Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a53908cf-6538-3506-b747-bce5334464b6.roa
File:                     a53908cf-6538-3506-b747-bce5334464b6.roa (raw, json)
Hash identifier:          c8wt+rJZTjGaYMlPnn6O9/qotQH7bNmGTvrS5GvofMI=
Subject key identifier:   F9:90:88:AB:2F:9D:8D:62:66:8F:FF:30:E9:DA:2B:F3:54:65:5B:D2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D20AF4873A5B7E32A71A83380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a53908cf-6538-3506-b747-bce5334464b6.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.21.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:48:73:a5:b7:e3:2a:71:a8:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=69e2436a-b8c9-4265-959c-2bd9902d8d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:26:5c:7d:7a:33:b5:09:80:80:a4:e9:c9:0e:
                    9c:7c:23:93:99:ad:79:94:17:dd:b9:c3:be:31:a0:
                    ad:c7:95:e1:fd:0f:3b:7c:e3:36:e0:40:c9:12:b1:
                    7c:68:bb:5f:fe:70:d6:a0:18:eb:7a:76:13:00:61:
                    dd:26:db:d0:e7:6f:45:3b:31:27:82:51:bf:ca:9e:
                    6f:1c:b4:84:e0:5e:eb:2d:24:c2:cd:db:a5:62:b7:
                    30:6b:82:65:67:be:2c:62:00:0a:4e:92:b5:53:18:
                    f1:71:68:48:66:06:68:ae:d3:78:27:c7:5a:77:a0:
                    d9:76:9d:db:8c:30:38:92:5f:f7:e3:b7:4c:12:09:
                    c6:16:c3:98:62:c4:ab:6f:17:7a:02:5a:42:12:fd:
                    be:a7:d1:c6:79:8e:3a:a2:10:36:58:1c:cf:79:46:
                    2f:5b:8e:91:6b:f3:ab:65:b7:ce:1e:64:68:8d:7d:
                    ea:2b:b3:1e:bf:9d:d2:0e:d3:a4:79:25:24:95:fb:
                    13:20:4e:a3:41:fc:7a:80:2e:ff:91:0e:b0:9b:bf:
                    44:78:bc:6e:96:4c:83:c1:35:9b:7b:7c:90:18:21:
                    e4:88:67:f3:e6:14:a9:7d:1e:e4:94:ee:ed:84:7a:
                    92:7d:76:cc:ad:cc:a5:23:65:67:2c:17:f8:ac:63:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:90:88:AB:2F:9D:8D:62:66:8F:FF:30:E9:DA:2B:F3:54:65:5B:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a53908cf-6538-3506-b747-bce5334464b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:7d:d5:be:38:aa:f5:70:11:eb:93:ce:d3:bf:a5:91:3f:
         67:23:17:5e:dd:13:4c:18:d2:c3:3c:a3:fa:7a:00:c2:9c:61:
         91:40:c3:5f:04:19:d1:34:44:2d:10:af:ed:fd:df:d3:a8:2e:
         5a:6c:0b:b2:a6:e0:ef:8f:bb:1d:69:b3:d3:e9:0c:46:a0:93:
         47:9f:f6:80:c7:1d:70:1d:1a:d0:e4:c3:cb:cb:1c:df:5e:fd:
         54:32:77:42:b1:16:cb:87:ec:53:13:74:f6:92:73:c0:67:3b:
         dd:27:9f:a5:cc:92:f3:f9:27:4d:0f:a1:e1:a6:45:78:65:d2:
         41:9c:3a:13:1e:a2:43:cb:c0:e9:06:1f:89:25:86:b8:bb:ea:
         94:fe:3d:9a:80:7a:f2:1e:dd:eb:16:74:89:f6:e5:8e:ce:3d:
         83:29:cb:2d:5b:d1:b8:d4:c9:25:86:af:b5:69:37:01:86:2a:
         cd:14:a6:23:7b:b8:f4:7c:0f:51:eb:38:98:b0:1c:43:a2:5c:
         b2:ae:d0:72:83:66:8e:35:4d:d6:5e:55:e8:05:bb:ba:65:31:
         93:6f:3d:f2:31:39:47:5d:32:38:7f:a2:10:26:e4:27:a3:32:
         b7:a5:28:1b:35:11:8d:58:48:9a:60:7b:71:74:55:78:8f:e4:
         82:6a:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:45:25 2026 by rpki-client