Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5329560-1387-36e3-83f4-9e29fe0d47a6.roa
File:                     e5329560-1387-36e3-83f4-9e29fe0d47a6.roa (raw, json)
Hash identifier:          cbjxRAZIWP1qTCvvxTuOk2nCAOSeMpPBEjGdm0Vd3+g=
Subject key identifier:   43:11:B1:C0:1C:C2:E5:EE:84:70:E2:49:B3:E7:8B:38:08:74:97:25
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CC3CEB7D3EA4B6F2A5E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5329560-1387-36e3-83f4-9e29fe0d47a6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        173.19.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:c3:ce:b7:d3:ea:4b:6f:2a:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4f9b5762-e14c-48ba-870d-f8d6af57e294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:48:a0:a6:0c:f4:5b:ce:8a:55:2c:3b:9e:2c:
                    99:a1:7c:81:cc:83:bc:72:cc:73:84:ed:da:52:d4:
                    65:83:d3:26:c1:cb:89:7f:2b:09:2c:26:78:af:49:
                    6d:7a:6a:c9:24:46:ae:22:24:0a:31:4e:b1:30:e8:
                    8a:09:8d:c1:0a:d6:71:7a:7e:02:7d:00:2d:8d:0d:
                    09:a7:50:4c:7e:c6:0a:fe:f5:de:d7:ba:49:72:3d:
                    05:03:b3:17:13:bf:d3:a7:1a:31:18:70:c0:19:25:
                    01:ba:5a:03:7b:be:28:df:cd:bb:07:1b:c7:2a:79:
                    af:81:87:fd:a2:93:a2:be:39:47:bc:d3:8f:f0:d2:
                    e6:fb:84:78:0d:0b:31:28:9e:c7:8e:ff:2b:54:9d:
                    25:b6:74:3a:97:ce:20:6a:45:d1:01:37:37:c4:c0:
                    ba:92:22:91:2e:a3:b5:2c:ce:09:77:53:6f:e4:5c:
                    2f:30:7e:1e:cd:bf:51:30:51:bc:60:8d:a8:39:e2:
                    a0:4e:7d:ba:17:7d:27:96:7f:22:60:80:74:b0:8e:
                    a8:a4:7f:a1:11:31:92:f5:d5:9a:72:e0:16:67:0c:
                    8f:ae:28:01:f8:cd:0a:ab:ed:ca:89:fb:7a:e2:63:
                    a1:a7:b7:e1:b6:1b:97:35:e4:d2:7b:09:6d:89:32:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:11:B1:C0:1C:C2:E5:EE:84:70:E2:49:B3:E7:8B:38:08:74:97:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5329560-1387-36e3-83f4-9e29fe0d47a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4e:ef:a9:47:22:28:23:85:e2:64:91:fc:08:f8:f8:b9:cd:
         9e:c5:67:22:5e:5f:cc:91:8a:36:a1:90:a8:34:b6:90:a3:68:
         8b:8d:42:c1:be:89:b5:b6:62:4c:c3:5d:16:4a:17:6f:37:e1:
         2e:26:0e:6c:9f:35:f4:bb:6c:e5:d0:5f:6a:23:6c:ae:46:2f:
         a3:be:6b:fa:dc:f0:09:b3:77:cf:3f:73:f9:d6:56:f1:27:8a:
         a4:95:b4:ab:a6:da:7a:e7:a3:7d:6e:32:19:a2:d4:8a:0a:90:
         cd:ce:58:9d:e1:3c:ef:74:cc:75:a1:fd:03:0b:aa:36:5e:0e:
         78:08:b9:8f:07:6d:a5:72:1f:a7:d5:d1:27:21:f1:43:76:fb:
         72:e5:9b:15:5b:9f:e6:a4:26:76:77:71:22:66:5e:f5:69:eb:
         85:e2:81:47:87:ba:d6:d9:88:61:df:64:5a:0f:e9:d0:30:78:
         81:61:8a:fe:9d:88:51:d1:df:99:3e:a6:54:eb:25:0e:1e:50:
         eb:4c:01:6a:ba:f6:10:cf:03:3f:14:cb:64:a1:14:88:69:0e:
         28:12:ed:f5:32:c4:a1:7b:d5:fd:9a:a3:9b:62:e3:85:e5:2d:
         16:91:13:de:d0:2e:76:3c:11:21:58:59:bd:7f:1b:b4:21:54:
         2f:53:13:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:55:47 2026 by rpki-client