Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dffa376-51a0-3406-8787-4c350d825cc5.roa
File:                     6dffa376-51a0-3406-8787-4c350d825cc5.roa (raw, json)
Hash identifier:          PLrvbEWXuHXpyMWX6J5JO+K6AWvyYOJhBEBe6LJNDfs=
Subject key identifier:   77:40:31:0D:80:78:90:8F:CB:25:87:42:BD:32:D1:17:F5:A6:73:35
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AACAA8EB9B21F45DB54D40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dffa376-51a0-3406-8787-4c350d825cc5.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.16.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:ca:a8:eb:9b:21:f4:5d:b5:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=900dc3ac-3008-4344-a1c6-c0060c6f77d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:66:8a:9a:79:76:0a:a1:b6:c1:6a:2f:11:e9:
                    5a:9d:99:10:bb:3a:3a:68:29:7d:46:3d:f2:fa:80:
                    7c:43:cd:87:87:a6:57:19:6e:75:5d:00:ec:76:63:
                    7d:12:38:89:6d:cd:07:19:21:30:c6:a3:5e:1b:c0:
                    20:44:ad:b4:9f:fc:57:a5:30:04:66:b2:bc:ff:0a:
                    d1:4b:04:c6:cd:8a:67:44:24:57:b8:7d:c9:5d:6c:
                    81:70:61:c0:6c:dc:5d:48:fb:1b:5b:6a:2c:24:b9:
                    9f:c7:8c:e0:4b:3b:5c:4a:ba:13:3a:e9:b5:66:84:
                    14:1f:58:43:e5:e5:73:ef:7d:06:34:56:4a:a1:ff:
                    3f:f4:26:ec:46:68:97:42:a4:05:54:1a:1c:0e:4f:
                    f0:a4:43:ef:86:12:f2:81:d2:a6:8e:05:5c:7e:7b:
                    7d:3b:78:92:4e:97:3a:88:aa:18:14:c2:6c:4f:45:
                    69:f3:7e:27:53:d8:8d:7a:1e:b9:87:d0:da:ee:71:
                    35:d7:77:f8:05:14:52:17:6e:e2:28:b4:62:68:6c:
                    42:f7:52:80:e5:5f:f8:3a:e6:c4:8c:e1:05:1d:a6:
                    24:22:00:83:52:de:5b:d3:11:0c:3b:fa:2b:ba:ba:
                    2b:b5:d6:f7:16:22:e4:e8:ed:e7:b2:ec:b2:0f:1f:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:40:31:0D:80:78:90:8F:CB:25:87:42:BD:32:D1:17:F5:A6:73:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dffa376-51a0-3406-8787-4c350d825cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:bf:11:3c:f8:e0:62:b2:07:7e:95:e8:94:78:77:e1:41:bb:
         97:92:7f:7a:37:90:9a:27:86:e6:70:9b:c8:4f:df:0f:0d:d8:
         e5:a9:89:3f:bf:4d:2c:30:7f:d1:b6:72:2c:15:93:4d:2c:35:
         dc:47:5c:da:64:cc:01:30:01:d4:88:52:9b:a2:ac:25:2e:0a:
         0a:9c:81:bf:78:c5:4b:d9:41:f9:f2:31:42:50:f0:76:6d:cb:
         44:f9:2e:8f:e5:3f:30:28:92:f4:0d:3c:ec:3e:f8:2b:a5:52:
         d0:ac:51:b9:45:c9:cf:95:b5:27:00:67:61:4e:42:23:01:c3:
         02:9a:e3:39:b1:ad:47:38:fa:66:2f:d1:63:0e:b8:2e:1c:30:
         4a:56:55:3e:1c:43:76:ea:d0:1e:9e:42:f9:d3:6a:f7:27:81:
         8a:5e:8a:12:db:57:de:0c:37:c4:7e:33:a9:5b:a4:5c:eb:a5:
         1c:f9:65:b6:c1:2c:bd:02:17:15:f4:57:05:b3:4d:94:06:02:
         6a:bd:e6:19:a4:47:f3:ad:d5:0c:94:9c:c9:07:e7:0d:ec:8b:
         60:0c:42:81:d6:fb:f8:d1:15:d0:3d:9c:72:b8:32:d9:01:88:
         da:b8:44:ba:a7:61:13:e5:e9:85:de:fc:d3:c7:a1:ef:a7:ce:
         2f:82:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:39 2026 by rpki-client