Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223021f3-e1cd-3b6d-a238-c230b97e42a8.roa
File:                     223021f3-e1cd-3b6d-a238-c230b97e42a8.roa (raw, json)
Hash identifier:          mgBK42d+b5HjMHxXmMKJ2Xcd3lp2T7bL3g1uaqGL8es=
Subject key identifier:   C7:42:DE:1D:6F:A3:0C:9B:6D:44:EA:36:7A:EA:CD:BC:52:99:85:F1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E428F1E9D4605F3187CD50280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223021f3-e1cd-3b6d-a238-c230b97e42a8.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     19905
IP address blocks:        173.16.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:1e:9d:46:05:f3:18:7c:d5:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=f16e2c49-b7db-40ca-8424-bb15cd6dedb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:14:12:e3:c2:45:f4:20:15:45:d1:20:86:
                    03:9a:45:82:f2:c3:da:e9:54:df:62:32:94:a1:66:
                    ac:bb:46:01:53:cf:d8:9d:9a:66:0b:6b:5a:71:b4:
                    09:4f:6e:f8:e9:41:5d:98:73:65:b4:fe:5d:29:f6:
                    01:86:da:f6:40:7c:8d:6e:c6:94:27:71:b8:7f:2a:
                    54:9d:7e:f5:ba:0f:ea:cc:ef:d7:b9:25:9e:3e:c4:
                    15:27:44:43:d5:c9:56:1b:0d:5e:9b:e8:0d:a9:5f:
                    3f:60:a5:68:e0:4a:5a:3f:c9:34:c2:41:8d:84:db:
                    34:4c:2e:68:de:2d:7e:af:15:86:b8:e6:f8:f7:dc:
                    f0:b1:36:5a:0e:2f:04:d6:84:d0:5f:10:86:45:fe:
                    7a:ec:8d:eb:32:d2:2e:ad:8a:9a:5e:67:18:8a:a9:
                    5e:7e:fa:97:57:d1:bc:99:f3:4e:15:19:6c:5a:ec:
                    ff:0c:ce:b6:e0:49:be:60:ca:f6:e2:60:61:49:c8:
                    7a:24:67:94:57:16:99:1e:3d:d9:a6:f2:00:07:b0:
                    ef:20:6b:00:32:ad:2e:4d:df:fa:b9:2b:0c:a4:bf:
                    07:54:c7:b8:6a:35:30:b8:77:5b:d5:30:d1:0b:02:
                    b2:56:45:6f:8e:00:bf:db:f1:51:cc:6f:6f:e4:df:
                    3a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:42:DE:1D:6F:A3:0C:9B:6D:44:EA:36:7A:EA:CD:BC:52:99:85:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223021f3-e1cd-3b6d-a238-c230b97e42a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:45:e0:dd:76:b6:0f:7a:09:2e:f2:c8:4a:5d:d1:1e:40:
         46:d6:88:77:d9:00:1b:35:14:3c:e0:ff:39:b8:fb:a8:99:9f:
         b4:82:42:0a:e9:3d:32:4f:b0:9d:78:7c:b3:0b:79:ee:ed:cc:
         3e:96:3a:5d:f1:05:32:29:d1:7f:5c:b9:69:cf:9e:ed:bc:72:
         83:3e:a3:22:8c:ed:81:33:f2:90:65:af:d1:40:2f:d3:8c:63:
         ef:42:b4:07:f3:8f:6e:40:69:e4:c0:ec:de:dc:73:9e:57:93:
         c2:10:30:b7:9b:d9:b1:19:e2:5b:56:0e:8b:bf:5b:61:2f:f1:
         c9:1d:e1:76:89:89:7f:ca:71:b3:75:f5:26:7d:31:10:71:77:
         ff:6d:3f:42:03:c7:aa:ad:47:26:d9:78:01:86:4c:12:f2:a6:
         67:0b:00:8a:1c:fc:2a:eb:69:9b:09:c2:1d:05:5b:bb:b9:3c:
         ff:11:14:c0:27:6c:1f:da:2e:4e:25:e0:fd:bc:32:09:3b:0d:
         3d:70:e9:0e:e1:5e:89:d8:5d:a9:00:69:4f:ce:ad:cf:73:d3:
         e2:af:3b:29:f7:fc:15:c1:43:32:50:4e:0c:fc:eb:1e:ea:63:
         e9:22:bc:e2:01:62:07:c9:a5:78:e3:7c:bf:e2:e2:fd:c1:89:
         d9:3f:bd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 05:27:28 2026 by rpki-client