Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6736486a-3a55-3e3e-918a-1ee97baba5f5.roa
File:                     6736486a-3a55-3e3e-918a-1ee97baba5f5.roa (raw, json)
Hash identifier:          L6a/nEWXFl6KFg3eeNnVDpcKT4Q3sR74PZNoT/74KqY=
Subject key identifier:   BB:0E:6C:B7:E1:06:42:9E:63:22:DD:AE:7D:4E:D0:D3:E3:96:CB:95
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E6DD4C217D05C030D742D3D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6736486a-3a55-3e3e-918a-1ee97baba5f5.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        173.28.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c2:17:d0:5c:03:0d:74:2d:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=f89c6efb-0a3a-48d6-ad2d-06c8d63f7d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fa:4b:03:87:57:70:ae:33:0a:0c:8f:1b:3a:
                    81:56:2c:a7:2f:70:f0:c0:2a:af:28:d2:7e:93:df:
                    ae:de:31:4d:bb:6f:4d:10:72:33:9f:59:36:3d:01:
                    2a:71:bb:53:cf:c8:b8:6b:ad:c0:a6:14:ac:e6:1f:
                    50:6c:9b:ae:f5:6d:e5:cc:26:87:83:40:0d:ee:a2:
                    88:cc:b8:24:d7:d8:9d:60:22:9e:c4:0d:50:99:9d:
                    df:85:e6:6e:69:c5:43:56:4a:be:cb:02:53:37:76:
                    c4:36:39:b5:d9:b6:1d:17:ac:72:17:04:76:41:d8:
                    ac:d0:8f:d9:3f:12:6c:f3:66:c2:66:9d:0d:c8:3c:
                    61:fc:b0:7b:b9:e7:25:c2:76:af:d8:06:2b:44:d4:
                    8a:9a:82:44:a4:ca:08:6e:31:53:5e:21:61:32:2b:
                    b2:c7:92:44:bc:ef:7e:69:70:98:56:12:e4:6f:b5:
                    41:52:46:c1:e4:12:90:f4:09:5d:a3:10:1c:21:2e:
                    4f:05:eb:72:14:9c:2c:aa:ad:d5:50:36:ac:62:fb:
                    da:b7:6a:63:f2:ad:56:cc:1e:32:f6:e5:f7:3d:e2:
                    37:8f:bc:e9:eb:88:a2:11:e4:07:3d:6c:9c:3b:34:
                    47:64:d9:b9:01:a7:71:61:e2:da:85:9b:f0:a7:20:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0E:6C:B7:E1:06:42:9E:63:22:DD:AE:7D:4E:D0:D3:E3:96:CB:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6736486a-3a55-3e3e-918a-1ee97baba5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f2:8d:a2:94:16:ea:ef:a9:2c:39:5d:23:bf:96:96:2b:df:
         f9:54:b2:97:ce:5c:8c:6d:ad:e5:a3:2d:fe:23:f7:61:ad:79:
         c8:89:15:05:8a:ad:fe:47:8a:b4:da:f4:b2:fa:98:46:8b:30:
         e4:fb:55:0f:45:d9:c6:e3:db:b5:a3:ef:67:1e:97:5d:22:e1:
         a9:b7:62:69:41:4f:ba:83:f6:b1:f6:fe:73:76:9c:5c:77:d4:
         93:92:20:31:58:d8:4e:54:a0:4c:5c:0e:5a:19:fc:9e:59:51:
         a8:60:3e:d3:38:cd:42:be:2f:67:62:35:79:94:b9:a7:d6:48:
         7b:72:37:4c:4c:f6:97:b9:e3:94:d6:90:d2:46:86:7e:bd:5a:
         38:0a:b8:d6:05:78:87:0d:8e:0e:9b:bc:fa:cf:29:37:e6:1c:
         3f:0a:dd:4b:09:13:e7:f2:fd:49:93:cb:6e:05:1d:9e:70:d3:
         ca:ad:39:1d:dc:95:62:41:74:8e:e7:66:4e:a3:29:d9:92:bd:
         3f:dd:60:1a:92:d1:57:d6:1b:88:86:0e:03:93:9f:f5:47:83:
         00:17:6f:23:d5:c0:6f:c0:9a:7d:87:b9:a6:3d:d5:30:ef:2a:
         74:32:ee:06:d0:27:93:36:49:5c:89:a2:c5:2a:f9:1d:10:01:
         03:4e:59:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:37:21 2026 by rpki-client