Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa
File:                     856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa (raw, json)
Hash identifier:          KIq54FeTyyznL9+M/bx0NKbTmQOeqm2n7kbe9IB0SEc=
Subject key identifier:   D2:39:00:5C:27:96:1A:7B:D9:B0:B2:26:C7:0A:2B:6D:53:D9:FA:76
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D00B27264DECABDFBA6984E60
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        173.18.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:72:64:de:ca:bd:fb:a6:98:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=41968027-e515-4ed0-9884-55c4759e7abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:47:a2:15:2c:35:d0:f4:03:4a:44:39:f3:ba:
                    04:a4:95:79:e0:7d:b8:32:30:87:eb:8a:3e:74:25:
                    29:af:c0:a2:af:8b:f0:ae:50:ad:3a:d8:34:2d:3b:
                    b2:29:cd:ad:f2:c1:d1:c8:c2:26:ed:be:f6:91:0f:
                    5a:fd:14:ae:b8:3e:5a:ba:2e:0d:c2:18:8f:b0:78:
                    b2:f5:e6:2f:c4:12:b2:19:a5:42:66:59:e1:cc:3e:
                    db:26:ac:c5:6e:d7:b9:77:73:f0:f1:48:1d:02:ff:
                    63:8e:33:56:d6:19:45:65:88:83:04:68:24:51:e3:
                    4b:94:ea:a8:c0:8a:6c:21:2c:50:2d:e5:16:66:47:
                    1e:8c:f1:15:08:c7:26:17:a4:37:85:94:40:12:a7:
                    5d:9a:4b:c3:9c:07:4f:1b:a9:d7:03:db:34:1b:98:
                    50:b8:aa:15:92:29:60:b6:b5:db:15:93:39:49:ca:
                    8b:6f:95:5b:b7:df:24:a0:f8:7e:b8:19:fd:9d:02:
                    65:39:e5:a9:43:4e:af:04:06:a5:88:61:81:09:16:
                    40:4b:6b:27:93:80:46:be:7e:1e:37:d9:e3:1e:9c:
                    3b:a0:10:bb:25:7f:44:8d:bc:91:72:64:6d:9c:26:
                    41:a7:86:62:c7:83:29:9b:be:e9:fe:99:a2:e9:78:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:00:5C:27:96:1A:7B:D9:B0:B2:26:C7:0A:2B:6D:53:D9:FA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/856a147b-12d6-3b9c-a19a-d032e3c1c84a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:67:75:b2:b5:cd:83:e0:3a:33:1b:bb:e8:84:a0:f2:9b:c6:
         69:7e:a4:a7:8f:f3:d8:3c:a4:7e:2b:ba:bd:ff:5b:8a:69:96:
         ce:76:de:64:01:f0:04:a3:22:29:a4:1a:6e:17:84:83:56:70:
         38:d2:81:d9:ec:5b:2d:24:45:c8:6f:cc:3e:57:52:b7:48:3c:
         14:d8:49:3d:c4:c3:6b:d3:56:41:e2:3f:ae:1f:a1:96:f7:50:
         6f:47:6a:9e:a8:a7:0b:e2:e7:56:ac:8f:84:ed:83:d5:79:de:
         38:04:3c:db:dc:1a:0a:73:f0:6e:cc:81:05:38:45:ea:55:58:
         20:1b:77:62:6e:ff:44:50:a5:e0:d5:e8:27:b9:d0:8b:a9:02:
         fa:23:be:47:2b:83:f4:ee:8c:ab:46:3b:0f:42:72:ba:b3:10:
         82:ab:3d:35:06:7f:a7:de:0c:a3:2b:83:09:b2:7f:de:96:d5:
         bd:13:f9:34:ca:b4:79:ed:be:8b:2f:cd:30:ba:17:35:6c:64:
         da:59:03:f6:d3:84:07:82:50:45:2e:11:4d:6c:0a:02:a9:9e:
         07:13:fa:8d:21:59:cf:2e:c2:99:5d:b8:1f:5a:dc:87:72:e5:
         1f:81:13:7f:27:72:f9:10:f4:99:d4:08:48:04:0a:6d:be:94:
         f4:c1:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:24 2026 by rpki-client