Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d2f1c98-8b81-3a00-969c-595615b80cfd.roa
File:                     9d2f1c98-8b81-3a00-969c-595615b80cfd.roa (raw, json)
Hash identifier:          BFjpPNwPEekxoFXcje3L1tBjz3m/NpbQ+vPW6S7Szgk=
Subject key identifier:   59:51:81:9A:5A:0A:97:C0:08:6F:54:7D:05:4F:36:E8:96:5C:C1:E5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D0647B8B61A467965C1DCB000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d2f1c98-8b81-3a00-969c-595615b80cfd.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     19905
IP address blocks:        173.27.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:b8:b6:1a:46:79:65:c1:dc:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=aca3c772-ae54-45fe-90aa-dc3031c40bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:0b:6e:6b:ad:f0:68:cd:d6:99:e5:36:bc:
                    75:f6:6c:9a:c1:4a:97:8e:11:83:e0:17:c9:8f:a7:
                    77:e2:38:1d:c3:0c:30:ad:df:8f:62:12:a4:00:80:
                    0e:e0:72:bf:ac:f5:a1:d0:a8:72:26:3d:fd:ba:bc:
                    7d:20:6f:17:34:43:e2:c0:d3:c6:10:10:cc:98:f3:
                    2e:f5:43:7a:ea:db:51:5b:db:3c:72:9c:4e:7d:0f:
                    0d:85:4b:41:da:bb:d6:03:30:2c:2c:0f:43:51:2a:
                    eb:d2:d7:45:41:b4:9f:ee:8c:ea:70:4f:26:96:69:
                    8d:df:97:57:53:bf:3f:a8:97:81:8c:11:f5:ff:e8:
                    a7:d8:05:f4:cb:19:3b:f0:0b:1f:e2:4a:99:bc:c9:
                    07:d0:ee:f6:ba:ce:69:3c:47:c2:42:0a:96:9b:46:
                    e1:c8:93:04:ae:bb:fa:88:26:4b:d3:ac:5f:a8:42:
                    14:18:b4:ed:3b:99:71:06:d7:9a:22:32:89:0e:50:
                    2e:2c:cc:4e:c2:70:19:46:9a:67:be:91:d6:23:33:
                    02:9a:ca:e7:19:97:7d:5b:ce:ce:8b:0e:d6:ec:54:
                    95:5f:1a:88:cf:f8:67:65:4a:8e:9d:54:45:32:9a:
                    46:09:ac:fb:23:bf:01:17:d1:f8:4a:24:f1:01:c2:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:51:81:9A:5A:0A:97:C0:08:6F:54:7D:05:4F:36:E8:96:5C:C1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d2f1c98-8b81-3a00-969c-595615b80cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f8:df:bb:d6:dc:4f:6b:eb:d9:5f:7d:ff:b0:36:7f:6e:07:
         b7:10:68:63:fc:f1:34:cb:b4:0d:11:17:77:1e:c2:9b:c5:5a:
         8b:11:0b:bd:1c:51:b4:98:43:8a:c8:95:3f:1c:ce:f5:d9:47:
         f6:bf:33:e5:cc:8e:59:3b:0d:7d:6f:6f:8c:b9:06:fd:bf:d0:
         01:15:ba:d0:cf:cf:00:a2:47:ff:dc:b6:e0:f9:5f:96:73:65:
         7e:91:b1:78:ce:27:72:bb:b1:be:72:df:e2:64:e9:db:43:1c:
         e4:80:c6:d1:6f:18:4b:83:86:c1:a3:02:a2:18:b8:9e:b8:dc:
         99:86:e6:c3:35:e5:21:38:ee:b8:fd:85:a3:62:16:70:4a:7c:
         1b:53:a2:af:6c:b5:b9:7c:0c:1a:f2:36:ab:e8:d0:4c:0a:41:
         48:e4:c3:e7:d9:d0:66:4a:45:85:62:ad:07:d3:10:1a:c7:23:
         c5:68:90:f7:5c:78:e1:53:a6:76:12:a4:86:68:ad:73:72:c9:
         2a:78:79:06:13:66:35:48:93:7c:c3:65:83:da:e7:d8:aa:58:
         d4:2d:2e:c7:c1:20:af:36:19:f9:0e:68:c2:d9:7b:55:c3:24:
         a4:4a:1e:c2:94:dd:bb:ff:88:03:e3:db:e8:17:f5:f9:2e:bc:
         a7:22:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:30 2026 by rpki-client