Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa
File:                     0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa (raw, json)
Hash identifier:          c94C8Xeu81rwpj8diM2Qfgsh58mux42D5mC7/10J/qI=
Subject key identifier:   48:E5:EC:B3:9F:E4:7B:12:A1:97:54:A8:FB:FB:50:C3:AA:FC:5F:3A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D65153CAA437FB8B5EF5A5E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     30036
IP address blocks:        173.19.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:3c:aa:43:7f:b8:b5:ef:5a:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=49cfd147-783b-43e0-93d6-2867f991fbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:5b:b7:65:44:0b:7c:da:bb:b1:62:84:e8:
                    6e:fe:2e:e2:17:b8:83:47:da:0f:32:84:44:19:d9:
                    67:7f:93:ba:1b:51:fe:27:c4:60:af:44:d4:85:4b:
                    dd:1a:f9:74:c5:7b:be:5b:13:27:dc:14:a0:05:7b:
                    19:bc:6e:35:43:8e:63:29:53:12:d0:2e:79:8f:10:
                    66:86:ff:d8:4b:3e:11:5d:39:7e:4f:de:c4:df:38:
                    38:9c:39:89:2d:07:44:8c:44:5d:ae:ff:75:15:88:
                    2f:69:d5:86:83:47:58:ef:6f:0d:ee:b2:47:69:03:
                    ac:1c:19:42:80:f9:7e:52:d8:69:70:4a:1e:81:dd:
                    3d:a0:b4:9d:e5:67:b5:14:3c:95:94:8a:82:55:6b:
                    2e:23:0c:3c:89:48:11:d8:af:19:96:a0:0d:5f:0c:
                    66:35:3a:64:4d:af:e1:98:b2:3b:83:fd:7c:cd:74:
                    fd:77:1d:66:db:8a:ff:f7:62:c5:f6:34:69:eb:ef:
                    f6:c4:ed:9e:17:54:f5:44:6c:4b:1a:8d:b4:82:0b:
                    f4:46:48:3d:db:16:5e:59:ff:b1:34:68:4e:e7:d0:
                    86:0e:8e:84:e2:f7:eb:c5:bc:ab:4d:81:3d:c8:45:
                    ff:fa:dc:04:90:27:ec:18:2e:07:96:76:f6:36:5f:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E5:EC:B3:9F:E4:7B:12:A1:97:54:A8:FB:FB:50:C3:AA:FC:5F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:06:c5:b9:2d:31:16:e0:5c:70:2c:f1:15:dc:8f:d9:a7:e9:
         2b:27:eb:82:f0:47:af:35:6a:f7:ef:ac:bd:91:5c:d1:8d:a1:
         10:8a:47:58:3c:ec:6f:0e:53:ab:ed:bd:3b:56:ce:8f:11:88:
         81:a7:1c:fb:0c:20:bd:03:4a:43:ce:3e:a9:ec:45:b0:2f:84:
         55:99:a4:12:c5:94:dd:df:c7:b7:99:3f:31:69:d4:0b:0f:d8:
         34:ed:f7:47:1d:11:c2:fd:03:83:e7:36:c7:57:a1:cf:88:63:
         24:22:21:db:0f:e0:88:c2:09:97:87:7f:3d:3f:43:32:70:1c:
         ed:e2:f7:24:b6:77:d6:47:3b:4a:53:87:82:ca:8f:9c:4b:49:
         60:e1:f6:fe:f3:14:14:84:58:22:2f:14:00:f3:76:56:8b:30:
         e9:94:c8:78:7a:91:99:0c:73:0f:27:bc:64:bd:1b:4a:04:43:
         02:d0:a4:cc:9d:ac:3f:ca:19:21:c9:41:76:c2:ff:bd:1e:38:
         83:6a:14:38:ab:f8:a4:47:55:72:b5:61:2d:eb:e7:06:f8:c5:
         61:d6:4f:b8:aa:74:4a:32:16:ad:ae:32:d9:69:40:5c:3c:05:
         f0:47:68:76:9f:b4:71:f5:32:03:60:24:82:44:af:89:0d:52:
         a8:9d:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:54 2026 by rpki-client