Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3d7cc94-c5eb-3227-acb1-0faf6995a362.roa
File:                     c3d7cc94-c5eb-3227-acb1-0faf6995a362.roa (raw, json)
Hash identifier:          OGRwEDSnG2nXNUzz6tb8XVTugHo/nM50kG7mIjaRCYY=
Subject key identifier:   61:DF:2F:80:78:FB:0E:06:DE:93:F6:F3:83:87:35:AA:69:CA:3A:1B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E5B6FEA3375E7E93121C32D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3d7cc94-c5eb-3227-acb1-0faf6995a362.roa
Signing time:             Wed 01 Jul 2026 18:52:34 +0000
ROA not before:           Wed 01 Jul 2026 18:52:34 +0000
ROA not after:            Tue 29 Sep 2026 18:52:34 +0000
asID:                     30036
IP address blocks:        150.195.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:6f:ea:33:75:e7:e9:31:21:c3:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  1 18:52:34 2026 GMT
            Not After : Sep 29 18:52:34 2026 GMT
        Subject: CN=483ba7be-d2f4-436c-aaf0-9006b86ef75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:c7:61:cf:3d:d2:86:b7:0b:b0:29:d9:fc:
                    df:09:94:4e:23:f0:16:75:13:88:80:76:d4:4e:9f:
                    dd:66:4d:51:c1:ef:59:5a:86:2d:e1:d9:18:ba:4d:
                    23:fc:c0:40:6e:87:4f:52:b9:9c:68:c4:9e:a1:1c:
                    66:90:6d:bb:b4:54:88:e4:4e:09:47:31:19:1c:ce:
                    ac:f1:81:51:96:db:b0:30:2e:71:9d:0b:59:ab:63:
                    5c:fe:aa:54:26:e5:24:f2:54:5f:0b:60:07:ed:0c:
                    a8:4a:09:c5:40:e0:ac:50:66:89:06:13:58:4e:a5:
                    0e:73:a9:21:0f:12:d8:eb:85:47:0b:5c:e1:e3:4e:
                    86:5f:b7:7f:0a:19:d3:f8:d1:40:56:54:44:b2:c1:
                    cb:6a:cc:be:ed:9e:bd:bd:1e:42:70:f5:fa:6a:d2:
                    e7:a4:07:71:eb:e4:6a:3e:a1:1b:27:f9:73:a6:5f:
                    38:18:5d:73:58:38:48:be:c9:4a:6a:9a:c3:f2:d5:
                    cc:82:6c:a6:20:8e:a1:1d:00:92:94:f8:22:6d:f7:
                    ff:06:35:c9:62:a4:aa:86:38:1b:40:fb:95:e3:66:
                    b2:b3:69:0c:5e:12:35:ac:b0:5d:79:d7:de:d8:55:
                    5f:2a:d7:6c:74:10:dd:03:ef:75:a9:d8:19:ea:90:
                    1f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DF:2F:80:78:FB:0E:06:DE:93:F6:F3:83:87:35:AA:69:CA:3A:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3d7cc94-c5eb-3227-acb1-0faf6995a362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:42:51:55:f9:2c:df:94:92:96:32:c5:2c:da:58:c9:61:
         af:04:cf:7a:e4:93:a4:be:36:3e:b6:d0:67:cf:11:46:37:7f:
         51:80:73:bc:d7:92:89:85:62:3b:ce:52:74:b0:2a:1e:7e:0b:
         67:21:0d:77:a1:bc:d5:09:73:14:b4:3c:3c:ba:fc:8d:fe:e0:
         19:0f:55:6c:1d:7a:4d:2f:2f:64:4c:f2:3c:e6:4d:2e:97:93:
         7e:4f:3b:1b:50:eb:65:f7:b5:45:61:89:22:e5:38:ea:bc:68:
         b9:1e:91:b8:d5:13:31:a3:84:53:b9:86:0a:5a:a5:db:cf:47:
         a1:29:07:19:8c:aa:53:df:f2:b3:fe:40:0d:7c:d3:35:60:6f:
         58:1d:a5:41:25:03:9b:e7:58:c5:d9:b3:df:bd:2a:62:92:3b:
         2e:0b:9e:b2:93:9e:dd:58:34:4e:2a:6a:83:c3:90:38:2e:99:
         3f:38:be:17:9d:74:7d:b6:e6:21:13:cd:08:bb:59:1c:e6:0e:
         eb:cd:af:e6:a9:aa:f6:3d:d2:e2:7a:5b:00:36:1b:e3:7f:16:
         b2:dd:12:37:be:6f:4b:55:c4:2f:0b:30:a3:9d:eb:31:80:ad:
         79:81:0a:f9:45:25:ad:28:9a:c4:d7:4f:a8:74:1e:ef:a8:91:
         92:d7:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:21:10 2026 by rpki-client