Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a56466f-57f5-31a3-89ea-edd32c8a34e3.roa
File:                     0a56466f-57f5-31a3-89ea-edd32c8a34e3.roa (raw, json)
Hash identifier:          7caHj+jNcDWZvcFj4QH7t0GRP8PPhZYf/JihR02M1pg=
Subject key identifier:   1C:7C:4F:E2:F1:F6:29:7A:89:5C:12:EA:B3:E0:D0:56:4C:CE:79:9F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5FC802EA034C83B2E8147D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a56466f-57f5-31a3-89ea-edd32c8a34e3.roa
Signing time:             Sat 03 Oct 2026 01:00:12 +0000
ROA not before:           Sat 03 Oct 2026 01:00:12 +0000
ROA not after:            Fri 01 Jan 2027 02:00:12 +0000
asID:                     19905
IP address blocks:        173.19.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:c8:02:ea:03:4c:83:b2:e8:14:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:12 2026 GMT
            Not After : Jan  1 02:00:12 2027 GMT
        Subject: CN=b00963cf-d020-453c-a2d8-2018d750f18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:d6:78:09:31:f4:f8:dc:09:cb:a5:1e:38:
                    70:b6:43:da:13:e4:0b:67:47:d6:71:ab:04:9e:41:
                    2c:d6:fb:c5:1f:3b:d9:fe:bb:64:80:57:47:9b:48:
                    fb:bf:4b:ac:56:6f:b7:9b:43:ee:67:91:e4:92:23:
                    a8:1d:86:eb:3f:b4:2a:e9:af:1a:b7:32:7e:56:8f:
                    f7:c7:77:95:88:15:df:64:48:f2:b5:f0:48:d8:dc:
                    b4:11:62:d9:e8:4c:db:94:d2:04:cd:57:fc:59:df:
                    cb:b0:b0:e9:67:60:b2:f7:49:e9:f2:cb:c4:d7:3a:
                    45:c5:d3:c4:61:6e:02:d8:ba:db:1c:d8:cf:ef:cb:
                    83:35:57:cf:0d:25:46:28:89:b9:7b:3f:8f:8d:d2:
                    b5:ef:f4:20:aa:e0:f5:a7:93:25:97:94:2c:d0:3d:
                    5f:c2:84:89:4e:a5:31:6a:cf:54:85:39:f2:c3:ee:
                    eb:d9:64:e0:e7:db:e0:6b:7c:60:92:1f:b8:a6:0e:
                    ed:b0:43:c7:7a:59:ed:1a:14:a6:c7:38:4e:5f:de:
                    91:6d:ed:3d:7a:e0:25:91:0b:21:c6:58:a8:52:40:
                    cf:da:c9:5f:73:4b:9e:49:d1:1c:60:ee:7b:05:99:
                    af:3e:9e:eb:ab:f4:7c:3f:f8:e9:67:52:93:7f:31:
                    53:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7C:4F:E2:F1:F6:29:7A:89:5C:12:EA:B3:E0:D0:56:4C:CE:79:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a56466f-57f5-31a3-89ea-edd32c8a34e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:80:58:64:21:7f:de:4d:4b:97:ba:60:d9:e1:14:38:5d:2c:
         11:ae:03:a9:f8:88:82:fe:56:05:8c:b8:3d:5a:ba:89:55:bd:
         4c:18:07:07:0c:48:37:73:1f:ec:9d:16:97:6e:50:15:f2:8a:
         24:9f:ff:30:60:48:fa:10:b3:d5:a9:3c:1a:10:f1:ca:07:f6:
         1c:ff:39:fb:74:ce:dd:8b:1a:b0:ce:85:ff:a7:a4:24:b0:f6:
         03:c8:fe:b6:13:3e:8f:ab:6c:85:5a:82:5a:97:a6:cd:87:61:
         9b:0c:53:40:96:b5:f8:46:8d:2c:da:74:4a:59:9f:93:f9:09:
         8a:ab:f6:9c:98:b2:93:f2:83:a3:2a:23:36:52:b3:1f:31:28:
         8b:6c:88:15:a8:cb:90:96:4f:85:08:e9:9d:8a:64:ea:32:51:
         fa:db:64:75:ae:b6:cf:a1:dd:89:11:0c:88:27:40:96:36:bb:
         9e:db:ca:47:15:fa:c0:c6:d1:c0:23:0b:b9:07:0e:6d:91:87:
         aa:ed:f4:38:6b:9c:f4:8f:74:19:5d:f5:52:2a:56:03:50:a1:
         b6:07:d2:e3:50:cc:17:6a:c3:55:3a:30:3d:3d:86:be:03:80:
         c2:a6:04:6b:4c:3b:bc:a5:62:a3:53:f4:70:de:d8:71:71:e8:
         dd:94:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:30:32 2026 by rpki-client