Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57d6d4fc-925d-3d07-9f49-a4081e212883.roa
File:                     57d6d4fc-925d-3d07-9f49-a4081e212883.roa (raw, json)
Hash identifier:          9LrQ1F1iLp1YkfPxfvuZ04OVGWCTCM7grvYqSLXApGI=
Subject key identifier:   40:BC:CC:BC:16:D2:87:DD:BC:27:08:3D:42:E9:EA:C5:83:E9:37:6E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B3EB0716C5740DC87F280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57d6d4fc-925d-3d07-9f49-a4081e212883.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.19.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:3e:b0:71:6c:57:40:dc:87:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=53826911-87bf-4ebb-89f9-9b6bc2ed9c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:3b:17:9d:11:bc:be:b3:4b:8b:ea:48:15:
                    b4:74:3f:91:7e:68:c7:a3:9a:bd:b7:6a:b7:6b:41:
                    d2:c6:b2:9d:e6:b1:38:4d:46:34:25:82:44:d7:4b:
                    43:00:60:2f:5b:71:2f:5d:1c:29:36:db:92:88:82:
                    4d:75:f0:db:03:d8:b2:c1:81:26:fc:ed:98:83:ae:
                    75:32:ba:c0:94:c1:97:3d:db:07:7a:30:38:04:29:
                    06:4c:3d:c9:13:ed:9d:71:66:1a:e6:ca:ce:26:f3:
                    7a:9f:0b:db:36:58:fd:78:5a:9a:cd:45:34:d8:c9:
                    51:4a:ac:40:42:63:0e:b8:70:f6:60:b9:bd:b5:71:
                    5a:a5:d2:08:69:b0:f0:59:40:2a:8e:32:60:b5:e9:
                    ce:f5:35:14:c2:40:d5:20:39:b3:eb:c8:9f:37:1b:
                    10:ee:ec:20:ac:95:c7:73:f5:bc:3e:63:04:c0:6e:
                    91:cd:b2:c8:22:37:10:5a:3d:9b:7b:d7:49:5f:72:
                    23:b4:57:bb:ae:d6:2b:b2:d5:2d:82:64:4b:ee:a8:
                    f2:cb:4c:9c:88:2c:5b:20:2d:29:77:62:71:f7:4e:
                    cf:f2:f2:e5:00:8c:dd:ca:59:7c:47:38:2f:de:09:
                    58:1e:e1:0d:d3:83:7f:fd:6e:ac:59:9c:6c:79:2f:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BC:CC:BC:16:D2:87:DD:BC:27:08:3D:42:E9:EA:C5:83:E9:37:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57d6d4fc-925d-3d07-9f49-a4081e212883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:39:24:a0:91:c3:14:2b:7f:ad:ec:78:c1:7f:0c:9a:3f:89:
         11:44:d9:a0:d1:04:a1:0b:96:7e:7c:9d:68:3b:71:99:94:94:
         2f:fb:81:6a:5a:23:1f:a1:b5:47:12:1a:b6:8b:ec:4c:30:ef:
         04:56:c3:cc:6c:bc:bc:97:bb:81:d5:c7:e6:83:09:d9:77:82:
         1e:21:90:5d:b1:a8:6c:c4:a4:43:be:6c:1a:58:a2:23:88:84:
         bc:a2:66:30:ff:65:b4:f4:53:d5:1b:08:a8:a0:0a:aa:73:9f:
         91:0e:4f:66:90:d6:e9:24:e0:ff:d8:a3:a3:04:64:11:a5:45:
         c3:7e:22:c3:61:ab:79:af:29:04:5e:c9:85:bb:ec:e4:51:01:
         3c:f2:c7:65:16:8b:cb:de:44:12:86:40:b1:bc:82:c6:5a:33:
         da:27:94:e2:23:cb:e2:21:7e:c7:8a:2a:e4:c5:fa:c4:bf:e6:
         21:02:e8:c5:2d:57:71:05:67:8d:56:c5:28:47:b8:98:c0:e4:
         3c:d3:f7:4e:97:cd:cf:89:d4:29:86:15:e1:a3:6c:9a:ea:d1:
         0e:7a:38:aa:24:ac:e3:7c:08:2e:e6:bf:e7:0f:fb:90:43:e0:
         06:d4:cc:8e:d6:e0:ef:c5:21:53:f4:8d:31:00:85:c2:e8:11:
         c4:97:c5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:14:20 2026 by rpki-client