Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffbfdd54-633b-3731-9964-cd59a225d043.roa
File:                     ffbfdd54-633b-3731-9964-cd59a225d043.roa (raw, json)
Hash identifier:          dnEM03Id45og6F0Svb6BtQ99+lsX+4JR7G5s3SCaw3Q=
Subject key identifier:   2A:3B:EC:7B:B0:D1:3E:8E:30:0B:26:45:08:36:A7:5B:13:99:2E:87
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E683F62BE6B9494C491D67000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffbfdd54-633b-3731-9964-cd59a225d043.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        173.23.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:62:be:6b:94:94:c4:91:d6:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=6ee61ba6-1935-4fca-aa53-935772ffadf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:df:7d:f2:00:45:38:df:a5:b3:03:be:49:
                    83:c6:36:6f:28:09:a5:ae:46:41:08:9a:19:64:8e:
                    5d:91:38:1d:af:15:da:63:4e:2c:ec:2b:91:91:4a:
                    f5:17:98:2f:1e:43:f1:d4:d4:71:6f:65:9c:f1:3a:
                    a7:a8:27:43:40:a7:18:33:4b:37:71:77:cb:67:7f:
                    8c:2c:1d:74:56:4f:51:e4:67:35:08:a1:8a:9f:28:
                    f9:6c:d4:d9:0f:bf:5b:5b:42:00:1c:89:2d:84:a4:
                    ac:da:0a:6d:b0:9f:3d:bc:26:18:4c:9f:8e:89:54:
                    d0:8f:13:95:3d:7b:18:95:94:45:d4:db:d1:8c:20:
                    9d:1d:50:23:4f:29:25:b4:26:fd:c7:d9:01:c7:12:
                    8e:73:9a:6c:df:b0:e4:8c:ad:77:66:80:c1:44:52:
                    79:49:59:77:95:0a:9f:6c:e0:20:47:96:67:a7:3a:
                    f2:56:57:b6:66:5d:59:cc:57:a0:06:46:06:a2:a3:
                    81:21:fe:db:c1:63:e1:71:86:8e:c0:11:51:8e:cf:
                    15:33:d1:55:96:b6:b7:75:5b:a8:fd:09:6e:14:88:
                    88:60:ed:a7:4e:2f:d4:2d:f6:df:ae:e4:6d:41:11:
                    d4:a7:ff:ef:67:50:47:22:2c:b1:6e:89:c6:f6:15:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3B:EC:7B:B0:D1:3E:8E:30:0B:26:45:08:36:A7:5B:13:99:2E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffbfdd54-633b-3731-9964-cd59a225d043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:54:8b:e1:d6:8c:9b:1a:a6:65:4c:a1:3f:f7:84:75:4b:37:
         7c:f1:9b:92:b4:58:e2:07:b0:9d:6e:9f:64:09:33:c9:c7:e0:
         ac:46:c5:0b:39:be:b0:36:fd:2a:48:31:64:8b:d1:e9:1a:92:
         79:fd:f0:e5:3e:20:d3:c5:09:0e:82:d7:2d:54:f4:99:0d:42:
         42:93:f6:f6:9e:1d:11:ed:25:69:a1:2f:d0:80:cd:cc:b8:e2:
         8c:3f:74:a2:03:21:6d:ff:89:ab:66:99:ca:07:2d:0a:90:a2:
         c3:e3:d2:ac:be:52:f3:44:f7:36:cb:75:68:d1:a4:51:89:aa:
         5b:75:8e:13:dd:da:f2:e4:32:4f:54:b4:3e:78:7a:5d:fd:98:
         0c:ca:f1:03:24:60:92:9c:c6:05:a2:b5:1c:98:e0:1e:8c:e4:
         0e:66:af:3e:c1:61:77:cb:08:eb:cf:7d:00:92:fe:8e:6d:72:
         f1:49:84:6a:56:b0:4e:4e:81:16:a0:bc:d0:a6:7c:e6:44:a5:
         10:70:52:fc:b6:16:00:f0:51:c0:00:29:6c:b8:eb:e9:bd:9c:
         1c:cd:7b:e6:94:a3:2a:17:08:c7:10:16:6f:04:d1:29:a7:11:
         82:c6:0e:c2:66:c8:b7:b5:22:ad:e7:1b:cf:32:e4:7a:43:0b:
         04:af:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:32 2026 by rpki-client