Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa
File:                     eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa (raw, json)
Hash identifier:          mC7Ybm96Ui5aUpMmXV19uPpYwgc7NbO62N7JVHcFPLQ=
Subject key identifier:   A7:9E:A7:8E:3C:47:B0:98:10:72:B4:EF:F3:CF:31:E5:4C:20:6E:5A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AA0FEE744FF5FE618E6100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.24.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:0f:ee:74:4f:f5:fe:61:8e:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=3b83818f-5bea-4548-912e-d333d232754f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:f5:f4:69:3c:b5:d2:e0:e5:0f:d7:4e:e3:
                    f1:12:43:18:29:01:d8:41:4b:a4:f7:fc:77:f0:c9:
                    72:2f:b1:c6:4f:f5:df:df:7e:88:be:65:f4:8f:ca:
                    90:23:77:b5:22:48:db:fd:08:38:a1:6c:af:aa:ce:
                    72:42:b7:76:e5:90:e2:45:7e:fc:13:62:bd:d9:87:
                    e2:f6:b4:4a:65:1d:78:ad:e0:92:ea:a9:b5:46:2b:
                    5e:68:2a:7c:e6:d0:f5:88:b8:c9:9d:84:21:07:6c:
                    a7:33:69:74:9e:ff:d1:94:12:b7:0c:b6:3a:38:57:
                    90:13:10:4a:66:75:af:3d:35:a8:b0:dc:98:78:c1:
                    ca:07:53:3d:13:e0:4f:29:72:4c:11:52:73:bd:c3:
                    c9:cf:0e:c3:24:56:ae:d2:54:8f:3f:24:a7:ff:b0:
                    6e:63:49:ef:e3:e5:ae:19:af:ae:45:2d:b0:d1:dc:
                    e3:75:b3:17:14:8f:02:42:0f:37:f5:e5:bf:de:fe:
                    11:f6:69:e4:ff:3d:ce:37:3c:65:77:58:54:45:95:
                    35:b6:1d:23:71:d8:74:63:bf:e3:67:16:f7:cb:76:
                    9c:05:f1:7e:1d:2f:b1:9a:19:68:e1:b9:e1:9a:6b:
                    78:26:44:b3:ab:a5:40:4b:f5:90:d8:cd:b1:aa:56:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9E:A7:8E:3C:47:B0:98:10:72:B4:EF:F3:CF:31:E5:4C:20:6E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:82:85:5b:49:2a:8e:55:d8:c0:9a:47:87:71:78:15:cc:38:
         c4:12:6f:77:32:3a:ba:f5:81:04:1a:42:db:c0:65:2b:bc:c3:
         9a:5b:e1:35:34:af:33:03:67:d9:96:5a:f9:44:0e:49:2d:dd:
         b3:ae:00:d7:a7:85:e0:6c:b7:2b:b5:a0:e8:4d:7b:35:98:e8:
         24:dd:13:b1:cc:17:22:15:3c:22:4a:86:35:ba:31:29:68:0f:
         7e:f5:2f:3c:31:69:f3:5a:09:8d:67:9f:53:6e:55:32:08:52:
         57:2a:20:1b:af:0c:88:f3:8e:f7:c6:b1:ec:a4:c5:c7:50:3f:
         9a:1d:9d:4d:26:c9:d3:21:2c:ab:2d:4d:6b:16:a6:72:65:e3:
         a7:f9:3d:b8:e1:48:91:d8:9f:07:88:77:29:ac:0c:48:fa:d6:
         e2:75:fd:fb:ed:97:ce:74:15:69:e9:a4:0e:f1:7f:b7:8e:95:
         cb:c4:4e:e7:cf:f3:27:6e:09:f6:4f:70:52:e7:35:40:b9:30:
         f6:0d:97:aa:e5:59:1c:b2:30:50:c7:51:93:35:58:0d:21:03:
         53:96:31:ad:a2:82:0e:16:09:5f:e4:4d:c8:79:cc:1f:96:e7:
         18:e7:ff:ca:af:b1:20:79:bb:77:58:7f:fe:f5:db:0e:11:b6:
         c0:10:79:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:43 2026 by rpki-client