Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa
File:                     d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa (raw, json)
Hash identifier:          nVzQGvRGE1WDRAaTDPIeSRVyQ+OHeWwtJSXqOrfJaDM=
Subject key identifier:   4B:E3:D2:85:BE:75:96:7C:19:C7:BE:C7:66:C5:17:D9:46:4D:44:50
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E1A1439F7830097C93937A0C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     19905
IP address blocks:        173.20.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:39:f7:83:00:97:c9:39:37:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=cec4fed6-afd6-44c3-9827-c2cfc56fcd16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:d1:90:5f:60:10:87:49:bf:ec:1e:ec:7e:
                    02:04:a6:3b:a5:85:ac:07:68:40:d0:b5:52:94:84:
                    52:43:f8:81:22:9d:eb:66:70:91:40:37:39:7c:47:
                    54:f3:11:f1:a0:db:d6:07:30:bb:65:27:17:ee:94:
                    25:4b:4c:ca:91:3a:6d:d2:c7:1e:45:a6:fe:a1:73:
                    ee:19:75:f2:4b:30:9b:d9:ac:06:ce:a3:4f:d2:bb:
                    5d:1c:82:2c:fa:b4:20:67:58:89:0c:6c:f2:54:aa:
                    87:c0:10:46:1f:e3:92:de:0c:9d:c6:68:02:4b:e3:
                    19:59:06:07:ed:39:8b:0d:ac:0c:9f:02:eb:f9:33:
                    86:5e:ad:98:0a:19:47:d7:18:4e:fc:27:65:3d:72:
                    24:05:25:fa:f9:5d:d0:19:e0:43:99:e1:92:e0:e0:
                    75:15:79:a0:6b:fc:3b:5b:2b:eb:4c:75:24:99:72:
                    70:9d:c2:74:e7:0e:8b:52:8e:4c:ee:0c:11:58:18:
                    c7:f9:72:fb:ce:0d:e8:0c:1c:d0:7b:c0:91:2f:0e:
                    68:7d:d8:e4:70:92:09:a7:c8:b2:7d:e8:7d:3b:d4:
                    45:b5:a3:84:5e:7c:29:97:e8:e0:a4:bb:5d:5f:25:
                    af:e6:47:5a:c0:f5:28:18:38:f2:7b:80:32:fa:55:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E3:D2:85:BE:75:96:7C:19:C7:BE:C7:66:C5:17:D9:46:4D:44:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:db:46:8a:e3:fe:c2:e0:f9:22:8e:a1:c1:5b:8f:c6:6c:0d:
         3d:82:76:f5:1c:ae:77:8d:b6:cb:30:50:87:8a:18:ac:4b:23:
         d8:16:f6:b1:29:14:93:33:91:80:ac:42:cf:d1:f4:7d:6c:24:
         6b:73:8a:c3:d8:7b:f6:e4:27:b3:19:9e:ad:52:a6:36:00:b0:
         54:ce:22:fd:90:37:de:cc:00:4f:21:9d:5f:0c:e6:c7:43:3a:
         86:3e:d1:2d:2b:9f:e7:f0:a6:e1:40:8a:70:bc:47:19:fd:c7:
         5c:b4:ca:a5:ad:f7:dc:3e:f1:06:c1:dc:24:d3:5e:69:20:f5:
         07:a6:04:44:c1:5f:89:1d:ed:00:a0:a5:6f:dd:64:72:78:a9:
         c3:50:f2:a4:d0:df:14:e5:0b:24:c5:01:d0:35:e3:4d:ea:33:
         3e:6a:e6:81:f0:e5:e0:72:fb:3f:f6:1b:92:f5:12:2c:e0:40:
         0f:c3:8d:5b:4b:f5:62:75:d6:cd:2f:f8:bf:40:0d:5e:c3:5c:
         6a:50:92:2c:df:2f:90:f8:3e:b5:7e:6e:d9:0d:1d:9f:27:69:
         db:d6:de:a5:e1:da:ca:d3:b5:da:e8:7b:6d:cf:fb:bc:8a:bd:
         52:8b:c3:9e:d8:0d:96:00:ae:ef:07:f1:d6:97:87:10:f8:2e:
         a7:3e:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:37:02 2026 by rpki-client