Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/028897f4-52d8-3563-8d53-8759d0d4d122.roa
File:                     028897f4-52d8-3563-8d53-8759d0d4d122.roa (raw, json)
Hash identifier:          t/eUmCkZOm49KKFsyts/rWs4pHnDFLhppcRjGrHd7rs=
Subject key identifier:   6C:F1:BB:B9:01:07:D0:E1:62:DC:45:42:0A:13:0C:DA:8A:E9:15:8B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DC40060251C3FB515B23193C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/028897f4-52d8-3563-8d53-8759d0d4d122.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     30036
IP address blocks:        173.19.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:60:25:1c:3f:b5:15:b2:31:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=b741a653-5277-4ac4-a1ca-5a4ef217a9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:9e:db:3b:a3:f6:71:ad:a8:d8:3c:52:06:
                    60:31:2d:08:7c:6a:ab:9c:a0:ae:ef:64:7c:79:0e:
                    6d:bb:e7:ef:2b:bc:03:de:31:05:58:c4:01:fb:8c:
                    a4:66:7a:06:02:0b:fb:d7:12:ba:17:12:5a:93:7e:
                    0b:be:d0:21:5e:ca:23:18:ce:df:af:fb:b0:ef:83:
                    4d:32:b9:59:29:6c:f7:91:28:68:a0:6c:6d:48:22:
                    ed:39:51:66:d1:f3:4a:65:59:c4:6f:36:9c:dd:ea:
                    a5:72:ea:50:31:5a:33:7d:be:f2:fb:d3:33:72:0a:
                    60:14:2c:18:cb:d8:b6:05:15:41:1f:55:c8:f5:72:
                    18:ef:4d:64:9f:dd:00:64:89:20:8e:b0:f0:23:a8:
                    65:40:c2:a3:f5:19:cb:0c:6d:f2:ab:4a:a5:7b:12:
                    f4:62:2b:44:27:62:ae:ce:42:48:78:eb:77:53:ff:
                    db:f8:b6:53:3f:59:0b:89:f0:3d:3b:23:b3:8d:db:
                    fd:21:b9:a2:26:d9:da:91:19:50:47:10:85:1e:7f:
                    82:73:f8:df:9c:7f:0b:46:07:52:bd:21:13:c1:10:
                    5b:c8:39:8f:91:f1:e0:86:cc:1e:e9:b6:c9:7b:dd:
                    3b:d2:b4:19:53:6c:9b:6f:16:ac:c0:0d:1d:ef:f6:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F1:BB:B9:01:07:D0:E1:62:DC:45:42:0A:13:0C:DA:8A:E9:15:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/028897f4-52d8-3563-8d53-8759d0d4d122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:c4:cf:8c:22:f9:6c:5b:b8:34:b8:61:30:04:12:13:96:
         5e:1f:f9:c1:5f:b3:73:3b:b1:37:0f:db:e7:e9:d1:15:39:4a:
         3e:7f:9b:d5:32:93:92:63:8e:de:6f:06:9b:57:e4:d4:90:4c:
         20:9e:cc:cd:68:e0:80:7d:58:fd:4d:1b:9e:fa:fa:13:ee:4a:
         6c:1b:06:d2:6b:ab:cc:d0:fd:4a:98:96:b3:94:28:34:7e:4f:
         94:88:24:72:44:84:d8:75:de:ad:f6:47:aa:a4:cc:c7:04:15:
         ec:ce:23:18:4b:cd:f1:37:4c:91:47:c3:9f:11:d2:48:7a:5c:
         ed:7b:d6:8f:af:13:fc:6c:a4:a8:02:8f:62:32:d5:89:0c:b1:
         c5:92:b3:fc:d1:d0:2d:8a:dc:88:24:30:04:13:1d:80:0c:26:
         4b:4a:7a:97:2b:ea:29:53:ec:29:45:52:82:38:89:5c:8b:a9:
         9c:2b:4f:de:18:de:50:eb:86:53:53:1e:91:47:13:88:17:08:
         a4:7a:f2:0d:71:45:79:d8:89:f3:b4:84:2e:40:81:5f:39:c5:
         1f:fe:60:44:7d:d1:1e:24:ec:e9:03:7e:cc:b5:0d:b8:49:d6:
         70:55:34:bb:4e:1f:63:72:96:46:f5:27:32:ff:c0:41:84:f8:
         08:58:81:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:25:21 2026 by rpki-client