Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa
File:                     dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa (raw, json)
Hash identifier:          FffCIoWet/SRbFxHpH4Xt10PWCqspnUgmR0p68VBDsw=
Subject key identifier:   C1:4B:74:F7:5F:92:10:77:D1:C9:BD:84:3F:88:CC:82:58:86:6D:BF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0865DAB3741DDBB4DD906500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.19.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:da:b3:74:1d:db:b4:dd:90:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=f0a14480-0863-4bcb-a380-534e31e86d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:96:ca:e4:5b:b1:c8:7c:b9:a7:13:46:51:81:
                    81:ac:28:f7:b1:e5:57:0d:b6:23:dc:a2:ef:fd:9d:
                    75:c6:af:20:74:ef:a4:86:b7:9c:0b:ca:0e:52:9a:
                    95:6e:c3:1d:b3:7d:53:e9:48:98:fe:52:b3:ed:43:
                    71:5e:f9:58:2b:44:c3:f8:c5:44:f6:df:d9:e2:20:
                    b4:2a:6e:c4:39:63:e5:b1:f4:82:43:db:4a:bb:e5:
                    1e:d1:b0:03:85:80:00:54:78:c3:71:84:b6:9c:ea:
                    0f:c9:57:eb:59:d8:7b:0b:56:c0:de:6d:46:6c:40:
                    99:c9:98:5e:dc:5e:52:cf:44:f0:37:aa:bb:40:1d:
                    8a:1b:ce:43:f7:63:74:87:5f:78:b0:3a:61:5b:ff:
                    3d:94:72:5c:de:7b:d0:e0:90:ac:4f:69:c7:1e:a1:
                    2e:ef:2e:6c:39:09:32:79:5d:51:bb:f5:98:1b:81:
                    91:29:ba:21:d9:6e:6a:e5:89:3b:94:c2:4d:7d:b0:
                    93:02:09:2f:60:3a:3e:6a:b9:12:c2:79:2e:6c:fe:
                    e3:ad:30:78:6b:3e:a7:8b:4c:9e:a7:13:3f:c5:d0:
                    2f:9c:d2:2e:aa:ee:aa:dc:8e:ea:fd:6a:2e:1b:fa:
                    af:bc:8b:1e:63:88:69:a4:df:a0:67:15:31:62:e7:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4B:74:F7:5F:92:10:77:D1:C9:BD:84:3F:88:CC:82:58:86:6D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a0:1c:74:59:45:36:9c:95:71:9a:1e:b2:9b:0f:15:5d:d1:
         92:ee:ee:94:ae:b7:d5:f6:a2:21:d4:75:00:d6:84:18:0a:fc:
         d7:1b:f3:9d:16:5b:3a:9f:73:f4:4e:e1:95:97:84:83:87:e6:
         77:00:5d:4a:80:2a:cd:7e:2a:d6:95:8a:1a:20:02:98:84:3a:
         14:d5:f9:06:9b:be:7f:f6:5f:e1:63:7c:1b:76:9c:c7:66:bf:
         b0:e7:b6:f6:e1:bf:2b:49:bc:9e:b3:fa:e2:65:77:b5:4f:2a:
         91:a4:5e:16:93:e0:40:17:77:bb:62:4b:62:15:4a:e4:5e:4b:
         53:53:05:93:cb:ec:5a:d2:42:0b:ef:1a:92:b2:d9:7f:46:c4:
         be:a2:c2:03:c0:15:7b:4b:55:a4:b6:36:f6:8c:f3:4d:fa:2a:
         a1:91:71:bd:dd:76:a3:05:ae:46:6f:2e:ff:65:b8:5e:c9:7b:
         31:a5:c5:33:63:f7:c3:5e:3a:79:18:28:18:83:83:07:b5:f4:
         2b:a3:4b:7a:51:62:0b:db:6d:0b:02:6e:4e:f8:af:48:aa:0d:
         6e:1c:b2:63:4e:01:2f:f8:35:5e:c4:4a:74:ab:18:4a:83:96:
         30:2c:e3:5f:70:a9:d1:b9:fd:fd:ad:7d:b8:0c:03:00:84:60:
         1f:26:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:04 2026 by rpki-client