Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b331f171-25d7-3856-ba34-8140a8706847.roa
File:                     b331f171-25d7-3856-ba34-8140a8706847.roa (raw, json)
Hash identifier:          KLX90ZbOEKZc5sIj4k8z0g1uPdC/u8gSxNlLm27O0tI=
Subject key identifier:   CE:07:AC:36:C9:73:F6:D8:AF:AF:85:EB:53:31:C1:3B:25:06:0F:25
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF888B84F1AB518BA49580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b331f171-25d7-3856-ba34-8140a8706847.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.25.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:88:8b:84:f1:ab:51:8b:a4:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f50ebca2-22f9-459b-bbc3-67377a72805d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:56:63:8e:18:e9:69:3b:63:58:bd:a5:5b:
                    65:16:ae:90:ce:d6:e1:95:45:b8:87:fe:33:8d:39:
                    17:ba:36:d5:e4:a4:28:ef:4d:89:f5:9d:24:94:a2:
                    e2:3f:08:fe:4d:c0:f1:b1:57:e2:3e:1b:6e:54:ef:
                    ff:1d:71:8e:ad:32:4f:a4:e3:2b:c8:54:ef:c8:12:
                    96:5b:df:f3:06:4f:c1:47:b2:d1:03:2c:49:71:e2:
                    74:c8:b9:3f:8e:c2:e3:73:66:4b:28:ed:83:06:46:
                    6f:c3:65:66:e1:9c:04:9c:47:c1:ce:34:fb:e7:39:
                    66:68:7d:8e:17:31:cf:f0:7a:4f:66:ef:c9:2a:21:
                    82:bd:91:d6:22:6e:e7:0e:30:9d:f6:fd:cb:b5:9c:
                    55:42:bd:c4:59:be:91:a7:3a:f5:b2:db:5e:26:51:
                    3a:87:8a:09:bb:90:a4:be:17:76:e1:23:a8:0b:65:
                    a3:9f:e6:81:07:f7:fa:99:76:e6:65:31:0b:66:a8:
                    7f:49:21:31:bc:21:a2:36:3d:1a:40:56:21:31:77:
                    2c:1c:8b:30:67:a1:23:78:58:4e:4a:10:a0:c3:dd:
                    24:b4:c0:5c:e8:ea:82:5e:e3:11:42:f6:4b:1e:f1:
                    ad:d3:c4:07:1c:7a:12:0c:a6:39:11:23:36:2d:76:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:07:AC:36:C9:73:F6:D8:AF:AF:85:EB:53:31:C1:3B:25:06:0F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b331f171-25d7-3856-ba34-8140a8706847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:22:8c:e8:f2:cf:dd:c1:01:ed:a1:a1:ab:80:44:f2:0d:d7:
         cf:72:8a:e3:a4:c4:7b:f9:62:0a:63:08:81:c9:69:ae:0a:32:
         ec:83:5b:05:a0:c9:d6:8d:2e:4d:77:2d:01:ea:f2:84:8d:3f:
         7b:0f:e6:d4:cf:fb:a8:e1:0e:87:5b:48:bf:cf:e5:ee:29:55:
         cc:d2:13:a6:59:9d:c4:73:11:8f:2a:e4:06:51:e0:55:ca:d0:
         29:55:7a:76:46:c4:ff:dd:10:3a:f3:57:22:d6:55:02:7a:10:
         59:ae:e4:82:d2:81:1f:ae:ee:a7:d7:5f:b0:3e:46:da:2b:4a:
         6a:b6:0a:f5:3b:8f:2d:0d:ef:42:f9:fd:ad:e2:b2:44:45:c1:
         c1:9e:ea:f1:c1:f6:4e:a3:9d:f0:db:48:a8:4c:c2:73:f1:e2:
         ef:90:ca:e0:e1:10:cf:6e:94:bd:20:ab:f7:f8:80:4c:1f:13:
         b0:33:1f:9f:ed:2d:1e:cd:86:bb:4e:76:e6:91:02:39:1e:c3:
         53:46:e3:67:04:0c:18:50:a7:92:4e:8f:e9:20:36:9c:20:97:
         25:9c:e4:0c:bc:e8:c4:24:25:d2:ee:9f:43:32:48:e7:ca:4d:
         0a:57:6d:30:0d:a4:e0:b6:e9:4c:d0:b0:12:83:0e:4a:65:8d:
         7f:3d:14:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:41 2026 by rpki-client