Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31ce5d12-41df-3e90-a6ba-a79c0530d407.roa
File:                     31ce5d12-41df-3e90-a6ba-a79c0530d407.roa (raw, json)
Hash identifier:          SA0ZpZNubRfttRKg+kWXBdiKJVjZlIjzPfdYREHhgUI=
Subject key identifier:   34:8F:2D:E6:F1:5E:45:DA:0B:60:1E:FB:A6:6E:3E:A5:96:8C:15:B3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DAF101B3EEFD712F21EB4D880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31ce5d12-41df-3e90-a6ba-a79c0530d407.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        173.18.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:1b:3e:ef:d7:12:f2:1e:b4:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=a99548c3-e057-42e2-bf13-53a8d52d9dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:fa:06:95:de:94:98:9f:b0:03:8d:9a:60:
                    bc:5c:83:4d:bf:6c:0d:ae:c8:e6:40:ed:ae:b3:7e:
                    0c:db:16:c2:83:61:6b:36:59:a7:69:3c:c4:c3:38:
                    bf:15:53:b2:65:16:70:83:6d:4e:09:07:51:ad:78:
                    24:06:9a:11:d5:5c:dd:ab:30:7e:87:1f:fe:c9:99:
                    65:cb:72:80:65:32:1a:1b:66:36:d5:a8:0a:54:08:
                    77:e2:d4:42:44:d4:7d:e9:ca:74:99:2c:43:34:b2:
                    8c:bf:b7:07:62:62:7e:70:3c:ae:af:9c:c8:ac:9b:
                    ee:af:68:12:23:af:af:24:14:13:51:03:6c:9a:07:
                    56:9b:bb:ec:2b:48:ef:7b:b7:e7:d5:b7:53:53:0b:
                    63:25:b9:60:54:33:66:21:dc:0b:c0:0d:c3:d5:07:
                    ac:81:2e:a7:d1:9d:19:b4:0b:44:b3:0f:56:c9:5f:
                    35:98:51:ab:ab:c9:55:c3:fd:25:92:ae:8e:48:9f:
                    a4:36:4f:46:6c:5f:a5:4d:98:33:df:ac:db:26:02:
                    c3:b2:33:6e:20:71:06:3e:3e:f0:2c:19:e6:34:e9:
                    fb:c2:95:d3:dd:a1:55:9e:2e:02:19:22:7a:6c:25:
                    6b:cd:dc:c7:f2:af:60:03:a9:b7:d3:88:bb:45:36:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8F:2D:E6:F1:5E:45:DA:0B:60:1E:FB:A6:6E:3E:A5:96:8C:15:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31ce5d12-41df-3e90-a6ba-a79c0530d407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:27:72:1e:56:82:c9:b1:e3:f7:3e:2b:48:35:df:90:40:b5:
         ed:e8:c4:15:e5:f5:58:e4:0a:7f:5a:71:14:df:ee:af:fe:a4:
         4f:21:e1:05:8d:40:18:5d:76:ae:c1:71:25:91:38:62:7f:3c:
         90:d1:6e:84:b3:90:a2:4b:36:58:bf:72:c5:84:5d:e8:24:10:
         44:e4:7c:50:a3:bc:55:37:cd:82:db:59:33:f4:d7:b7:80:be:
         d7:b7:7a:15:95:08:14:73:80:63:87:e4:37:ed:8a:61:d9:0c:
         5b:54:f4:62:ea:e6:83:2f:24:9e:41:f3:80:9e:1e:45:88:0e:
         5d:4a:71:69:9b:7a:cf:73:2c:6e:35:48:6a:13:4c:5e:ad:bf:
         c9:fd:78:55:ba:f9:49:40:e4:9f:23:5b:e5:9a:42:92:29:85:
         94:d8:59:e2:48:d6:a5:b9:06:a2:f6:89:a9:2b:75:46:31:af:
         f3:01:d8:3f:93:2f:3c:87:49:7d:76:97:e4:c1:03:c2:1f:50:
         4b:4b:55:d6:b4:cf:90:28:a9:42:bc:e7:81:42:f8:5d:0f:c6:
         29:f3:3d:6a:62:db:6b:42:e0:11:96:c5:fa:4c:6e:76:f7:e1:
         18:31:f3:4e:3e:98:21:2a:8d:95:6d:61:5f:ee:71:72:e1:49:
         f7:c5:cd:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEBs+79cS8h602IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk
YTk5NTQ4YzMtZTA1Ny00MmUyLWJmMTMtNTNhOGQ1MmQ5ZGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulH6BpXelJifsAONmmC8XINNv2wNrsjmQO2u
s34M2xbCg2FrNlmnaTzEwzi/FVOyZRZwg21OCQdRrXgkBpoR1VzdqzB+hx/+yZll
y3KAZTIaG2Y21agKVAh34tRCRNR96cp0mSxDNLKMv7cHYmJ+cDyur5zIrJvur2gS
I6+vJBQTUQNsmgdWm7vsK0jve7fn1bdTUwtjJblgVDNmIdwLwA3D1QesgS6n0Z0Z
tAtEsw9WyV81mFGrq8lVw/0lkq6OSJ+kNk9GbF+lTZgz36zbJgLDsjNuIHEGPj7w
LBnmNOn7wpXT3aFVni4CGSJ6bCVrzdzH8q9gA6m304i7RTbCPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSPLebxXkXaC2Ae+6ZuPqWWjBWzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzFjZTVkMTItNDFkZi0z
ZTkwLWE2YmEtYTc5YzA1MzBkNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYnch5Wgsmx4/c+K0g135BAte3oxBXl9VjkCn9acRTf7q/+pE8h4QWN
QBhddq7BcSWROGJ/PJDRboSzkKJLNli/csWEXegkEETkfFCjvFU3zYLbWTP017eA
vte3ehWVCBRzgGOH5DftimHZDFtU9GLq5oMvJJ5B84CeHkWIDl1KcWmbes9zLG41
SGoTTF6tv8n9eFW6+UlA5J8jW+WaQpIphZTYWeJI1qW5BqL2iakrdUYxr/MB2D+T
LzyHSX12l+TBA8IfUEtLVda0z5AoqUK854FC+F0PxinzPWpi22tC4BGWxfpMbnb3
4Rgx804+mCEqjZVtYV/ucXLhSffFzXk=
-----END CERTIFICATE-----
Generated at Fri May 8 20:27:39 2026 by rpki-client