Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
File:                     9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa (raw, json)
Hash identifier:          KNIJjhzP8a3oX31Lgk9/uOHaEtaxREJUgzR6LqPz5O0=
Subject key identifier:   61:65:78:D2:48:9F:82:32:FB:D5:51:22:39:7F:6A:EA:E5:5A:6D:0E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A043F19607387E964C800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.19.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:04:3f:19:60:73:87:e9:64:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=9a9fb0c7-a17c-4726-93df-cd100ea074ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5e:88:bb:46:77:a1:ba:ab:e6:e0:be:7e:9f:
                    55:42:3d:3b:2c:78:fc:45:a2:dc:ef:87:28:e3:ba:
                    fe:e2:c8:c0:4d:6e:5a:2f:19:cd:d2:c5:c3:9a:56:
                    64:09:6b:3f:0d:a9:34:4c:81:5e:66:e4:4f:cc:98:
                    41:7e:33:95:85:86:00:5c:e1:06:1e:86:ef:28:a5:
                    b7:9c:9e:61:fa:df:70:0b:f8:d2:32:3c:23:92:fa:
                    b9:da:78:45:ed:13:e6:2d:85:13:9b:0b:d1:77:f2:
                    cd:9e:c5:fb:a1:e6:f3:a1:d7:e0:23:b2:e6:09:5e:
                    32:01:d6:87:5e:49:84:14:c9:9b:2c:b5:ae:9d:11:
                    ed:3a:e3:80:1d:e7:a3:85:1a:62:47:f5:4b:f2:f3:
                    ca:a8:55:08:ea:c8:79:80:a5:73:66:37:87:47:08:
                    3b:f6:4d:c3:32:85:b8:a6:e4:56:2d:9f:ea:07:17:
                    3e:ce:70:30:58:1d:c7:87:b9:f9:8a:09:dd:cd:ee:
                    d0:9c:09:9c:4e:98:dd:83:47:f5:5c:ad:a5:61:1c:
                    ce:aa:7f:98:bb:cc:1b:df:73:d0:43:2b:08:69:08:
                    cb:b8:0d:c3:a9:20:db:1d:e6:14:94:54:91:a3:28:
                    d2:d2:b9:e8:5b:dc:64:be:6a:a6:e8:91:59:a7:5a:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:78:D2:48:9F:82:32:FB:D5:51:22:39:7F:6A:EA:E5:5A:6D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:64:2a:d5:18:fa:fe:e7:0e:76:f0:61:e8:6d:42:c7:11:66:
         0b:0e:28:0c:51:b9:b1:b0:e6:31:b6:9e:8e:0d:8c:e3:72:85:
         aa:cd:8d:e3:a9:6d:0e:b3:eb:28:73:b1:b9:53:59:f3:d7:3c:
         d1:0e:cb:11:49:01:7c:04:d7:f8:b7:d0:d9:1d:66:c7:04:7b:
         28:35:80:e8:e8:19:3c:19:12:18:6c:c8:8f:15:41:db:4f:de:
         fb:e6:a7:9a:d2:fc:8b:44:bb:81:1e:96:57:96:da:9e:8b:14:
         b9:99:2e:24:4c:e2:e2:51:43:99:3a:d8:46:c1:c2:44:3d:09:
         0e:0f:22:87:a5:13:b1:b4:64:eb:b0:34:71:8a:3c:1e:a7:a6:
         4e:cf:43:9d:6d:3a:df:b9:78:b1:3e:67:20:30:59:1b:ab:56:
         d2:63:87:50:2f:ab:b6:c9:4f:81:1b:ef:d3:bb:b1:69:7c:be:
         23:b7:b6:12:d0:ef:9b:77:35:8b:98:7e:8a:98:e6:ff:cd:10:
         fc:66:c4:02:fa:90:a3:2c:5d:f7:91:4e:5b:5f:3c:78:6a:f5:
         ff:f4:a5:5c:1f:0d:11:4f:f7:55:37:d0:fe:00:0b:9d:96:b8:
         be:15:11:4a:53:7b:d3:96:75:60:e2:39:83:39:51:28:e1:d4:
         ba:99:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:13 2026 by rpki-client