Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad1c9be4-285d-34ed-bf2d-4a17a6e3578d.roa
File:                     ad1c9be4-285d-34ed-bf2d-4a17a6e3578d.roa (raw, json)
Hash identifier:          Nzv9V+n0Y5oXrCoucJU1DKQ0lMOTWNbIaIK3ZTF5BuY=
Subject key identifier:   F8:26:82:75:AA:AA:74:F4:98:0C:66:9C:FC:A7:33:29:62:9F:93:86
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CB3EC5AAA909A7F52CF1721C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad1c9be4-285d-34ed-bf2d-4a17a6e3578d.roa
Signing time:             Sat 31 Jan 2026 02:00:32 +0000
ROA not before:           Sat 31 Jan 2026 02:00:32 +0000
ROA not after:            Fri 01 May 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.22.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b3:ec:5a:aa:90:9a:7f:52:cf:17:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 31 02:00:32 2026 GMT
            Not After : May  1 01:00:32 2026 GMT
        Subject: CN=e21eaf08-f874-4f49-b6d0-ffc288d98b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:17:ac:74:72:68:a7:01:d3:f2:20:ff:ce:
                    e6:a1:27:f1:65:16:5d:90:12:2d:e2:b6:7d:ce:e1:
                    ee:9c:d6:06:9b:d1:fa:d8:79:e5:18:6c:16:4a:3b:
                    c0:71:02:55:62:b5:5e:ec:30:b1:c6:57:2f:f2:08:
                    0f:9d:48:50:54:5f:17:8b:6a:c5:87:bb:43:50:b2:
                    17:f0:11:19:d9:98:93:1a:32:8a:67:22:11:77:34:
                    b1:a3:a4:3d:15:ef:9a:06:77:f0:58:7d:02:1e:2e:
                    16:19:54:7f:42:98:d9:3b:4e:ad:a5:3d:20:a9:a9:
                    ed:9c:ed:1d:5f:ff:f9:0f:2e:71:40:5d:8d:59:e8:
                    0a:a7:f8:36:5b:b8:46:ca:f6:36:f0:dc:6e:92:ac:
                    87:28:8c:5e:89:83:6a:72:43:6b:a3:ed:78:a2:3c:
                    c0:85:a4:97:8f:3e:e1:0a:7d:0b:6f:33:e4:34:b9:
                    52:73:88:50:5e:d4:14:43:b1:c8:2c:ac:a1:92:a9:
                    0e:0c:53:7d:c8:ba:07:a3:5c:d0:bc:1f:25:92:f8:
                    63:32:6c:8e:c5:03:c0:f6:61:d0:28:2a:2e:e5:45:
                    8f:45:88:4c:de:29:eb:f4:df:7d:c1:ff:95:f9:d2:
                    d1:37:85:ab:e9:46:1b:2c:6b:c9:ea:bb:3a:26:ed:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:26:82:75:AA:AA:74:F4:98:0C:66:9C:FC:A7:33:29:62:9F:93:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad1c9be4-285d-34ed-bf2d-4a17a6e3578d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:2d:6c:ab:d2:8c:f9:a8:c7:aa:ce:58:1b:1b:ef:5d:6b:
         8f:67:13:5e:5e:c8:7d:41:fb:73:c5:1e:47:0d:11:f7:c5:78:
         05:41:74:40:db:f9:7d:78:42:a2:92:4c:56:19:29:21:7c:ec:
         bc:26:31:47:2b:6b:df:18:47:87:35:1e:7d:1f:4a:57:66:b8:
         b0:2a:c6:4e:3e:b7:ac:37:e9:39:dc:27:6d:3c:da:dd:c6:16:
         b0:47:21:f8:ab:2c:3a:9c:48:4b:01:9f:1a:c1:66:46:d9:80:
         20:75:f6:e9:41:07:b4:9a:78:29:79:4d:0f:d2:5c:18:4a:58:
         be:4e:d2:49:0a:07:07:69:b2:80:42:f9:39:97:bf:ab:b6:dd:
         83:a2:47:a5:56:3f:fc:37:c9:56:3b:75:88:7a:78:47:9c:cb:
         f7:1d:5c:97:57:70:5f:0b:d6:d0:67:2e:6b:e1:95:2e:44:8f:
         92:ea:a1:43:fa:66:ac:b9:ff:23:7b:d2:d0:f4:f7:e9:eb:49:
         07:97:91:ed:7c:8d:1f:b9:be:1a:0c:0e:47:8c:e6:45:21:10:
         ee:7e:f2:1a:d0:2d:54:47:24:57:fa:6d:91:8e:7b:dd:63:c0:
         de:83:9d:db:bc:00:59:70:a7:d1:76:c0:ae:2d:20:29:44:b1:
         a8:7a:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:54 2026 by rpki-client