Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa
File:                     d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa (raw, json)
Hash identifier:          tdCJZ6YSauGxsl8GMHmO5iqL69UgrWb1vZ5L2O2W2I0=
Subject key identifier:   E1:0C:23:EE:D9:65:4E:E1:C7:29:8D:5B:A4:7C:D6:30:5F:8B:4F:CC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AA1E75CD0E924D33B42220
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.20.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:1e:75:cd:0e:92:4d:33:b4:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=09a90fb0-74d9-40d2-a8cb-d80dfc080438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:39:6f:fe:5a:f5:e8:d8:c8:b1:63:05:01:
                    36:e6:ca:15:a6:67:01:ec:44:d2:53:99:dc:be:c8:
                    04:e7:03:cd:ca:f9:b9:5f:81:59:56:d9:c8:c3:83:
                    3a:ca:3c:e8:c0:95:da:2b:07:f9:8c:71:93:4b:10:
                    ed:18:9d:40:ae:a5:89:db:1d:52:46:45:02:b5:4a:
                    89:d3:6b:a7:ac:09:04:51:c0:76:17:35:e2:3e:8c:
                    8f:03:09:7d:49:7f:50:32:dc:69:40:d0:c7:83:d5:
                    b4:a7:de:b1:ce:14:d1:ec:95:49:da:2e:a9:5d:16:
                    3e:48:f8:12:64:d1:86:a1:ba:6a:0e:19:f3:ac:28:
                    2a:38:bc:f2:82:db:01:7d:6d:f8:62:fe:47:bd:d1:
                    fd:3a:80:5c:e2:2a:7b:c9:5a:e9:1a:51:a8:ec:76:
                    d1:7d:5a:92:80:b8:db:bd:75:31:17:24:b2:d7:79:
                    a6:01:f2:84:e9:a4:55:0b:2b:1c:7b:fe:11:19:58:
                    08:cc:a5:08:99:9e:75:d6:79:1b:51:b9:3b:a1:54:
                    7b:d2:3e:23:d2:46:87:d5:2f:8d:ec:ea:aa:f8:32:
                    a0:29:7e:f6:6c:0f:94:33:6d:82:30:a8:2e:dc:7f:
                    cf:21:f0:18:14:39:88:0c:8d:60:9e:f8:d2:31:a7:
                    a2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0C:23:EE:D9:65:4E:E1:C7:29:8D:5B:A4:7C:D6:30:5F:8B:4F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:ec:49:e2:35:46:06:6a:35:ca:5c:2b:12:a2:6a:73:9c:2c:
         5c:9f:59:35:d3:99:bb:15:14:5a:27:65:d2:ab:25:f5:25:94:
         a0:9d:90:9c:4c:9a:d1:55:2d:4b:90:d9:ce:85:a6:9b:36:3a:
         35:88:ff:ea:19:56:16:90:19:34:67:2f:7e:12:dc:8b:87:61:
         e5:bb:06:b4:25:9a:d2:87:68:6a:ce:41:f4:fd:b7:1b:7c:9b:
         e6:f9:4c:eb:e6:5e:f3:22:bd:ba:d6:1e:79:66:d1:f2:5e:86:
         bd:b7:ff:91:d1:03:c3:c6:f9:97:40:ce:47:a2:72:d6:02:18:
         9d:3e:ba:aa:8d:dc:ed:a3:27:4b:82:ec:20:50:2d:46:38:b8:
         a3:a4:e6:ba:eb:4d:b5:b0:c8:9f:47:af:de:8c:6e:6c:73:ec:
         e3:89:d1:3d:5f:f8:e2:8a:31:ca:3b:6c:39:f0:fd:ca:7f:85:
         b6:0c:b8:c3:ee:ab:2d:e2:ae:2a:81:8a:6f:be:59:57:7f:21:
         26:95:9a:35:0c:f4:e9:18:8e:b6:88:95:ea:fc:35:4d:66:4d:
         a6:d8:8f:0e:a0:f4:47:57:e8:78:4c:bf:7f:7b:3f:15:45:a2:
         07:c9:a7:cc:a2:c5:8e:0d:a4:2d:78:4a:c5:46:3e:d0:a4:c4:
         1d:1e:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:54 2026 by rpki-client