Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94b76c04-841e-3278-b45c-572290b4c7b8.roa
File:                     94b76c04-841e-3278-b45c-572290b4c7b8.roa (raw, json)
Hash identifier:          ENd3jF+FFPry8h8nC3L2yxV9+vgmEXjzMiA9CAoEPzw=
Subject key identifier:   8C:73:74:6E:75:10:8A:B0:66:1C:50:25:02:08:8F:D4:C5:D4:AD:CD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D0647B837D13AA6445CB2CB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94b76c04-841e-3278-b45c-572290b4c7b8.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     19905
IP address blocks:        173.28.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:b8:37:d1:3a:a6:44:5c:b2:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=30cc85aa-5176-4fdc-ab2f-a2ad99b3958e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:44:44:97:85:42:a5:92:c9:9e:a6:0d:5e:
                    e0:7d:42:77:ce:d6:20:00:fa:c6:ff:27:c9:66:2b:
                    90:b7:56:4e:5b:3d:e6:35:31:88:9e:53:2f:c3:de:
                    16:fa:22:90:78:46:8e:07:88:de:b5:c1:90:03:18:
                    d9:a3:69:41:3d:3c:cc:3f:08:cf:10:b9:0d:b9:3e:
                    8e:6e:49:a0:58:15:8f:d5:b3:c2:d5:f4:84:87:40:
                    f9:dd:3e:5b:61:ec:e3:ff:2d:b8:e6:7a:71:41:55:
                    d9:df:47:4d:c8:88:a4:fc:25:fd:b0:90:2b:db:8e:
                    7a:ee:f3:92:c9:b5:bc:f4:78:d7:4d:92:00:20:62:
                    ba:02:68:ad:e1:63:8a:8f:9e:d6:df:a0:fc:0e:57:
                    29:23:c0:ab:3a:17:fe:7c:00:37:50:f2:94:49:ba:
                    0e:cd:9f:f7:91:57:ed:85:79:5b:d4:b0:75:83:1f:
                    03:ea:68:91:1a:39:d2:ce:8a:45:21:78:a8:43:2a:
                    55:f8:f3:8d:61:57:c3:7c:cc:c3:17:ef:01:32:06:
                    d6:87:7c:c5:a1:f1:ad:5d:39:db:28:10:4b:bb:05:
                    e9:80:a6:b7:16:b5:4c:53:91:96:4f:27:f9:1d:4a:
                    44:ac:49:b7:17:49:5d:e0:b3:e1:f1:ad:20:81:09:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:73:74:6E:75:10:8A:B0:66:1C:50:25:02:08:8F:D4:C5:D4:AD:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94b76c04-841e-3278-b45c-572290b4c7b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f2:4d:61:35:4a:14:ff:d5:47:80:7b:b8:95:f6:c0:63:56:
         cf:c5:ce:25:0c:aa:f1:8e:e3:fb:53:5c:c7:a0:10:93:74:07:
         b8:85:86:b8:4d:44:66:ec:e7:cd:c9:b3:5c:7e:32:84:c6:69:
         c2:d6:25:1c:07:57:49:21:d9:1a:58:7e:1c:a7:29:8b:07:06:
         28:d8:ef:b0:75:11:da:97:fa:ad:68:b6:86:fe:9d:64:e1:e9:
         f8:68:59:aa:0e:18:8c:99:81:d4:9e:86:3d:80:54:3d:4d:70:
         93:51:45:de:5e:06:a7:d8:8b:7e:86:6e:99:6b:81:48:ee:8d:
         9c:70:c1:39:72:83:e8:16:33:db:ee:9d:32:8c:cf:38:ba:73:
         ac:ae:63:83:3c:c0:8f:55:10:8c:46:de:8d:9a:53:92:24:27:
         77:95:63:87:95:e1:0f:93:ca:2f:a8:00:f5:51:ed:5a:ba:c1:
         6c:aa:3a:b5:6f:69:07:8e:33:be:ca:00:ee:f1:a9:d0:c8:76:
         f9:e1:b5:9a:b0:09:37:d5:ab:3c:8d:31:5e:a7:81:ef:33:7e:
         23:0c:e7:b7:10:f8:ce:3c:cf:fc:7b:c8:94:df:ca:fe:31:39:
         2b:72:96:97:91:d9:93:88:dd:65:7c:ef:ea:fd:0a:f8:ba:7c:
         70:6e:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:44 2026 by rpki-client