Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db1480a1-a499-3f1d-bf4e-a5aaa00c829e.roa
File:                     db1480a1-a499-3f1d-bf4e-a5aaa00c829e.roa (raw, json)
Hash identifier:          4Z8ovCePU4PsBSe6yCcn2OhcHG9uRGbzdmyXGFwNnZU=
Subject key identifier:   9D:FC:DD:25:8C:15:3B:6E:A8:51:0B:46:51:86:57:30:BA:BC:4F:F6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CFE824235DD3CE2C4DA100D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db1480a1-a499-3f1d-bf4e-a5aaa00c829e.roa
Signing time:             Thu 26 Feb 2026 19:12:25 +0000
ROA not before:           Thu 26 Feb 2026 19:12:25 +0000
ROA not after:            Wed 27 May 2026 18:12:25 +0000
asID:                     19905
IP address blocks:        173.16.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:82:42:35:dd:3c:e2:c4:da:10:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 26 19:12:25 2026 GMT
            Not After : May 27 18:12:25 2026 GMT
        Subject: CN=a04aad65-c141-43fe-991f-5a7c1372ae75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e9:79:22:39:f0:7c:a4:40:a3:e0:54:8a:15:
                    41:00:c5:73:e1:e7:0b:d9:37:e3:b9:66:5a:97:5e:
                    54:99:d6:a1:0c:9b:19:7c:ad:ac:a1:50:55:72:0c:
                    6a:f8:3a:fd:10:50:c4:40:6d:29:dd:ea:e4:83:6a:
                    5b:e2:cf:93:68:fd:cf:95:8e:73:d5:7b:e5:b6:f1:
                    5a:51:eb:35:78:9e:6b:60:95:b2:8d:a5:a3:bd:20:
                    f9:6f:39:61:f8:a9:e1:cc:7a:29:e8:8c:cd:e6:93:
                    73:0d:9a:7b:fa:62:33:28:be:a8:13:39:a9:98:7a:
                    38:c8:1a:9a:07:cb:79:0d:fa:b5:00:8d:62:a1:bb:
                    d3:3f:e5:b7:43:7b:80:4a:ec:0c:88:7d:d6:6e:63:
                    f0:7e:27:6b:83:6b:2c:82:c0:e4:b0:d0:95:7c:5e:
                    de:08:02:f6:b2:31:77:f2:29:e3:d5:1a:21:98:a2:
                    f9:33:53:dc:d9:43:6a:07:b3:4e:ea:85:01:05:12:
                    75:91:89:f5:41:f0:33:2c:52:34:f7:ff:83:71:4f:
                    46:4a:c7:18:61:14:9d:8a:5c:75:dd:43:2f:fd:d6:
                    ce:e1:a3:68:53:61:16:6f:a0:5d:4b:6c:84:82:1b:
                    fc:a2:d5:fc:be:ca:f4:db:21:c2:66:d3:b1:16:53:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FC:DD:25:8C:15:3B:6E:A8:51:0B:46:51:86:57:30:BA:BC:4F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db1480a1-a499-3f1d-bf4e-a5aaa00c829e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2e:e8:2c:16:17:4d:66:fa:f9:99:87:02:4b:75:8b:22:0c:
         84:33:dd:e2:c5:cf:96:b9:3f:46:85:d1:02:5a:59:22:53:83:
         c9:ab:f3:0e:83:b8:11:1e:c0:70:25:28:48:aa:f9:0a:61:34:
         cb:68:c6:63:a4:dc:83:e7:89:4c:b1:84:90:a0:17:16:f5:1a:
         c0:9a:32:6d:54:f4:11:92:e0:4b:7a:c7:b6:12:51:b2:c6:19:
         aa:3f:a4:0a:d4:b8:8c:4a:98:ec:75:0c:80:6d:b7:6c:87:89:
         92:f0:86:0c:4b:bc:26:bd:7b:15:83:5d:e0:43:53:47:bf:7e:
         68:d5:18:0c:c1:e2:ad:26:a2:0c:73:7a:42:eb:f1:98:5e:f9:
         c8:9e:93:17:7a:33:2b:b2:b5:07:4c:61:cd:d9:b2:fb:87:6d:
         90:9c:75:b2:0e:15:be:c3:56:d4:61:f8:85:e0:93:4a:5d:ac:
         9d:1a:55:00:28:87:67:5a:49:9c:db:9e:e2:98:4f:38:4d:87:
         15:fb:b6:ca:29:b2:3c:03:17:88:55:52:4a:bf:ea:e1:12:fc:
         08:ad:3e:15:cb:bc:e0:52:09:8a:94:7d:ba:5f:c8:e2:4e:59:
         36:88:4a:06:d2:c9:fb:1b:28:02:8e:9e:8a:b4:7a:20:b4:4c:
         5f:e1:98:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:58 2026 by rpki-client