Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa
File:                     58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa (raw, json)
Hash identifier:          NMbxLwoKLEvXZG0T68+Qg88wzClH5d/uvSR68aPXo9A=
Subject key identifier:   EF:C9:B1:56:AE:2B:79:A0:46:25:E3:47:A5:39:0E:74:A3:F7:75:F6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E1A143F3BBB8970BA0B85B700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     19905
IP address blocks:        173.23.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:3f:3b:bb:89:70:ba:0b:85:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=9fdc4a99-996c-4df6-944c-e2652f57bfd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:5d:ed:2b:0c:ec:10:71:99:94:3b:b1:5e:
                    03:85:dc:2b:eb:55:57:21:8b:0a:75:14:c9:b7:3e:
                    13:84:83:9e:15:05:c8:c9:f5:ba:da:5e:35:54:ec:
                    5c:10:6c:6f:db:a2:65:64:a3:2e:d2:d5:eb:37:29:
                    11:12:e0:b7:28:48:4a:40:d6:bc:9c:b5:9e:43:83:
                    74:63:6c:fe:a5:91:9e:70:58:1d:76:d4:8b:f1:56:
                    d7:d7:8e:06:87:03:bc:2d:e4:8d:62:47:41:11:f6:
                    5e:b2:95:98:b4:47:4b:61:90:29:e1:51:19:c1:ed:
                    9d:94:ce:fe:74:58:2d:87:f3:24:fe:1a:ce:69:3c:
                    a9:ac:e7:d4:49:26:43:7c:92:e0:34:c5:cf:9b:07:
                    b3:e4:5d:34:ae:ee:d2:81:7f:c1:c0:32:79:7c:0d:
                    72:63:2f:f1:99:1c:3b:4a:58:ad:26:3a:dc:cc:5b:
                    05:fe:eb:e4:76:90:84:3c:e7:c8:ae:70:73:ee:c5:
                    2b:47:ed:ab:10:84:f1:ed:39:2f:62:36:57:97:9e:
                    72:12:44:28:ac:d1:00:26:34:c5:51:d7:c5:e8:a4:
                    c6:ba:17:02:64:f1:90:b4:08:89:16:7b:9d:3f:b6:
                    c6:cf:47:d2:da:96:ee:a7:6e:78:ae:a3:3d:ef:cf:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C9:B1:56:AE:2B:79:A0:46:25:E3:47:A5:39:0E:74:A3:F7:75:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:bc:97:14:ec:0e:8e:4c:11:67:00:b7:64:86:61:a7:0a:65:
         1c:72:77:60:7b:e2:6b:d4:39:67:12:33:05:92:dd:a2:81:13:
         58:ca:6f:74:3f:c6:4c:8c:0b:bd:d2:d7:7f:fe:76:dc:e6:96:
         bd:24:a3:ad:52:b6:69:09:ed:45:b8:40:dd:22:f6:e1:48:ed:
         d6:f0:f9:12:51:46:6a:e5:a0:71:bc:df:42:2d:eb:fb:38:d5:
         d4:d4:36:c6:48:59:87:55:87:e2:9d:3b:57:e7:3a:8f:39:4f:
         d9:3f:39:97:8a:3b:ca:f5:16:6d:db:6d:7e:5d:17:9b:56:0a:
         a4:0d:da:13:7f:23:7e:57:47:28:f9:73:36:29:8a:4d:5b:f3:
         6c:48:1f:4b:43:72:78:cd:ba:f0:8e:c6:33:77:b0:b6:83:0d:
         7e:75:ed:91:d0:e2:5a:fa:e1:54:a3:53:ae:5d:23:ff:13:3c:
         72:da:9a:f1:24:b4:c1:18:db:b9:70:fb:3d:7b:c3:99:08:a2:
         db:0e:60:43:70:2f:d8:5a:65:e2:9d:0e:8b:54:1a:48:c9:e1:
         77:50:50:99:55:e3:b0:1b:f6:95:b6:4a:03:de:51:c5:fb:50:
         19:2c:c5:21:ae:73:e0:e7:2a:52:31:6b:64:b3:8e:4d:98:49:
         23:10:79:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:07:42 2026 by rpki-client