Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d707865e-992c-3f63-be7c-23dc9a4a180f.roa
File:                     d707865e-992c-3f63-be7c-23dc9a4a180f.roa (raw, json)
Hash identifier:          4GAN72K28o8rvpT59blw6ky52fOZPNsDcT8A8mVczh8=
Subject key identifier:   12:81:8F:6B:B7:FF:01:A1:9E:B8:4E:25:86:6C:D8:A6:46:F1:9B:8F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B50B4A6B77611F0B51800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d707865e-992c-3f63-be7c-23dc9a4a180f.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.20.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:50:b4:a6:b7:76:11:f0:b5:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=fcf44734-756d-4e3f-be4c-fdf368962578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:3a:c4:14:e9:10:9b:c9:8c:0f:04:d2:8c:
                    32:b3:1e:a1:0b:e7:cd:a6:d6:95:16:ef:3d:45:4d:
                    c1:a3:a6:6e:07:b3:3c:5a:c1:ff:7f:59:97:6b:d5:
                    6f:4b:fc:e0:a3:1a:64:be:ac:1d:49:82:b3:19:e2:
                    89:f0:f7:51:da:72:28:b5:a0:55:3d:c4:37:f2:a0:
                    1c:05:1d:96:eb:20:f7:65:b9:b3:b0:a7:73:b4:34:
                    f0:39:2d:23:d8:ca:4a:bd:97:11:0a:ee:93:2a:53:
                    f7:a4:f7:78:a7:3a:1a:24:fd:2e:53:b1:c2:42:29:
                    85:8c:b0:59:36:35:5e:06:8a:d3:25:8a:18:12:b8:
                    c7:c7:03:44:fb:ed:8c:90:5e:99:ed:34:c3:4d:b2:
                    bd:9c:f7:d9:18:50:63:30:29:d8:59:11:dc:5c:8c:
                    20:67:94:1d:e5:d4:07:e5:bf:98:6e:a3:b9:d1:9f:
                    1e:13:7b:92:eb:48:35:a0:84:50:c2:46:78:d1:6b:
                    78:88:06:1b:aa:a6:af:77:6b:df:28:c3:6d:67:bf:
                    bc:9b:fc:e1:76:59:09:da:99:36:8b:a7:ec:76:78:
                    fc:3b:1c:bc:df:c7:8c:06:48:21:9f:71:32:a3:a1:
                    bf:76:a4:9d:da:9f:81:f5:d0:e7:0e:76:28:c7:40:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:81:8F:6B:B7:FF:01:A1:9E:B8:4E:25:86:6C:D8:A6:46:F1:9B:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d707865e-992c-3f63-be7c-23dc9a4a180f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b1:f3:30:0b:ea:73:ff:b0:68:a7:0e:94:e8:9e:b5:ae:27:
         1b:f9:56:2a:7a:d6:c9:6e:a3:57:d2:6e:91:f1:fd:15:b3:03:
         01:3a:54:24:3a:00:67:0c:9b:7f:fa:4f:f1:ad:ca:7d:2b:7a:
         a6:ab:31:b1:a3:f2:5b:8d:b4:b4:9c:c4:01:e8:43:d2:2d:f8:
         e0:f5:0a:dd:31:7b:d1:5b:46:6b:d7:f2:24:76:30:0f:8f:81:
         90:16:19:81:26:fa:5c:96:3a:50:7f:22:63:e3:c9:c5:55:4c:
         ba:47:e8:2c:e9:02:56:5e:d3:b3:a0:43:e5:44:ca:28:04:8d:
         b4:67:7d:e7:d3:5a:0c:bc:f8:03:17:5d:ea:51:41:6e:3e:b2:
         cf:53:78:84:58:50:4d:44:1f:a4:3e:e4:c4:c6:ee:8a:1e:58:
         03:4b:c0:22:ae:72:28:37:c6:60:6f:b3:00:8f:9b:11:a3:4a:
         cb:a6:c6:57:8d:9d:c7:13:f4:45:52:1a:66:4d:ce:10:40:01:
         bc:cc:0d:dc:c7:df:26:cb:3d:dc:51:b8:44:2f:59:77:a2:8c:
         8d:7b:7b:58:53:99:58:dc:8e:2b:26:48:6c:cf:ce:5f:4b:54:
         a6:d9:91:09:b7:1b:9e:dd:0e:52:da:d6:02:97:c8:39:94:28:
         1e:a3:18:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:50:59 2026 by rpki-client