Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ceb77b26-de98-303c-81e0-14adcadcf13d.roa
File:                     ceb77b26-de98-303c-81e0-14adcadcf13d.roa (raw, json)
Hash identifier:          l0Mnn+E2OQBzBHhxhvTy9a0UbFuj6VnWMk5aXfrMvNo=
Subject key identifier:   9E:9C:B1:34:B9:BF:2E:10:A2:C2:7D:39:91:41:D4:49:98:73:96:EB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E5B6FE55A97EDAA6B878C6080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ceb77b26-de98-303c-81e0-14adcadcf13d.roa
Signing time:             Wed 01 Jul 2026 18:52:32 +0000
ROA not before:           Wed 01 Jul 2026 18:52:32 +0000
ROA not after:            Tue 29 Sep 2026 18:52:32 +0000
asID:                     19905
IP address blocks:        173.18.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:6f:e5:5a:97:ed:aa:6b:87:8c:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  1 18:52:32 2026 GMT
            Not After : Sep 29 18:52:32 2026 GMT
        Subject: CN=5b028b0a-2c4d-43eb-a71d-c2a3f3ad30d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a9:8f:44:4b:4c:4c:25:0b:a1:2c:98:87:99:
                    17:96:ae:82:80:f1:5a:fa:84:1d:7e:2f:b7:8f:07:
                    43:08:74:a9:f2:83:6d:d9:02:32:3a:07:6a:86:ba:
                    bc:81:9d:48:26:d5:30:2d:c7:7c:a8:ce:10:05:67:
                    6b:37:26:be:f9:46:56:cb:4d:81:e5:7f:2c:95:3f:
                    3b:ab:59:b4:fe:97:93:1d:36:d3:c7:25:15:04:67:
                    7d:fc:7c:ec:8a:81:07:12:c7:05:b2:54:64:dc:d5:
                    bd:85:56:40:5a:04:25:54:98:73:4b:3b:60:46:e7:
                    1c:e4:0f:c8:66:31:0a:26:1c:82:b9:0d:c7:73:f3:
                    98:1b:f2:41:a9:b7:74:8f:a7:fe:a2:be:53:b5:75:
                    34:c9:f3:8c:7d:a6:bf:db:bf:81:1b:58:8d:43:07:
                    30:c6:3e:fe:90:e9:29:ec:bf:97:a0:33:76:28:05:
                    33:2f:f0:91:98:c8:ba:74:b5:c2:93:d7:28:e8:6c:
                    ef:f1:c8:ca:11:37:78:2d:04:3b:e5:05:37:17:8d:
                    3d:64:aa:2b:f5:73:fc:b2:4c:d5:c0:b6:40:39:4d:
                    d0:5b:0a:03:7b:78:69:49:c2:1d:1b:50:17:ce:ff:
                    6d:13:1e:6f:e9:45:43:bf:55:21:2c:02:30:7f:06:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9C:B1:34:B9:BF:2E:10:A2:C2:7D:39:91:41:D4:49:98:73:96:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ceb77b26-de98-303c-81e0-14adcadcf13d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:d2:b8:42:de:3c:73:67:54:df:5b:ea:4f:c8:f8:48:3c:
         e7:a9:82:39:31:4e:4a:9c:25:d4:ad:ef:f4:e2:b1:09:75:d0:
         6c:37:21:73:e0:02:55:a3:c2:5c:e3:35:8f:3b:4e:44:b2:34:
         15:c7:0d:44:28:87:53:61:4b:c7:cd:6d:f7:06:a0:c0:be:55:
         e4:5b:09:15:72:c4:7e:64:8d:62:87:db:b6:15:00:09:68:7a:
         09:8f:31:ea:5a:32:86:73:e3:d8:ac:df:87:d3:39:7c:d2:f5:
         8f:e8:35:39:48:7e:19:e4:b6:e4:88:b2:80:00:f8:8f:67:64:
         1e:22:75:31:de:fb:cc:11:54:76:8a:0f:ac:37:c1:2f:bd:ef:
         90:9a:52:95:71:e0:0e:d2:bd:87:38:8c:21:0d:34:f6:7a:76:
         47:7d:da:ec:9a:6b:00:00:91:ff:f8:85:7b:14:e0:39:e1:68:
         44:f8:6f:2c:fd:8e:86:88:fa:1c:97:d4:cb:61:2b:d9:99:0f:
         52:7c:71:35:62:26:43:3f:e1:42:5f:fd:66:b4:73:e3:8f:a6:
         51:98:f4:e1:17:1d:58:0a:4c:6b:ae:ee:07:1b:a5:da:73:1d:
         8c:ee:0e:b4:47:af:6d:2b:db:9a:9c:87:be:3d:d4:53:ad:46:
         f9:ce:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:44 2026 by rpki-client