Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa
File:                     e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa (raw, json)
Hash identifier:          f2ySLQXz1LQdVrE5G64rf2a2U/cQ6q8GIyF8oRynVAM=
Subject key identifier:   6F:59:34:13:58:E3:7C:B7:B6:0E:E5:D9:6A:2B:35:66:E1:B1:D3:5B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E11EEFC39B6FFF6EC75B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.20.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:1e:ef:c3:9b:6f:ff:6e:c7:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=3ef0f3e9-e965-4b61-a44f-6052507e08cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:09:4d:01:e1:42:bb:c8:ab:08:d9:a0:48:
                    55:3e:1f:16:1b:a4:ae:ca:91:72:8f:92:7e:28:32:
                    dc:23:3c:1a:e0:c9:b7:84:e8:1c:04:35:99:cf:af:
                    53:36:15:f8:d6:cd:2a:81:4b:4d:c0:2c:9e:ef:2b:
                    2b:e7:46:31:fe:84:d2:38:59:45:90:ad:e3:e8:25:
                    9d:60:d5:57:ec:51:3b:ea:00:ca:40:22:41:25:78:
                    76:f6:e0:05:55:be:2b:51:56:f9:db:85:e6:eb:89:
                    98:e1:4f:ed:e4:4c:69:72:84:f3:d1:79:c9:c8:b7:
                    5c:06:c2:ed:f0:b6:67:7d:b4:59:25:2b:a8:83:ea:
                    7f:32:51:51:0b:11:11:71:51:5b:9b:ca:5c:fe:b3:
                    22:cc:49:7d:cc:5b:dc:9b:5b:27:14:8b:83:69:2e:
                    d6:af:a0:05:7d:fa:1e:51:a8:be:ea:36:14:fe:9a:
                    08:51:c6:e6:1a:fd:f9:12:78:af:2d:0a:2b:69:93:
                    86:e2:30:c1:e1:99:31:6c:21:88:c5:88:b9:04:1e:
                    65:0d:a9:ff:09:84:83:9b:26:c0:aa:1f:9f:73:05:
                    02:2a:1b:52:72:16:d9:47:63:8d:fc:31:eb:70:b4:
                    e2:80:08:56:91:ed:c6:54:7b:9a:a5:63:e9:89:ab:
                    ac:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:59:34:13:58:E3:7C:B7:B6:0E:E5:D9:6A:2B:35:66:E1:B1:D3:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4a:89:6f:e9:bb:a5:c4:a1:b1:cb:de:54:e4:d0:2b:10:43:
         3e:ec:9a:75:10:a1:eb:61:c8:e9:fa:f8:21:77:05:db:df:c9:
         fd:4a:4a:f7:69:7a:21:77:6a:b5:5c:05:32:2d:49:2f:a6:31:
         37:be:ce:3d:fe:b0:15:90:1f:68:1e:7a:3a:4e:5d:49:84:88:
         b6:24:57:94:24:61:d6:60:de:21:c6:26:40:c2:0b:18:f9:13:
         b6:0d:27:2f:17:98:fd:ab:9f:1a:e1:d5:2b:55:00:f8:98:26:
         59:01:f0:a6:d1:da:bf:ca:d9:d5:03:1a:b5:59:7b:bb:31:5c:
         8e:79:bc:d7:46:2e:67:19:26:1f:15:1e:24:01:1a:0b:5c:0c:
         0c:01:05:b9:ff:97:ac:7e:6e:0e:04:0c:aa:72:b2:54:d5:ad:
         75:52:95:77:ae:04:5d:fe:00:e0:d5:cd:4c:bf:ef:4e:17:8c:
         20:37:14:9f:dc:ea:f3:96:58:25:8e:0e:f9:be:aa:21:fd:0e:
         57:25:b1:d7:87:6e:13:3a:7f:b9:38:9c:37:8f:45:af:82:47:
         98:47:37:0e:da:3b:69:52:13:9d:0e:37:71:f9:be:17:63:5f:
         7e:2d:8f:08:bd:31:32:fb:41:26:af:77:c0:6d:f5:4f:69:35:
         58:4f:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:05 2026 by rpki-client