Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98980a13-a025-3bc5-9d0e-77f5adac4ba9.roa
File:                     98980a13-a025-3bc5-9d0e-77f5adac4ba9.roa (raw, json)
Hash identifier:          WyegOeYdR/EgpiNo9wE7G5G1D5I29t5j/UwXUpWqNWQ=
Subject key identifier:   39:DC:37:0F:A6:0C:B2:3A:AD:D5:F3:8C:1D:B5:F1:67:0D:C7:B6:0C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DFBC031DE318EB307F0E8BB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98980a13-a025-3bc5-9d0e-77f5adac4ba9.roa
Signing time:             Thu 28 May 2026 12:16:43 +0000
ROA not before:           Thu 28 May 2026 12:16:43 +0000
ROA not after:            Wed 26 Aug 2026 12:16:43 +0000
asID:                     19905
IP address blocks:        173.17.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:c0:31:de:31:8e:b3:07:f0:e8:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 28 12:16:43 2026 GMT
            Not After : Aug 26 12:16:43 2026 GMT
        Subject: CN=b49220b1-b7b6-4125-a530-b340d135d6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:84:ba:ae:97:b0:f7:7b:a7:33:54:58:dc:e7:
                    53:ee:bb:9b:ed:13:57:ff:a6:a3:21:64:25:97:64:
                    d0:62:48:e2:b0:96:d6:11:16:2e:04:0f:01:8f:11:
                    01:69:4e:fc:60:68:e5:3a:ff:43:f4:3f:80:8d:ed:
                    ea:7b:a7:4a:93:67:eb:8b:10:9b:09:76:f7:59:c0:
                    55:41:88:60:20:46:c1:11:50:f9:9d:18:81:25:bb:
                    a4:a3:78:d4:49:fa:6b:ba:54:05:19:18:bd:9c:48:
                    c4:b1:60:c2:8e:71:61:2b:6a:42:ab:54:03:90:95:
                    30:8f:5d:bb:3a:f9:61:40:59:34:e9:5d:25:07:21:
                    23:3e:af:1d:80:c7:c0:b9:2a:7f:3c:06:6d:75:a8:
                    a4:ad:9f:7a:f1:f1:74:e6:d2:56:f9:f1:e2:05:ab:
                    8c:cb:1e:f1:22:37:62:09:30:43:8e:e5:a8:69:75:
                    c7:ba:02:0f:15:28:a0:82:25:23:1c:f6:dc:2f:73:
                    b7:58:8d:31:f0:60:44:3d:24:3a:bf:e6:80:f5:ea:
                    65:86:7d:6b:96:7b:03:77:c5:6a:45:21:f9:56:72:
                    d3:33:87:4d:3d:25:f8:ab:50:03:36:82:9c:b3:8a:
                    c8:2f:3b:74:fc:b1:da:91:33:66:84:c3:69:e0:6c:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DC:37:0F:A6:0C:B2:3A:AD:D5:F3:8C:1D:B5:F1:67:0D:C7:B6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98980a13-a025-3bc5-9d0e-77f5adac4ba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:60:ed:ae:bc:e2:a8:60:a7:11:fc:3f:65:de:37:64:0f:bb:
         f4:f1:41:f9:2b:1a:6b:60:90:1b:bc:a7:2c:50:ef:7f:b8:b0:
         e9:8c:77:d5:7b:32:f3:0c:32:6a:f6:88:7f:4d:98:dc:d2:e7:
         c2:46:a9:5c:67:32:63:39:ac:f4:4d:bd:a1:0e:96:5d:42:84:
         8e:67:64:5e:c0:37:ee:98:95:1c:fe:c2:a0:4c:65:44:c5:b5:
         3d:4b:2b:3c:a7:1c:6b:e6:37:22:b0:2e:5d:34:99:96:39:94:
         38:e8:6c:94:77:d7:b7:4a:02:4d:2d:68:24:d7:35:5c:a4:2c:
         45:2c:19:83:c6:66:cb:42:98:ed:67:f0:19:c4:b6:b2:1f:13:
         21:3c:e8:43:91:3f:0c:2f:43:25:d8:55:a1:97:27:14:6b:5a:
         42:02:d0:02:06:00:c7:fe:33:48:2b:a1:dd:e3:63:84:55:eb:
         2a:a5:a2:47:fc:6b:a1:1b:df:c9:fe:74:b8:76:77:ba:f0:c2:
         60:85:5c:af:50:e3:28:fc:bc:df:9a:f7:a9:19:2d:9d:9a:7f:
         6d:11:9d:e3:63:c2:be:ee:b9:b3:75:62:ce:9a:fa:5b:b1:7f:
         8a:f2:ba:f1:fa:6d:fd:05:7f:81:68:2c:ce:0b:73:5e:2e:83:
         d1:37:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:19:31 2026 by rpki-client