Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0556d4f-ea00-387d-965c-cce23f70680e.roa
File:                     c0556d4f-ea00-387d-965c-cce23f70680e.roa (raw, json)
Hash identifier:          KkMXyxX9Yn0YkIEN56JrwX1ze4vwbHDNXmuxE7bCcZA=
Subject key identifier:   CB:36:BA:44:3E:16:78:1C:3B:A3:B4:24:08:31:69:23:A4:63:BD:11
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DB10AD0A39D08108031218C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0556d4f-ea00-387d-965c-cce23f70680e.roa
Signing time:             Fri 01 May 2026 18:01:27 +0000
ROA not before:           Fri 01 May 2026 18:01:27 +0000
ROA not after:            Thu 30 Jul 2026 18:01:27 +0000
asID:                     19905
IP address blocks:        173.16.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:0a:d0:a3:9d:08:10:80:31:21:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  1 18:01:27 2026 GMT
            Not After : Jul 30 18:01:27 2026 GMT
        Subject: CN=0dda8803-034e-4c11-b552-e25142530e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:43:d0:ce:12:28:8f:bc:2e:45:5d:3b:86:
                    78:30:8e:3e:bc:97:f2:bf:b0:79:b1:40:6c:c9:21:
                    d5:6e:0f:b0:9a:84:07:22:c7:6a:e9:bc:13:c8:9a:
                    15:53:79:e0:9a:55:49:d4:8d:c4:e4:bc:9e:c9:ad:
                    37:0c:f1:1c:d2:06:f0:60:d3:3c:b7:aa:43:5d:a9:
                    83:22:d1:91:77:8e:96:47:06:36:dc:40:c7:4d:ee:
                    be:85:fd:8c:24:6e:89:4a:04:3d:ec:52:79:38:ae:
                    fc:c4:88:17:e5:00:70:fd:49:28:7b:ce:00:9b:1c:
                    30:73:08:e8:dd:3f:50:00:55:17:63:e9:33:5b:9a:
                    78:1b:bd:1e:e6:73:23:a7:f1:df:d4:c2:d9:50:df:
                    2f:ad:f6:06:6f:c5:30:69:a6:6a:81:8a:59:15:e9:
                    fc:aa:c4:dd:77:8b:c0:a8:41:47:57:1f:89:66:ec:
                    9b:c5:ad:09:f0:40:de:73:1c:97:fe:dd:87:85:79:
                    eb:fc:76:86:1f:29:90:73:48:91:73:21:59:81:72:
                    17:35:7a:86:85:d3:4e:a9:70:b7:54:43:16:e8:7f:
                    96:4d:d1:90:a5:90:c9:80:f3:8a:1f:fc:05:30:65:
                    91:d3:52:b1:50:84:f3:5f:25:af:36:97:5b:da:45:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:36:BA:44:3E:16:78:1C:3B:A3:B4:24:08:31:69:23:A4:63:BD:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0556d4f-ea00-387d-965c-cce23f70680e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ca:8f:4c:fe:47:fa:5a:09:d9:f5:54:ef:83:37:40:99:ef:
         1d:e7:48:3f:1d:3c:de:cd:42:f1:d2:f1:0c:98:ff:12:d1:f9:
         ce:8e:ae:15:f1:79:b8:58:1e:f2:06:97:ce:bc:00:62:3d:68:
         6d:3d:3c:8c:2d:29:0f:d2:90:23:23:39:5d:80:56:28:72:1b:
         68:6a:16:0e:66:0a:70:eb:78:fa:bf:fb:7d:70:bc:4b:c2:84:
         82:e6:22:92:08:98:ea:7b:49:1a:5e:90:0d:e0:ef:2d:97:30:
         53:66:42:0c:96:2f:d6:44:61:4a:ea:f4:ad:6f:12:e3:67:59:
         74:4c:b5:62:a1:55:96:d1:54:42:e0:72:1f:79:82:d5:1c:76:
         50:e3:fa:f1:4e:d1:57:f0:17:90:c9:4f:86:a9:28:60:ef:86:
         38:b6:28:c8:5e:b2:ee:3a:87:cc:91:e4:cc:60:e7:b7:d6:86:
         1a:9c:6e:b6:10:fc:bb:94:4b:16:af:cd:8c:eb:55:a8:39:d6:
         93:03:3e:08:28:79:da:a6:e2:5c:83:78:8c:3b:7c:45:7b:67:
         8f:d3:62:5b:34:77:57:1a:cd:2d:f4:8b:99:22:e4:45:35:c4:
         44:40:d7:9f:9a:25:19:00:bf:af:25:c8:0e:1e:e0:b4:75:c4:
         94:6c:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:26:03 2026 by rpki-client