Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/320fdcb1-da17-37d4-a57e-e33ff9106025.roa
File:                     320fdcb1-da17-37d4-a57e-e33ff9106025.roa (raw, json)
Hash identifier:          5yMNBu9RoNzNdDc78qyOl8YXg/mX2p3jOG01HkFenjM=
Subject key identifier:   22:77:B5:E1:0F:04:AF:81:D7:9E:4D:2A:8B:9B:EF:61:78:15:1E:EF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CE57DAF7979936D204A96E100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/320fdcb1-da17-37d4-a57e-e33ff9106025.roa
Signing time:             Tue 17 Feb 2026 20:07:59 +0000
ROA not before:           Tue 17 Feb 2026 20:07:59 +0000
ROA not after:            Mon 18 May 2026 19:07:59 +0000
asID:                     19905
IP address blocks:        173.31.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:7d:af:79:79:93:6d:20:4a:96:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 17 20:07:59 2026 GMT
            Not After : May 18 19:07:59 2026 GMT
        Subject: CN=a2551874-9a81-4d82-8213-09e36108f37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:4c:6d:9f:43:8d:72:d4:ce:af:e8:f0:7e:
                    cf:25:57:42:0f:9f:be:c2:8e:21:42:20:5f:89:40:
                    85:3f:86:21:72:4d:38:33:78:51:b6:27:59:2b:82:
                    3b:6b:3f:76:7a:dc:71:28:93:62:2f:29:63:2a:48:
                    ed:ae:2c:66:cf:80:bc:f6:49:96:d5:f8:4a:b3:07:
                    b9:15:e5:eb:49:e8:44:8c:f2:74:43:fb:1a:88:55:
                    59:7f:5d:05:14:04:26:29:da:c6:34:00:b9:63:f5:
                    7c:a1:db:90:51:dc:f3:b4:05:e1:8c:97:14:97:1d:
                    ae:0f:0a:01:e9:47:51:15:eb:bf:00:0d:6c:a9:ed:
                    3d:69:2a:16:e1:17:dd:81:51:31:c0:4c:e7:56:fd:
                    f2:ab:80:2c:68:1d:11:50:eb:5b:cc:10:13:28:2b:
                    88:dd:31:3e:61:8a:3a:24:71:fe:0d:ae:98:12:a5:
                    eb:a6:11:8d:51:79:7b:1a:bf:bd:32:72:fd:06:cf:
                    8e:27:c0:55:3c:ae:38:66:98:c3:9c:8a:35:f9:32:
                    78:32:37:d2:53:99:ac:61:4f:cb:9c:ad:0d:4f:d7:
                    52:6e:9c:ec:e4:e4:19:69:0e:78:02:79:9b:21:ea:
                    62:a3:cf:2b:d4:cb:91:6c:8f:43:f8:f0:90:85:0c:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:77:B5:E1:0F:04:AF:81:D7:9E:4D:2A:8B:9B:EF:61:78:15:1E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/320fdcb1-da17-37d4-a57e-e33ff9106025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:c2:85:24:c6:87:9b:8c:3d:cc:0d:da:79:4b:56:37:40:
         9f:e1:0e:d4:10:2b:bc:5c:48:c0:af:42:5b:33:22:26:ef:1a:
         22:e7:f9:1e:95:4e:b8:4d:01:48:d8:72:31:94:ac:8a:40:85:
         0b:f3:58:f1:2f:95:96:c5:9f:e4:f9:e2:b0:1d:1f:ff:44:17:
         04:b3:8f:22:c7:58:15:99:d4:2b:f8:a2:6c:25:97:10:1d:de:
         b4:90:02:cd:79:ba:ad:57:a7:2a:8f:15:a0:b8:42:d8:a7:2d:
         26:70:43:bd:8d:c2:7e:21:2b:d8:54:ce:10:39:81:a3:3d:fe:
         f8:84:d1:b8:62:a9:90:65:35:37:19:28:40:8a:37:6e:23:1d:
         51:71:a1:04:f4:55:c6:ec:76:9e:a5:e9:da:42:cb:94:e2:89:
         11:45:7b:c4:be:51:21:9c:35:f8:f4:2b:79:36:61:c2:47:9b:
         d8:1c:c5:47:b7:ec:bd:7b:42:94:72:35:58:dd:92:dc:7c:9b:
         68:1f:f7:75:17:34:ad:43:be:61:25:31:0a:98:a8:8c:73:12:
         e6:b3:d4:ff:a6:18:86:68:e8:3e:64:0c:97:16:39:d2:08:81:
         d9:8a:cf:4a:7d:21:43:ba:ab:93:89:82:7a:31:75:dc:5d:00:
         28:b8:3f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:32:51 2026 by rpki-client