Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2505ac67-6d34-3ba0-8174-aaa8046a1e62.roa
File:                     2505ac67-6d34-3ba0-8174-aaa8046a1e62.roa (raw, json)
Hash identifier:          GWLv5ZbdCZF2QF28bolgeUpopuTL9uzwckpF+Tz227U=
Subject key identifier:   8C:59:7D:1C:CA:07:0B:88:DC:3C:56:6E:2E:12:B7:34:A2:BE:8E:00
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E7E7A963DD3343897AD219600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2505ac67-6d34-3ba0-8174-aaa8046a1e62.roa
Signing time:             Tue 14 Jul 2026 08:07:22 +0000
ROA not before:           Tue 14 Jul 2026 08:07:22 +0000
ROA not after:            Mon 12 Oct 2026 08:07:22 +0000
asID:                     19905
IP address blocks:        173.19.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:7a:96:3d:d3:34:38:97:ad:21:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 08:07:22 2026 GMT
            Not After : Oct 12 08:07:22 2026 GMT
        Subject: CN=57094bb0-c104-4913-8621-ac1c4dd07582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:31:20:72:5a:26:76:e9:4c:d7:3b:c6:0d:
                    24:fe:3c:c3:35:fc:e3:48:68:8d:ec:c4:61:c5:35:
                    d9:cb:0a:07:5f:b6:db:0d:98:eb:67:01:32:62:b0:
                    48:0b:f0:55:1e:d1:c3:79:97:95:33:f7:9b:38:85:
                    59:c5:b4:5f:56:d5:20:53:b7:4f:44:92:42:37:ef:
                    51:e4:00:8d:a0:e8:cb:36:5e:75:1e:99:02:80:79:
                    b9:94:b1:c5:6a:f0:63:4c:08:9a:fc:37:9f:16:97:
                    f7:c1:b5:97:f7:87:57:cb:d0:e3:19:36:50:d1:f8:
                    ee:90:72:24:a2:f6:ac:d0:a4:64:70:c7:69:f3:7d:
                    30:c8:d9:ee:63:95:81:e2:56:81:f2:ae:19:24:61:
                    19:09:89:d7:35:5a:29:99:c2:11:85:13:94:9b:ea:
                    2e:e8:27:6e:79:94:65:7d:3e:91:bf:f7:f0:8e:fb:
                    1a:42:1d:5b:14:ba:22:4f:22:df:65:58:77:ea:4e:
                    25:82:3e:b2:31:34:f2:21:12:03:83:d5:c0:c3:13:
                    19:0c:64:d7:54:b8:4e:63:48:97:39:66:17:03:aa:
                    5f:75:e1:34:73:6c:56:4a:ee:ea:9d:d9:25:d8:ae:
                    68:37:b9:f9:85:7e:68:fc:fd:16:35:bb:73:02:17:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:59:7D:1C:CA:07:0B:88:DC:3C:56:6E:2E:12:B7:34:A2:BE:8E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2505ac67-6d34-3ba0-8174-aaa8046a1e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:96:60:9e:81:68:0f:25:92:f3:0c:40:0e:0c:b6:90:57:8b:
         30:6f:06:da:36:93:a7:de:85:84:cc:a5:b6:da:8a:2b:5c:70:
         3b:27:e5:9e:49:2a:57:b4:75:12:ac:98:6e:8a:9f:73:34:b5:
         73:ec:b2:d7:58:07:69:27:fd:34:a0:89:a8:0e:61:29:4d:2a:
         03:6d:5c:5c:15:b5:f1:97:e2:f7:43:75:1e:3d:08:7e:9b:18:
         a4:f4:24:32:5d:b7:8e:a8:4c:23:4a:0c:c8:c6:ed:7d:c2:4f:
         0b:a3:29:ca:c1:70:af:73:80:d9:9c:1b:c1:e2:57:cd:29:5b:
         c7:73:81:ff:34:b7:47:9a:e1:c5:3c:e5:d3:3a:83:c6:83:ba:
         9c:bb:a7:1b:40:d7:d6:92:76:e5:81:4e:b5:eb:ee:82:e7:50:
         9b:2a:a4:08:f6:26:03:7b:d9:06:24:30:db:a2:a9:0e:49:fd:
         73:29:79:6a:73:e9:67:c0:65:de:d1:b8:73:e6:56:1f:35:fe:
         e8:9f:7e:67:1b:21:e2:1f:f3:4e:58:3f:4f:b9:d9:8d:b7:af:
         7f:09:74:a9:5b:90:e2:70:d4:f9:9d:94:59:b2:a5:e5:c9:f6:
         7c:8a:4c:60:13:bc:50:1e:d2:b6:8e:a2:64:f5:57:8d:d3:db:
         a7:1c:34:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:42 2026 by rpki-client