Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6286cb72-4880-3751-9388-c6c132f6034b.roa
File:                     6286cb72-4880-3751-9388-c6c132f6034b.roa (raw, json)
Hash identifier:          8OCY0bcUfU153TiENybS+cibDd3wHOI3ALnUCR/6hkc=
Subject key identifier:   09:86:D0:82:F2:E4:7E:6B:E9:C6:98:20:84:83:0B:7C:CC:AC:9B:FC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CE57E49C62D49CA99650CBB40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6286cb72-4880-3751-9388-c6c132f6034b.roa
Signing time:             Tue 17 Feb 2026 20:09:12 +0000
ROA not before:           Tue 17 Feb 2026 20:09:12 +0000
ROA not after:            Mon 18 May 2026 19:09:12 +0000
asID:                     19905
IP address blocks:        173.31.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:7e:49:c6:2d:49:ca:99:65:0c:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 17 20:09:12 2026 GMT
            Not After : May 18 19:09:12 2026 GMT
        Subject: CN=dbcb19b0-33da-444b-ae31-8dcfe1c603fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:ff:87:46:e3:2c:09:ce:07:7a:92:89:34:
                    d7:93:8c:2f:27:92:06:55:d2:4d:ae:aa:19:5a:09:
                    66:de:f0:95:45:a7:80:b4:19:e2:73:a3:b5:01:ac:
                    18:05:54:6d:28:ba:52:c6:01:d1:47:26:aa:80:2f:
                    e3:7e:68:6d:02:c4:11:0f:b9:94:ec:46:53:04:86:
                    26:21:d1:c7:fe:7e:09:c8:94:3d:4f:9a:dc:01:12:
                    84:35:9d:2c:5e:4e:09:b7:7f:00:00:a8:4a:68:e7:
                    2a:6e:a7:41:12:55:7c:6f:89:bc:2a:e2:f4:90:f8:
                    08:04:6e:05:46:f3:87:96:18:fe:03:86:07:6a:39:
                    69:12:ab:3a:6f:7b:5b:50:63:13:87:e2:6c:47:70:
                    bc:06:90:f8:7a:74:dc:1a:19:47:83:bd:13:0e:e5:
                    fb:e0:d5:5a:d8:9d:ac:85:0d:96:f4:37:5a:da:a6:
                    f5:fb:c0:1e:cd:1e:e9:be:48:e3:0c:5e:e4:5f:a8:
                    0a:cc:9c:61:bd:ae:4d:b9:37:c8:9b:38:05:70:6d:
                    91:7c:f0:41:cb:26:1c:9a:26:20:e3:ff:a4:b4:d6:
                    bb:53:74:64:8f:15:05:07:98:1e:4c:48:20:07:2f:
                    81:ba:12:83:de:ec:37:d0:99:61:75:58:74:c7:6c:
                    dd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:86:D0:82:F2:E4:7E:6B:E9:C6:98:20:84:83:0B:7C:CC:AC:9B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6286cb72-4880-3751-9388-c6c132f6034b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f9:be:66:40:de:b0:ea:88:cc:ee:3a:92:d9:e9:b4:66:0d:
         10:42:96:59:c4:a0:73:0f:37:69:1b:18:28:e6:6e:f3:d3:01:
         f3:82:57:0c:c2:c8:88:fd:18:51:12:c7:96:67:6c:97:99:40:
         6c:c8:cd:b6:9d:39:77:0d:17:5f:91:99:03:bc:a6:3e:84:f4:
         a5:c8:73:16:0a:c9:76:37:41:55:ce:2a:ec:2c:9f:ff:38:82:
         ff:b3:1f:bf:b5:01:31:24:28:99:1b:02:70:a6:7f:05:18:8b:
         21:89:77:fd:d4:3f:54:b2:32:b7:9b:45:a7:b7:51:44:79:c8:
         85:b5:c7:27:c1:a8:10:38:db:af:82:8c:42:ce:37:69:66:c8:
         6c:a0:dd:ee:b1:20:72:d7:33:30:9c:f0:8d:bc:15:88:53:c0:
         98:ae:be:5b:5e:c7:0a:80:e2:db:af:00:01:1c:71:3a:9b:7f:
         d5:00:cb:31:2e:b9:ff:c6:1f:27:12:bc:31:7b:7b:3a:ed:68:
         d6:37:64:9c:68:4b:3a:24:66:37:24:62:cf:bb:6a:fe:de:70:
         c7:cc:b1:e8:db:59:d9:b4:c0:e2:2a:72:10:76:d2:45:1d:db:
         53:62:b7:84:4c:00:14:61:d9:7c:d8:61:0b:c1:b3:e2:78:b5:
         4a:a4:7a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:55:21 2026 by rpki-client