Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a24da71-d810-36be-8ba8-08403dd9cb30.roa
File:                     2a24da71-d810-36be-8ba8-08403dd9cb30.roa (raw, json)
Hash identifier:          zHwdRSY1CX/aEInSYP9hZhyfZpa0/DRJ1YJz3qhi+ok=
Subject key identifier:   03:55:FD:69:88:F6:BD:11:C4:D6:EF:26:88:38:D5:41:55:43:5C:9D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1B1A5EFC86558F8B771A8D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a24da71-d810-36be-8ba8-08403dd9cb30.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.19.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:5e:fc:86:55:8f:8b:77:1a:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=a9c9a638-452e-443f-aab7-b495bbeb1540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:a5:77:80:19:35:ed:5f:90:ba:28:6d:36:
                    49:2a:3d:b7:a5:c6:0c:c5:99:1f:bd:31:3f:12:1b:
                    f0:53:7d:d4:0a:bc:19:19:6c:54:7d:ee:bb:89:ad:
                    ff:55:04:dc:c1:3d:92:05:a9:bf:7a:47:1c:75:35:
                    71:ca:51:ca:c5:0e:dc:ef:2e:fc:00:4d:4e:ed:b0:
                    3c:bb:7b:12:5d:10:fc:b5:2d:19:f2:0b:9d:8a:48:
                    fc:53:21:63:8f:45:33:de:d3:da:39:34:e1:d1:b2:
                    bf:25:20:77:f2:82:43:ea:7e:63:5d:a3:51:55:98:
                    41:a9:cf:90:11:07:b2:49:4b:d8:99:42:38:75:4f:
                    f6:c6:c9:35:a6:7d:20:e0:60:1c:59:1a:e8:0e:bb:
                    66:a0:48:ab:95:17:58:4d:0d:34:35:59:4d:21:77:
                    7e:af:90:e4:01:84:c3:43:c3:b4:1f:37:2e:fb:a5:
                    48:de:e0:80:f7:70:c4:1d:e9:7f:dc:30:97:30:e0:
                    06:4c:ae:06:0d:88:38:5a:70:54:24:41:fb:8c:84:
                    c3:32:c7:79:a5:af:c1:2f:e3:f4:41:9d:9f:82:38:
                    55:4d:b9:ea:b5:86:c5:a4:48:35:db:d7:de:5f:df:
                    01:f7:cf:0e:b4:2e:4e:b3:e9:87:8e:e4:aa:17:d5:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:55:FD:69:88:F6:BD:11:C4:D6:EF:26:88:38:D5:41:55:43:5C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a24da71-d810-36be-8ba8-08403dd9cb30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:45:b6:27:08:ea:c2:6f:de:1c:ef:fe:4f:55:42:b3:ab:7a:
         7f:11:cb:d7:7b:f9:2d:c8:9e:16:e2:f8:6d:44:01:fe:53:0d:
         37:e9:82:bd:46:7f:80:83:96:07:cc:2b:c8:7b:e4:b6:8a:fa:
         67:94:ba:01:d0:17:ca:18:bf:84:3e:02:04:b4:cb:f3:51:68:
         35:c0:4d:7a:eb:e6:43:3e:f3:7c:9e:dc:82:64:ee:6a:7f:a0:
         c3:3a:57:a2:bd:1d:86:eb:7e:d6:23:01:29:f5:d1:8b:ac:74:
         8c:87:91:66:d0:ac:05:b7:4d:23:bd:47:e0:78:a3:4e:7a:bb:
         21:1c:41:da:a1:95:fa:37:af:21:a4:a3:e9:4a:3e:43:68:5f:
         fe:e0:ab:a1:ef:7b:8c:73:43:53:33:27:4b:26:91:13:7c:7a:
         25:7d:25:d2:e6:40:e6:cc:6d:35:21:74:dc:88:91:dd:a3:2b:
         19:01:18:8d:8b:f8:a7:81:cf:ca:9a:b7:d1:79:8d:28:a2:b1:
         78:ee:1d:48:23:1f:90:b6:be:a2:b1:01:52:5b:30:d6:31:58:
         9a:2c:5f:5b:30:82:9e:e1:dd:44:3a:a9:22:a1:b7:ac:46:3d:
         2e:e7:50:9f:e1:09:c3:ad:9e:93:85:a3:d5:22:d4:40:4b:1d:
         d8:35:72:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGl78hlWPi3cajQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
YTljOWE2MzgtNDUyZS00NDNmLWFhYjctYjQ5NWJiZWIxNTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0uld4AZNe1fkLoobTZJKj23pcYMxZkfvTE/
EhvwU33UCrwZGWxUfe67ia3/VQTcwT2SBam/ekccdTVxylHKxQ7c7y78AE1O7bA8
u3sSXRD8tS0Z8gudikj8UyFjj0Uz3tPaOTTh0bK/JSB38oJD6n5jXaNRVZhBqc+Q
EQeySUvYmUI4dU/2xsk1pn0g4GAcWRroDrtmoEirlRdYTQ00NVlNIXd+r5DkAYTD
Q8O0Hzcu+6VI3uCA93DEHel/3DCXMOAGTK4GDYg4WnBUJEH7jITDMsd5pa/BL+P0
QZ2fgjhVTbnqtYbFpEg129feX98B988OtC5Os+mHjuSqF9Up2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFANV/WmI9r0RxNbvJog41UFVQ1ydMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmEyNGRhNzEtZDgxMC0z
NmJlLThiYTgtMDg0MDNkZDljYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRO3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5FticI6sJv3hzv/k9VQrOren8Ry9d7+S3Inhbi+G1EAf5TDTfpgr1G
f4CDlgfMK8h75LaK+meUugHQF8oYv4Q+AgS0y/NRaDXATXrr5kM+83ye3IJk7mp/
oMM6V6K9HYbrftYjASn10YusdIyHkWbQrAW3TSO9R+B4o056uyEcQdqhlfo3ryGk
o+lKPkNoX/7gq6Hve4xzQ1MzJ0smkRN8eiV9JdLmQObMbTUhdNyIkd2jKxkBGI2L
+KeBz8qat9F5jSiisXjuHUgjH5C2vqKxAVJbMNYxWJosX1swgp7h3UQ6qSKht6xG
PS7nUJ/hCcOtnpOFo9Ui1EBLHdg1csU=
-----END CERTIFICATE-----
Generated at Thu Mar 12 03:44:34 2026 by rpki-client