Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5430acd-6f27-3cf5-a228-969116a29d75.roa
File:                     d5430acd-6f27-3cf5-a228-969116a29d75.roa (raw, json)
Hash identifier:          j99x8iwAoI7jqdvony3VXAYa/fXyrw9apkqId9bHKD0=
Subject key identifier:   9B:7C:D3:A7:F2:A5:D2:E9:DE:1C:74:00:B5:E8:32:BC:29:1D:6C:54
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CC7772B6E2ED6609748108E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5430acd-6f27-3cf5-a228-969116a29d75.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     19905
IP address blocks:        173.23.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:2b:6e:2e:d6:60:97:48:10:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=95b4f1d1-cce2-4d24-bee8-4bb0bff01752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:8e:fc:3c:1c:89:ec:ba:8f:98:f7:66:92:
                    8d:3f:ff:99:a8:d6:19:38:66:86:00:bc:cd:b5:13:
                    b3:78:b3:df:3e:e5:3e:37:ab:60:2f:1f:23:a7:cd:
                    8d:b0:06:05:a1:1a:06:e2:1b:3a:87:1e:4f:45:67:
                    e3:ec:75:ef:41:a5:e3:3b:f3:bc:e4:45:fd:9c:66:
                    65:92:d2:24:07:6f:22:65:ec:39:fc:67:03:4c:78:
                    24:17:23:a1:ce:24:dc:55:f6:9e:d4:f8:01:fb:9e:
                    8c:83:23:96:d2:05:52:1c:48:67:fa:55:78:aa:f7:
                    7f:79:fa:1a:85:e6:79:3b:f8:41:57:05:9f:b4:90:
                    40:02:42:e9:f1:4f:42:5d:a3:cd:33:36:af:fd:a2:
                    a2:1c:cd:6d:34:c0:65:94:de:2b:b4:5f:7b:90:21:
                    f2:51:72:f2:ba:2b:2d:69:8a:12:a7:fb:7f:05:6f:
                    26:73:64:03:78:74:58:21:35:b6:c8:fd:ec:62:39:
                    7e:4c:b2:48:6d:65:a6:7c:1a:5c:e1:07:fc:d8:df:
                    b3:7b:7c:d6:b1:65:c1:16:28:1b:0d:2a:ac:c5:30:
                    03:3d:f8:f8:df:9d:d9:80:fa:0d:ba:b7:d0:2d:db:
                    e1:75:bf:38:89:06:10:63:46:0c:2f:bb:0f:84:94:
                    34:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:D3:A7:F2:A5:D2:E9:DE:1C:74:00:B5:E8:32:BC:29:1D:6C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5430acd-6f27-3cf5-a228-969116a29d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:39:a2:bf:4f:9b:58:a7:d3:48:7b:49:23:2d:b2:52:ec:05:
         3f:8d:42:c5:a5:06:4b:f5:e8:ee:4a:64:80:02:26:10:27:2a:
         3a:64:7a:0f:a6:3f:6b:e2:c1:a4:0d:96:48:7b:7e:21:a1:f1:
         df:54:82:e3:8c:f0:0e:87:88:ce:a0:fb:9d:7d:63:ab:59:f5:
         93:1f:7d:e8:bd:c1:ea:91:02:10:36:73:ad:2c:7e:b7:3e:7e:
         35:db:4c:71:6e:d3:dd:54:0f:6b:d3:52:7b:6d:70:cc:fc:06:
         a1:16:84:18:ef:53:d9:38:37:8e:9c:03:de:da:c4:cd:68:0b:
         30:50:5e:dc:80:2a:20:6b:9c:82:b2:cb:0a:f1:f1:8b:20:65:
         ba:07:d3:df:4d:af:c1:87:9d:e2:dd:86:36:83:33:7e:b2:bb:
         29:ea:a0:d8:4d:1b:af:05:9b:8f:b7:c9:fe:78:62:0f:e4:ec:
         58:fc:30:a9:d8:78:c3:c2:21:43:b1:e4:3b:1e:c4:01:cb:6c:
         1d:b4:56:51:8d:5b:54:30:2d:f8:52:a6:82:8d:58:96:90:db:
         ad:0b:bb:3e:78:7e:a6:d7:07:4a:92:47:0a:ca:9b:07:6b:0c:
         f2:70:9f:b9:ed:3a:3c:54:8c:4a:70:2f:ac:69:68:51:fc:f0:
         9a:97:17:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:03 2026 by rpki-client