Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2d92afc-917f-3a95-93d3-8243872d294f.roa
File:                     a2d92afc-917f-3a95-93d3-8243872d294f.roa (raw, json)
Hash identifier:          gXYyDOn3ssv/ho8Tb2M7aGhCRwa6jT6ZyHi9wVs1kH8=
Subject key identifier:   CA:00:46:A7:C0:E5:BF:F7:47:DB:FB:DF:AF:DC:6F:C9:61:CA:D1:0F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D2644A67330EADF4A4425E940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2d92afc-917f-3a95-93d3-8243872d294f.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        173.17.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:a6:73:30:ea:df:4a:44:25:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=ab706df7-5178-4e8c-9458-bc974a841ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:fc:c7:d8:bd:eb:a1:71:95:2a:dd:e7:42:
                    ee:ad:6f:a8:8e:e4:40:d5:eb:c7:a6:78:d7:1f:e5:
                    26:70:03:51:10:df:55:34:ef:42:09:68:6d:24:ff:
                    cd:dc:8f:6e:d6:a6:87:74:44:b9:03:2d:b3:a3:4c:
                    0b:c2:65:f0:e0:00:5e:b7:3d:82:e5:97:8a:97:59:
                    ac:79:24:20:b2:dc:61:af:5d:48:ca:d0:69:2b:38:
                    fb:8e:4d:e9:01:5a:b5:58:44:14:29:6f:80:da:47:
                    e0:d1:c4:6a:50:bc:2b:95:d4:31:93:dc:b3:de:3d:
                    fa:e4:57:c7:21:23:fc:25:bc:fc:65:66:b4:59:00:
                    62:87:11:fb:4e:2f:7c:d8:19:34:4a:32:db:7e:51:
                    6d:f2:c3:37:14:50:cb:3b:99:1a:d6:cf:23:fd:87:
                    7a:2c:7b:b3:09:f1:24:20:b9:4b:53:c3:dd:89:f4:
                    bf:09:6c:e8:18:0a:b4:0e:0d:96:cc:d5:65:57:ec:
                    e1:a4:07:12:8b:81:cc:ba:6d:d6:0e:2e:87:3a:69:
                    99:ba:f8:37:d9:64:f8:17:76:bf:53:f5:8e:6f:f9:
                    03:d2:b2:72:39:0c:b4:77:1d:88:41:5f:ca:4b:8b:
                    c5:e8:93:5f:5d:50:e4:ba:d8:dc:3b:b9:89:d9:3b:
                    f9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:00:46:A7:C0:E5:BF:F7:47:DB:FB:DF:AF:DC:6F:C9:61:CA:D1:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2d92afc-917f-3a95-93d3-8243872d294f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:84:28:23:58:b8:a1:1a:13:0a:54:8d:9f:a0:5b:12:a1:aa:
         ae:5d:95:6e:87:14:6d:f0:87:a7:f9:21:e4:cd:a1:8b:74:01:
         5e:a3:fe:db:2c:73:0d:46:62:17:8c:8d:46:6a:b3:d2:b9:dd:
         21:76:c4:af:8e:b5:9b:97:80:61:41:f0:b1:16:93:55:18:9d:
         03:58:17:3d:e6:4d:bd:89:1e:a4:83:b5:9e:5a:00:29:6c:9b:
         8e:f6:84:7f:1e:58:1c:60:da:7e:c7:f8:a5:39:5e:92:7b:23:
         ab:d2:45:8c:8b:f5:96:e9:21:98:8e:7c:3e:c8:63:92:e9:57:
         31:83:2d:e7:ae:18:6b:13:dc:28:81:eb:2d:b3:ee:d0:a0:1b:
         38:47:a5:2e:ab:67:5a:42:7e:16:a9:cb:a5:7c:43:50:40:54:
         33:74:1d:72:60:1f:b2:42:5a:6f:2d:db:a9:93:5a:03:87:04:
         a4:0a:a9:0f:1e:ce:b4:f0:5e:45:e8:a9:27:f0:7a:d2:62:7d:
         c1:2d:fd:19:3d:79:6a:82:8b:54:2e:f9:ab:0f:d0:68:3e:90:
         ca:9e:8c:f7:87:51:9d:e1:d0:52:22:10:e9:19:e8:a1:0c:ab:
         b8:ee:1a:29:93:db:a9:74:7a:3e:5d:00:df:6a:9a:ff:b3:f4:
         cb:ae:f8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:02 2026 by rpki-client