Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aad2dda3-ab53-37d0-a92a-01c921bd08be.roa
File:                     aad2dda3-ab53-37d0-a92a-01c921bd08be.roa (raw, json)
Hash identifier:          uMkPduXeD70qX0ocKV9QMSRsZm/8zZMFwjDjgHJgnzo=
Subject key identifier:   32:E8:4A:44:7F:51:1B:21:26:D4:95:56:C2:D4:42:D3:1C:F7:3F:23
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E016B28B2A32D9C0E8F1BA740
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aad2dda3-ab53-37d0-a92a-01c921bd08be.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     19905
IP address blocks:        173.18.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:28:b2:a3:2d:9c:0e:8f:1b:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=4d477d19-5a29-45d5-8606-04972abff373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:6c:4f:7b:ee:38:ff:97:f8:32:75:39:6d:
                    68:05:3b:14:91:93:97:44:61:dd:8e:9d:44:35:b1:
                    f6:d6:a8:3e:cf:39:5d:34:67:40:e7:26:09:09:57:
                    bb:3e:e7:55:cc:6a:b8:0a:73:fb:d8:3c:36:00:a1:
                    61:17:1f:7d:f2:cb:3a:4c:69:a8:16:9a:13:98:b7:
                    d5:65:2b:19:b2:b6:29:a9:7d:ab:a2:d2:1e:77:f3:
                    d0:4a:30:69:f7:1d:c8:69:23:7d:ac:d0:df:8b:d7:
                    ad:f0:17:0f:54:c7:0a:0d:fd:b9:38:ba:55:cd:93:
                    70:93:ee:65:3c:5f:4a:35:cd:a1:50:35:2a:23:08:
                    5c:fb:26:d0:72:46:41:de:e2:c4:7c:35:45:e3:63:
                    a7:47:79:75:93:62:19:b0:87:fb:03:0f:9d:4a:50:
                    ac:b6:f6:be:c9:f1:85:9d:79:89:a0:f7:ad:95:e6:
                    00:2f:34:66:2a:b1:87:5e:3e:81:8d:50:74:12:5e:
                    3b:09:b6:5c:39:97:43:6c:84:15:36:94:ff:c8:18:
                    ba:2f:83:56:5e:99:d6:6a:69:4b:82:8b:27:13:71:
                    36:52:f5:c1:b4:2e:e9:4d:81:6f:f8:dc:19:3e:a5:
                    a0:89:e7:1d:00:ae:a1:18:2d:ef:9d:69:43:ca:9e:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E8:4A:44:7F:51:1B:21:26:D4:95:56:C2:D4:42:D3:1C:F7:3F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aad2dda3-ab53-37d0-a92a-01c921bd08be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e3:86:e6:ee:90:00:52:ad:5e:24:89:f8:2f:c6:02:04:fd:
         8a:21:68:3d:5b:01:54:7f:1e:e6:1c:d5:a4:55:96:21:a1:ac:
         5d:a2:5e:3b:ba:d0:4f:88:9b:9a:28:f3:1e:82:3e:1b:06:16:
         f5:d4:23:7c:6d:f3:2c:da:82:77:72:20:d1:9c:1b:ac:43:5d:
         8f:ef:76:cc:2e:43:6e:36:02:ca:29:1c:2e:64:c0:8b:ff:b8:
         cf:9c:45:b9:d8:c0:65:a2:da:d8:6d:d7:0e:33:8d:dc:90:88:
         9e:15:fb:c7:1f:88:48:eb:6b:a6:5b:a0:fe:03:2d:66:87:36:
         69:01:05:06:74:a4:c7:95:0e:4f:e1:64:04:f1:a7:4d:c0:96:
         18:92:a6:8b:54:9e:72:1a:bd:52:e7:60:90:85:3a:f0:88:a3:
         bf:01:cd:89:0d:3a:a1:13:c9:a2:ef:bc:51:01:2e:fb:c5:55:
         38:9c:50:59:17:f8:9a:65:71:16:32:f2:17:be:1c:87:d0:a4:
         55:bd:8f:4e:ab:5f:81:30:dd:55:8d:db:3f:93:5f:bd:b9:80:
         f1:e0:c3:9c:74:e0:fd:49:56:ea:78:e7:0e:f3:71:94:7c:0f:
         f6:af:a8:7f:d0:79:fe:99:a1:0b:8f:2d:c2:a4:c4:24:4f:76:
         e3:11:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:13:47 2026 by rpki-client