Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dede6975-c3e1-39f9-b79f-96975a8ffd03.roa
File:                     dede6975-c3e1-39f9-b79f-96975a8ffd03.roa (raw, json)
Hash identifier:          CJj7XNIZMne9mDiaKew9u0dkOlLsy+YaUmGq98fOrXg=
Subject key identifier:   DA:DD:93:60:41:A3:D7:2C:38:62:B2:D8:C1:0A:44:8B:6D:FD:A7:93
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AA26ADBC4509965FD55400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dede6975-c3e1-39f9-b79f-96975a8ffd03.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.25.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:26:ad:bc:45:09:96:5f:d5:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=fe9987c0-2afa-447c-b0fc-b26de4395ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:74:3f:da:ca:db:a1:f9:c0:11:bc:5d:45:
                    4c:d1:70:3d:7b:1c:a7:d3:6b:b6:0f:f0:18:0c:9c:
                    66:3c:65:11:1b:64:60:6f:39:eb:f8:ab:be:98:60:
                    25:38:2d:c1:37:fb:19:4b:04:64:ba:b2:d0:df:2d:
                    3b:0c:b0:d2:5c:f8:ab:b2:0f:81:b8:1e:de:b0:42:
                    5b:3e:84:a1:c6:11:d3:a9:56:85:e5:93:c1:ee:a7:
                    3d:0a:9c:07:18:8c:01:e4:78:29:af:5a:30:73:0a:
                    ea:27:c5:78:a5:dd:fc:62:d3:cf:9d:ae:20:5e:fb:
                    d9:e7:e9:b3:96:9b:e5:39:07:00:2d:11:3d:96:66:
                    48:52:8c:d1:c3:a6:dc:11:82:e2:d3:4c:ef:ef:44:
                    cb:bd:a4:40:26:32:51:c3:48:63:f5:c7:ad:0e:59:
                    b9:69:4e:4d:c3:4a:dd:45:78:45:1e:10:5c:14:e2:
                    56:27:0b:4c:7e:a0:fc:a6:30:72:08:13:cf:b8:62:
                    ca:3f:8c:bb:6a:89:e1:66:a1:32:c9:78:af:a0:77:
                    af:e7:f9:2c:b4:15:58:0d:1c:21:98:8f:77:1b:69:
                    35:7a:4c:c6:98:90:e6:a4:b1:3c:58:13:f7:66:db:
                    55:1c:80:73:6d:55:7d:62:49:a7:3e:be:d5:4e:da:
                    f9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DD:93:60:41:A3:D7:2C:38:62:B2:D8:C1:0A:44:8B:6D:FD:A7:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dede6975-c3e1-39f9-b79f-96975a8ffd03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ba:29:22:f8:66:98:ff:7a:ce:b8:c9:ac:29:84:f1:5d:0a:
         92:85:1b:c9:71:16:40:a7:77:da:7a:d7:ff:52:6c:3b:2e:f3:
         24:b1:81:a8:d2:04:c8:d8:c4:d3:68:83:57:a0:5e:be:7c:5e:
         af:80:8a:00:e2:b0:75:02:3a:93:3d:f5:11:9b:85:c0:9c:47:
         e7:7f:bf:1b:15:7b:02:31:08:a6:3c:e4:f6:de:47:2e:33:9b:
         ea:d3:9a:e7:fb:53:50:a4:55:cd:65:64:6e:d6:38:82:2c:ea:
         c9:c0:0c:37:dd:e7:39:a2:11:43:7a:17:0c:08:ba:7c:de:90:
         e7:ca:84:10:48:f0:71:84:d4:e3:81:6f:7f:62:95:8a:1e:a1:
         db:d7:1f:a7:f5:45:1e:cf:c6:64:54:d2:45:48:a7:c8:14:80:
         f1:9d:8b:39:89:08:2c:82:af:b7:97:70:d1:42:e9:e4:c3:d4:
         0c:41:57:98:0b:d2:46:d1:c4:6d:f6:7d:cf:16:e0:2d:bc:0b:
         eb:0b:a6:7c:1d:71:a6:3b:a0:0d:a8:20:e6:2a:a9:9c:b3:37:
         d2:26:c5:b0:2e:94:98:4d:d2:c9:6e:9c:cd:fe:88:04:18:1e:
         6c:12:a9:d7:73:9e:44:ce:72:4b:f4:13:a2:46:36:13:8f:0f:
         69:96:1b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:51:13 2026 by rpki-client