d:3b:ea:a8:ce:0a:
                    a7:7a:f8:9d:be:10:a0:f5:40:63:41:10:7d:ae:e3:
                    c5:89:d0:8d:cd:44:93:0f:f9:e7:f1:79:4f:65:60:
                    7d:b1:71:0b:2f:71:cc:a0:4d:3b:02:66:72:bf:43:
                    37:d2:cf:28:3c:09:07:d3:34:bd:54:8c:af:f4:9f:
                    07:c2:36:35:94:f9:c2:b5:b7:4f:d5:ab:a1:06:35:
                    cc:79:28:fc:86:b5:ce:ff:16:c4:3e:4c:ee:c0:4e:
                    de:4d:9b:ce:ce:a6:1b:45:56:a6:49:18:c3:a3:b1:
                    6d:9e:9d:c9:b0:7c:ff:0b:1c:d9:ed:f6:4d:64:d3:
                    18:6b:e9:5d:cd:50:86:cf:0d:7a:04:af:71:cb:5d:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:98:A0:C4:8E:AF:D5:58:C9:81:51:3E:56:98:A1:22:B6:85:04:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/580475f8-2a8b-3b97-9bc6-21cef68965ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:d7:65:8c:b7:3e:7c:76:09:4b:3a:85:19:e7:2b:56:a3:
         df:09:e4:1d:e0:a5:f6:0b:76:48:ce:b5:0c:63:df:a7:9e:02:
         db:ce:e5:f7:40:34:a9:a7:bd:ab:37:71:00:89:8d:74:77:e6:
         3b:d8:e9:71:2a:40:56:55:ec:69:4d:16:68:88:de:09:36:01:
         6b:9d:b9:ef:57:e5:25:fb:31:f9:65:6e:c8:3f:72:42:27:95:
         fb:6e:1b:18:b9:91:8d:6c:f2:68:2d:2b:c2:a0:9d:28:da:ce:
         0a:ef:f1:8a:96:d9:bf:b3:64:41:6b:88:c5:4f:bc:45:ff:94:
         27:4c:2f:46:0f:d9:25:07:97:00:e6:1a:69:1c:58:75:6f:93:
         99:cc:5b:b1:91:e3:c7:53:be:c0:cf:6e:42:b4:c2:01:8e:6e:
         55:d3:97:3b:2a:82:d5:ef:ed:ff:44:d6:c6:1d:2b:c3:44:fb:
         e8:9e:8d:2b:3b:31:56:90:8a:c0:33:5f:9b:a1:67:82:4f:a9:
         66:4d:af:28:08:9d:55:30:af:55:ca:a4:c7:63:f5:07:7e:8b:
         a6:ec:ac:44:4c:3f:ae:a7:62:8a:3e:38:b4:e2:32:72:53:90:
         83:c8:bf:cd:f7:8b:e7:de:04:0b:b4:6b:b6:bb:c0:a2:09:ef:
         61:fd:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:58 2026 by rpki-client