Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f4b7779-7c29-3d09-986c-a7b587cc8892.roa
File:                     4f4b7779-7c29-3d09-986c-a7b587cc8892.roa (raw, json)
Hash identifier:          1hWW+L7Ie8hNrCS24bP0A9EuqczmY4tq7MJCifYCg6c=
Subject key identifier:   77:0F:B6:E6:8B:3A:FA:57:F3:FC:DC:F3:CA:6B:E2:CA:23:38:64:A8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D8EF553B7C6196BDA947C4F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f4b7779-7c29-3d09-986c-a7b587cc8892.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     19905
IP address blocks:        173.28.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:53:b7:c6:19:6b:da:94:7c:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b995347c-f457-4ed8-ab0d-48cf283d562c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:05:f7:7b:71:ea:5f:25:59:00:70:d3:76:
                    b8:00:4d:19:ad:5e:3a:a5:e8:66:cc:a6:cc:92:27:
                    04:d6:1d:04:94:3e:72:cf:e7:01:20:07:c5:79:35:
                    dc:43:2d:93:68:cc:41:a9:4c:45:d8:ef:5e:44:1b:
                    ee:57:36:63:95:20:4c:bd:da:ff:0b:ef:de:72:42:
                    49:ea:d8:71:2a:76:72:8c:58:d0:b8:4d:28:94:fb:
                    f8:91:ae:39:62:3f:f2:64:c2:e7:8d:d0:88:16:72:
                    95:29:b7:96:b5:81:5a:6c:24:1d:87:1c:4f:e8:bd:
                    eb:14:de:18:04:a8:48:18:10:5a:a8:ff:b4:cf:16:
                    c5:8d:5a:ee:7f:f7:c4:d1:ad:2b:24:b8:12:2e:ff:
                    f1:11:64:a6:d9:6d:06:7e:dd:70:a3:73:8e:b9:5d:
                    a5:82:d4:65:a9:30:29:c9:7e:72:64:07:a2:c1:c8:
                    df:6b:e9:7d:20:c7:5b:eb:3c:3e:38:83:cf:9e:b1:
                    1d:67:7a:2d:f7:34:00:39:b1:e5:f0:db:dd:59:06:
                    dd:db:58:c6:ff:de:0c:bf:77:aa:94:0b:43:6c:a6:
                    0b:6e:63:13:a0:fa:77:17:02:37:8c:69:f0:97:1c:
                    23:9a:ae:87:56:35:e9:8c:d7:1d:63:82:5e:f6:ab:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0F:B6:E6:8B:3A:FA:57:F3:FC:DC:F3:CA:6B:E2:CA:23:38:64:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f4b7779-7c29-3d09-986c-a7b587cc8892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:aa:31:a1:1e:21:f4:16:7f:46:eb:19:95:3a:f6:9b:8a:8f:
         53:54:af:d9:b6:9b:cd:ae:2b:9d:19:ba:ae:52:47:65:31:cf:
         68:6a:e1:a9:8c:2e:d1:11:be:df:61:40:30:5d:22:18:5f:58:
         dc:8e:00:c2:8f:2b:4d:4c:49:f0:9e:e3:1e:de:3e:aa:40:f3:
         af:04:94:a8:fa:ab:b2:e3:12:db:9e:fb:08:92:ca:46:89:7e:
         27:6e:f4:d3:c5:ab:d4:be:66:13:db:4f:bd:01:21:1e:d8:32:
         6c:67:31:85:a3:72:76:5d:06:dc:94:8d:e4:5d:f8:f3:64:e3:
         bd:8e:2d:d3:06:a0:d2:d4:93:3b:c1:e8:4a:88:96:08:21:71:
         20:1f:bc:56:78:fe:d5:77:f5:fb:54:da:80:44:55:6f:dc:44:
         52:72:64:c9:8e:85:94:bb:4d:0c:c4:94:39:ff:3d:07:fa:3a:
         b6:51:f1:91:47:b9:35:77:de:62:a0:bd:38:20:09:97:c8:0f:
         92:7e:8a:48:34:c8:c9:8a:36:73:5b:6e:37:7b:31:7f:1e:70:
         cc:1e:dc:3a:fd:3d:8c:6b:f7:ce:67:d1:92:6d:2c:e8:ce:d4:
         a8:d0:9c:c7:2e:84:08:6c:05:83:0f:95:0d:9d:0b:9c:b4:7f:
         07:be:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:27:40 2026 by rpki-client