Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c075a366-8cc6-31e4-ba10-4b46dfbcc837.roa
File:                     c075a366-8cc6-31e4-ba10-4b46dfbcc837.roa (raw, json)
Hash identifier:          3yypS6109AeYc9wJPxgUU+5FmCe6TP4TLnYQJfokyGU=
Subject key identifier:   3E:DB:FE:D0:3F:FC:0D:DB:C2:50:88:64:C1:C5:D8:FE:B8:6A:C4:3E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CC34731500ED31579CF2CA800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c075a366-8cc6-31e4-ba10-4b46dfbcc837.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        173.24.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:31:50:0e:d3:15:79:cf:2c:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=c554aed1-d452-4bf6-9531-73e67f4f6dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:c4:71:d4:99:f2:dc:f7:4b:5d:8c:fb:67:
                    76:2f:1f:10:07:04:b4:1c:35:cc:ec:a8:dd:60:f8:
                    2f:b0:a6:0f:d1:8e:90:49:1f:74:51:7f:30:a4:d8:
                    55:fc:44:17:9f:d8:bc:c4:7e:09:ef:6c:f9:04:47:
                    4f:f1:06:18:36:28:c6:f6:26:e4:25:5b:b8:f8:21:
                    7e:8b:f1:a2:e4:fc:01:96:dc:e4:c5:6c:9d:0d:3f:
                    a2:74:98:4f:1a:9b:eb:d3:e8:5e:d2:83:b3:2a:36:
                    a5:10:00:7e:f5:bc:b6:12:12:b4:6f:a2:ef:80:6f:
                    e7:df:5d:83:02:cd:4d:ce:90:0f:3e:ea:20:05:05:
                    bf:86:9e:dc:b6:bc:5e:13:0a:67:4d:79:55:6a:a8:
                    10:9f:56:1d:90:a2:d8:20:2e:a4:b6:1b:1a:fa:98:
                    fb:f2:2a:eb:e5:c1:dc:29:38:1d:dc:84:1b:8e:7e:
                    d3:1d:5d:ba:19:99:ff:af:6b:44:af:a2:bb:c8:dc:
                    22:c7:b5:4f:8f:e0:07:39:93:95:2b:ea:e9:aa:77:
                    c9:d6:ee:2f:09:54:9b:aa:31:83:e6:f7:cb:f8:15:
                    5c:07:af:0c:e3:95:0b:56:07:fc:31:01:15:fb:bc:
                    01:88:91:0a:dc:f4:44:39:5a:c0:45:dc:96:f1:e5:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DB:FE:D0:3F:FC:0D:DB:C2:50:88:64:C1:C5:D8:FE:B8:6A:C4:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c075a366-8cc6-31e4-ba10-4b46dfbcc837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:22:bf:b9:cf:85:5f:88:6a:27:0d:9a:5c:e6:23:55:3c:ab:
         69:2a:ce:52:55:24:45:7f:d6:ad:d0:18:ed:c8:27:14:a6:cd:
         34:6a:04:57:b1:07:61:5a:b7:52:c4:1e:9c:16:65:2c:58:c6:
         e7:37:0d:9a:70:02:66:88:e4:01:75:e7:26:76:2d:2d:de:f0:
         c8:2b:59:ea:de:d9:19:12:b3:78:01:a2:0b:39:a7:01:39:09:
         8a:f5:75:54:c5:74:bb:39:93:be:b1:5d:0f:77:ca:f8:0c:57:
         72:cf:ba:5d:27:a9:47:87:3c:39:98:4b:9f:c8:13:d2:4c:1f:
         bb:40:72:47:2a:0d:6b:81:5a:48:ae:d7:79:8c:a6:6b:56:bb:
         a2:e2:53:3d:ac:f1:cc:36:05:18:c6:e0:aa:40:6d:95:ea:45:
         71:ee:d1:40:f4:cc:54:b7:a9:d2:3e:f8:e0:ee:8c:37:36:cb:
         43:2f:46:ef:e2:5b:11:74:82:00:23:ed:6e:a6:67:84:dc:eb:
         89:fa:1a:7e:26:c6:60:c0:f3:cc:09:b2:38:bf:60:81:78:f0:
         ee:f2:95:33:4f:b7:c5:13:aa:0d:19:84:4c:3c:f1:e2:af:15:
         1a:fe:54:16:c0:47:7c:f4:dc:d9:ca:ff:33:5e:02:e9:d2:2f:
         8c:45:f4:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDRzFQDtMVec8sqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk
YzU1NGFlZDEtZDQ1Mi00YmY2LTk1MzEtNzNlNjdmNGY2ZGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuzEcdSZ8tz3S12M+2d2Lx8QBwS0HDXM7Kjd
YPgvsKYP0Y6QSR90UX8wpNhV/EQXn9i8xH4J72z5BEdP8QYYNijG9ibkJVu4+CF+
i/Gi5PwBltzkxWydDT+idJhPGpvr0+he0oOzKjalEAB+9by2EhK0b6LvgG/n312D
As1NzpAPPuogBQW/hp7ctrxeEwpnTXlVaqgQn1YdkKLYIC6kthsa+pj78irr5cHc
KTgd3IQbjn7THV26GZn/r2tEr6K7yNwix7VPj+AHOZOVK+rpqnfJ1u4vCVSbqjGD
5vfL+BVcB68M45ULVgf8MQEV+7wBiJEK3PREOVrARdyW8eUeEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7b/tA//A3bwlCIZMHF2P64asQ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzA3NWEzNjYtOGNjNi0z
MWU0LWJhMTAtNGI0NmRmYmNjODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRiwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEciv7nPhV+IaicNmlzmI1U8q2kqzlJVJEV/1q3QGO3IJxSmzTRqBFex
B2Fat1LEHpwWZSxYxuc3DZpwAmaI5AF15yZ2LS3e8MgrWere2RkSs3gBogs5pwE5
CYr1dVTFdLs5k76xXQ93yvgMV3LPul0nqUeHPDmYS5/IE9JMH7tAckcqDWuBWkiu
13mMpmtWu6LiUz2s8cw2BRjG4KpAbZXqRXHu0UD0zFS3qdI++ODujDc2y0MvRu/i
WxF0ggAj7W6mZ4Tc64n6Gn4mxmDA88wJsji/YIF48O7ylTNPt8UTqg0ZhEw88eKv
FRr+VBbAR3z03NnK/zNeAunSL4xF9DM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:02:31 2026 by rpki-client