Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa
File:                     bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa (raw, json)
Hash identifier:          5EevA4I5CUKpZtg19QKkje131efhNQ4X/gmf5pQlMtg=
Subject key identifier:   47:E2:51:BF:69:17:30:BF:52:29:34:87:55:5F:28:99:B3:23:44:66
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EBC77199209E38D68CAC78D48
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        173.24.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:19:92:09:e3:8d:68:ca:c7:8d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=683b2ee8-fd86-4f38-9c6a-017e8ccb6e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:33:08:14:06:84:78:8a:7b:d4:23:7c:52:
                    83:fd:b3:a5:83:f4:cd:3e:18:a6:b5:ec:8a:eb:a4:
                    c5:eb:71:04:4a:12:82:ca:f4:54:27:d3:e2:32:63:
                    ca:ba:8b:f9:09:03:46:e3:41:6b:c9:85:4e:9f:e4:
                    42:29:a3:70:0c:df:94:b6:15:50:27:2b:74:81:74:
                    8b:e1:cd:8e:9d:6f:d1:0c:a1:56:17:6d:22:f6:8f:
                    bb:9e:9b:92:34:f5:8a:f6:c7:4a:ce:d6:25:15:5d:
                    ee:ab:a6:ac:b0:11:ec:a3:dd:18:55:30:7e:6b:65:
                    48:1a:6d:8f:05:05:75:54:d7:04:fd:a7:75:e3:ed:
                    53:03:a3:b9:b3:f4:f1:a6:30:d6:8f:3f:49:c1:69:
                    a2:e4:d2:7b:89:16:60:c2:3f:2d:1d:1a:ff:6e:54:
                    9a:6d:d3:3b:d9:35:9d:e7:fc:2c:76:f7:2a:ab:d5:
                    6b:27:8e:d0:2f:e0:e0:08:15:0a:ba:9b:c4:24:dc:
                    dd:e9:01:49:dc:b2:68:3b:e8:23:03:9e:d5:93:65:
                    51:92:34:3d:91:f1:57:16:a8:cc:b5:fd:59:8b:7b:
                    72:48:8b:d5:81:c3:2c:6a:27:dc:b9:f5:22:de:a9:
                    20:27:aa:da:38:65:80:b8:df:d5:61:85:3f:b2:72:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E2:51:BF:69:17:30:BF:52:29:34:87:55:5F:28:99:B3:23:44:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3f:75:cc:1e:e5:32:9b:64:30:7b:8b:e6:bc:a6:a2:ca:f0:
         89:5a:fa:17:c2:1b:68:4d:a6:68:01:7d:47:a3:35:36:6f:3e:
         1a:e8:57:e4:45:f4:81:f5:52:ed:89:50:ae:1a:40:9f:00:af:
         8b:79:7b:3f:c6:f5:98:d2:5d:d6:6a:2d:b0:aa:56:d3:0b:36:
         07:46:13:f3:ce:7f:a1:aa:95:a5:cc:21:af:68:68:c4:61:a8:
         d2:65:74:39:dc:8d:43:cd:45:71:e9:0b:52:23:43:42:91:a8:
         65:33:eb:e4:a8:69:58:af:78:e8:2e:af:b9:aa:f8:55:88:ed:
         d1:d7:ea:d5:f9:46:1f:0f:07:65:23:6e:6f:d6:5c:57:97:ea:
         0b:b8:95:2e:8f:b5:97:15:14:04:d7:4b:36:8c:1b:9c:7a:52:
         96:72:ac:e1:af:c9:84:a2:f3:58:19:66:e6:6a:6b:db:63:21:
         ba:12:b9:76:6e:49:0f:67:bd:79:cb:78:b4:11:10:f6:95:b5:
         9b:9a:a4:f7:54:fd:8f:4e:16:e8:85:48:95:5a:b8:a0:e4:1d:
         d4:78:0a:d6:13:30:0f:bd:f2:8e:65:aa:18:e0:ca:8d:be:5e:
         48:35:fb:67:86:24:54:aa:80:33:5d:e3:7e:53:23:a9:86:30:
         b4:fe:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:08:24 2026 by rpki-client