Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a395275-0fee-3da9-85b9-ecef31eb44cd.roa
File:                     0a395275-0fee-3da9-85b9-ecef31eb44cd.roa (raw, json)
Hash identifier:          SDscL0mH54XME9w1WY8tsl6lTecsMIFRNKuYeM7CNa8=
Subject key identifier:   6F:5F:2F:F1:9E:12:0A:0A:11:19:51:D3:A8:84:58:CC:AF:E1:1D:82
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DF3584A16E739F3E393E8EF98
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a395275-0fee-3da9-85b9-ecef31eb44cd.roa
Signing time:             Mon 25 May 2026 12:00:54 +0000
ROA not before:           Mon 25 May 2026 12:00:54 +0000
ROA not after:            Sun 23 Aug 2026 12:00:54 +0000
asID:                     19905
IP address blocks:        173.28.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:58:4a:16:e7:39:f3:e3:93:e8:ef:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 25 12:00:54 2026 GMT
            Not After : Aug 23 12:00:54 2026 GMT
        Subject: CN=832d1114-cc57-41ea-87e4-0beca1cd8ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:cf:b7:a3:34:0b:d5:a1:51:be:12:f7:ee:
                    38:b5:52:23:6b:c1:95:4b:e4:4c:d1:48:67:6f:0c:
                    0b:04:cd:44:4c:84:2f:4f:cc:c9:5e:21:94:26:52:
                    0d:63:db:ce:1f:de:f1:21:86:67:fa:52:2d:0a:3f:
                    e0:f7:67:6e:1c:b7:cb:41:34:0a:bd:5e:1c:58:01:
                    07:83:72:d6:e2:33:d1:c4:7d:c9:16:46:8d:8d:e5:
                    23:14:d1:bb:e6:80:ba:d2:b2:49:14:ee:0d:a0:24:
                    be:2a:ba:71:75:b7:02:80:20:7b:83:1c:4f:ca:e1:
                    bf:13:ba:d5:54:8c:4f:99:9d:df:10:50:33:9b:10:
                    7c:77:a4:e0:59:6a:eb:a0:e0:32:94:a8:af:92:0a:
                    1b:f5:91:7d:42:c6:b7:b6:a1:b3:90:ae:b6:52:e7:
                    a9:25:ad:4e:8a:de:43:5e:26:1b:42:25:89:5b:23:
                    3e:b6:0b:83:50:ff:a5:af:fb:44:b8:df:2a:0d:85:
                    39:40:82:78:2e:0a:8b:59:6a:7d:18:f9:66:8f:7e:
                    50:e3:4a:e1:11:98:f9:fc:fc:7d:45:d2:4b:3e:8f:
                    6e:5f:48:6d:44:58:57:02:c1:7f:e0:40:2d:3a:ac:
                    04:40:aa:e0:77:60:ee:b1:0f:4f:73:dd:db:9d:b0:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5F:2F:F1:9E:12:0A:0A:11:19:51:D3:A8:84:58:CC:AF:E1:1D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a395275-0fee-3da9-85b9-ecef31eb44cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3a:fe:69:d7:1d:5e:af:18:f2:29:8d:d5:90:dc:1a:28:4b:
         04:a2:03:42:2e:28:91:b2:b9:ec:1d:3d:e5:f8:f3:72:3b:d2:
         b7:a9:08:17:0a:7a:f2:fe:6c:b1:9b:e2:95:93:c0:d8:07:12:
         29:16:55:f9:64:30:92:c1:66:d7:e9:c6:b8:cb:42:54:34:d3:
         67:f4:d2:20:6b:6e:ca:c7:91:d4:bd:1f:28:0c:53:48:82:a4:
         7b:c9:de:82:f0:fe:0f:fd:26:4d:9a:2b:dc:23:35:14:f2:94:
         11:5a:6e:ad:23:e6:a4:7c:01:6d:a8:ea:8a:14:ad:e0:f8:da:
         1f:98:4f:07:ac:c1:8c:8a:84:ff:66:72:6f:5f:32:06:b0:b5:
         d6:50:54:d7:16:47:33:54:c4:f2:dc:e7:e7:a5:06:1a:c5:80:
         e1:45:ea:44:68:2b:b6:9f:a3:30:f2:ae:4f:6d:9a:b2:3b:02:
         db:b6:11:69:9e:8a:01:9f:f4:c4:46:6c:b2:ca:c5:4d:5c:67:
         10:78:80:44:23:32:7b:93:22:19:0d:a4:5d:e0:5d:ac:01:6a:
         09:f5:8c:95:95:11:7a:a2:dc:bc:72:a4:84:dd:77:98:75:2a:
         88:10:17:5a:6c:86:24:5d:b2:92:04:05:36:ef:08:2e:de:44:
         ce:64:0c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:29 2026 by rpki-client