Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/004bf56a-852a-3e35-a26a-30e40710dd2a.roa
File:                     004bf56a-852a-3e35-a26a-30e40710dd2a.roa (raw, json)
Hash identifier:          YemH3KEvmfIX5OJzu6vctiGyrC035NLZEK+l6EIvtRk=
Subject key identifier:   A4:63:73:F7:C6:90:23:EB:EB:CD:53:88:F9:53:62:D7:EC:84:51:67
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D20AF7D0661F007CBA003581C
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/004bf56a-852a-3e35-a26a-30e40710dd2a.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.31.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:7d:06:61:f0:07:cb:a0:03:58:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=ccbd0592-210f-4a17-b82b-ec77eed88ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4c:dd:f9:a4:f2:42:f6:3f:09:c8:2c:77:57:
                    89:c7:95:c1:d5:d6:18:1f:ad:de:71:0a:ea:e9:f6:
                    42:92:50:77:6d:24:b2:9f:ae:f1:ea:15:04:5c:9b:
                    1f:8d:ab:7a:45:78:3f:f9:a5:e5:ef:01:73:8d:7e:
                    9c:8f:14:69:e6:1f:41:64:13:94:3b:54:c7:6c:1d:
                    21:b5:88:56:62:57:16:6e:1f:0e:20:60:64:b1:09:
                    1d:af:26:36:e2:50:94:6d:48:21:31:7d:68:95:a9:
                    11:c0:74:e4:91:bb:e5:0e:bd:bf:b2:db:a1:e9:3f:
                    68:d7:39:bf:28:69:e4:94:ba:76:91:a0:cc:14:df:
                    79:71:7e:69:06:cb:ba:e9:02:b8:87:95:dd:be:c9:
                    90:20:bd:91:97:41:14:fc:ad:27:0a:8c:b8:c3:c2:
                    08:91:ea:2b:1d:15:56:72:b4:88:57:f0:22:c3:92:
                    8c:99:95:98:ba:9d:71:03:6d:7b:e2:33:31:fa:42:
                    c0:6b:b2:6a:08:ef:5f:23:5b:ad:8c:1c:b6:15:07:
                    a8:66:dc:15:00:e3:96:f3:5e:a0:b2:41:1f:ab:74:
                    c7:b6:8e:73:3e:bd:ea:4a:73:1b:68:28:88:74:3d:
                    db:73:62:63:8f:f9:0b:ce:ff:41:f8:a3:42:b7:ad:
                    83:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:63:73:F7:C6:90:23:EB:EB:CD:53:88:F9:53:62:D7:EC:84:51:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/004bf56a-852a-3e35-a26a-30e40710dd2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:6d:21:10:fd:64:6b:b0:28:02:4e:53:0e:0b:20:ba:85:
         16:a3:ab:3b:5d:dd:b3:b0:85:62:d8:8e:33:80:cf:bf:35:dc:
         8f:94:2a:14:c0:41:7a:c1:77:0e:ab:0f:6d:a9:63:ee:90:76:
         de:d4:28:58:52:6a:4d:35:04:c7:32:6f:f9:e9:fb:27:fa:67:
         52:5d:be:33:71:ef:54:53:6d:b9:4a:c4:45:22:1c:a2:5b:c7:
         33:39:9f:45:84:ca:1c:b3:1e:bc:37:94:b7:df:ef:de:cb:1f:
         03:8b:74:82:23:9d:e7:cf:83:36:45:e6:56:64:85:da:b3:5e:
         ca:ed:fe:1a:14:8b:71:88:c2:b9:50:8f:f7:ff:bd:65:ae:0d:
         ca:bf:af:f2:31:0e:51:e2:16:e8:ac:df:d1:0b:5e:ae:a8:bb:
         07:fe:a4:a8:e6:bb:d4:27:4c:3d:16:7a:5e:64:b5:8e:1f:27:
         f8:f3:81:1c:a8:21:15:fc:00:41:20:fd:22:bc:32:e6:04:d3:
         15:f6:94:a9:e0:7f:27:68:7a:44:02:39:ea:f0:68:9e:79:75:
         ee:b2:6b:11:0f:3a:df:15:01:c9:0f:a8:00:4f:8d:92:8f:06:
         6e:09:3c:fe:e2:20:e6:24:86:98:94:35:ad:39:fb:84:d1:56:
         a8:dd:66:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:06:57 2026 by rpki-client