Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/332a901a-1c51-3720-ac9c-6d1ab4b5deb0.roa
File:                     332a901a-1c51-3720-ac9c-6d1ab4b5deb0.roa (raw, json)
Hash identifier:          iuli7kZr8bCzECkqzr4+PHl6+ziooWqF8Xh2y1kXi28=
Subject key identifier:   DC:7A:59:B0:74:02:6D:73:42:FC:3A:D2:65:D8:9A:8D:C4:69:4E:88
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CE57D978E6974CE70E88C8080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/332a901a-1c51-3720-ac9c-6d1ab4b5deb0.roa
Signing time:             Tue 17 Feb 2026 20:07:48 +0000
ROA not before:           Tue 17 Feb 2026 20:07:48 +0000
ROA not after:            Mon 18 May 2026 19:07:48 +0000
asID:                     19905
IP address blocks:        173.20.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:7d:97:8e:69:74:ce:70:e8:8c:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 17 20:07:48 2026 GMT
            Not After : May 18 19:07:48 2026 GMT
        Subject: CN=6f5623bc-0db2-4c93-9daf-f4bdcc6a42a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:9a:40:2f:f2:7c:0b:04:23:e5:85:8e:61:
                    bd:15:2b:d5:20:e4:cd:d8:2c:e3:79:17:67:5f:2e:
                    ec:05:b4:5b:59:de:be:23:68:b2:47:e6:7f:93:fc:
                    fd:46:63:be:3c:ce:47:66:bc:82:60:fc:78:be:7c:
                    db:ae:34:b3:37:ae:00:c4:3e:f2:99:68:b5:78:ce:
                    8b:38:5b:76:09:5c:d8:1a:22:86:74:67:8f:94:fe:
                    c3:47:44:2e:bb:22:85:25:6d:4e:34:bc:2f:52:c7:
                    8c:3f:c1:8f:dd:5c:8f:54:47:c4:99:6a:ca:55:12:
                    d6:d1:bd:fa:36:a3:0b:e8:8b:bd:99:c1:d3:26:8b:
                    12:2b:77:45:ca:c6:cf:3b:af:35:16:25:29:f9:9d:
                    7a:83:6c:b7:99:ef:86:e2:38:e6:0c:d6:35:3b:c3:
                    b6:ea:95:d4:49:9b:23:35:d5:40:90:83:b6:8d:92:
                    0e:f1:27:4c:a5:da:a6:47:ff:e5:79:8c:7d:95:88:
                    b3:41:28:5c:e7:b1:c7:58:a8:78:68:c1:a6:17:52:
                    43:3a:83:66:c1:04:ce:a3:19:a1:fa:46:c1:f8:f3:
                    91:d2:ed:5b:7f:ba:5a:44:20:c3:ad:ea:20:0a:a5:
                    19:32:c1:a2:77:e5:8c:9b:f4:2a:19:12:1a:b7:3f:
                    5f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7A:59:B0:74:02:6D:73:42:FC:3A:D2:65:D8:9A:8D:C4:69:4E:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/332a901a-1c51-3720-ac9c-6d1ab4b5deb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a1:5b:1c:5e:0b:5e:bc:b4:ec:4b:d0:e2:ab:c2:2d:c9:fa:
         16:bb:6b:df:dc:60:76:65:3e:47:41:46:81:f5:43:c1:ca:73:
         f1:26:ff:79:51:cd:5c:54:f2:a2:88:6d:b4:59:d3:2d:1a:18:
         7d:be:41:ac:2e:f0:2e:a2:5f:55:2c:45:3d:bf:e9:37:e5:6e:
         71:86:2c:66:44:79:2e:f9:71:b1:91:52:fb:fa:f0:4d:05:e6:
         d6:f8:df:8a:0f:fd:9a:d7:5c:c3:93:63:40:0d:53:83:95:16:
         2d:4e:eb:1e:54:3f:b8:1f:14:53:dd:1a:a3:1e:23:49:9e:9a:
         b1:ff:e7:50:af:2f:83:24:74:10:ec:a2:bd:ae:89:31:3d:ab:
         7d:53:91:22:ba:d3:d6:be:7d:82:f9:56:de:8d:b5:f8:fb:68:
         8b:e8:8d:b4:0d:79:f9:a4:9e:8b:72:63:a5:19:37:76:89:14:
         2c:e4:23:c8:ba:9b:ec:50:90:41:3c:5c:80:6f:9e:0e:70:af:
         81:37:01:f1:e8:bc:21:e8:5f:84:45:07:8d:66:e1:f3:c5:b0:
         43:b4:37:31:e5:9b:d0:23:43:01:0d:87:fd:ff:c3:3e:46:fe:
         94:53:73:1b:12:f4:df:42:0a:ed:06:c5:1c:64:6e:aa:9b:b8:
         1b:e4:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:07:58 2026 by rpki-client