Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdc4773d-c88e-3d01-a66b-0c268d6bf7c1.roa
File:                     cdc4773d-c88e-3d01-a66b-0c268d6bf7c1.roa (raw, json)
Hash identifier:          qSazIKVPBGXmIvWT0Lg7nfCzSi/G5ovZQAriwRq9QOA=
Subject key identifier:   73:14:99:7F:7B:25:00:78:FF:6D:A3:89:80:FC:B9:AC:47:26:C9:1D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CC5FFCCB145F7C34BC200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdc4773d-c88e-3d01-a66b-0c268d6bf7c1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.19.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:c5:ff:cc:b1:45:f7:c3:4b:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=df2a4424-12c1-46cb-a607-8eb530c8a3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:12:b9:2a:a7:43:19:81:8d:78:36:cc:36:51:
                    05:47:76:bc:af:92:9b:72:cf:4f:1e:e8:be:36:ee:
                    4a:1e:81:8d:2b:99:55:52:c0:fd:e4:de:af:45:86:
                    14:2c:a5:95:88:1e:7a:f2:38:8a:68:72:09:1a:1e:
                    47:64:59:56:df:ac:3b:db:db:f5:a0:7c:9e:a6:45:
                    32:12:69:aa:eb:f3:27:cb:77:76:25:aa:d8:05:2b:
                    f2:bb:57:a2:12:58:6e:25:fe:5e:74:19:56:dc:a1:
                    20:b9:e4:da:43:c6:1e:00:73:6a:3a:20:ce:58:cb:
                    4f:cc:29:b1:24:f1:3b:ee:15:f3:81:c1:e8:08:b2:
                    ba:52:f9:e6:6c:89:41:47:67:bf:9b:48:a7:1a:8a:
                    ed:78:b8:35:41:3a:0a:d2:26:22:ed:f9:39:44:7e:
                    5c:e7:30:fb:c6:1d:da:80:ed:a0:33:88:19:45:09:
                    0d:cd:12:79:a1:e6:5d:a8:6a:42:66:e4:5d:33:c4:
                    67:17:74:eb:7d:1b:7a:1c:74:89:5a:bd:6c:10:5f:
                    9d:79:62:0a:be:14:d2:35:28:8f:6d:90:92:07:f1:
                    3e:a8:f0:1e:a9:66:17:cf:2c:6c:f2:90:85:41:78:
                    8d:27:ff:2d:a6:a5:8c:f1:5b:ef:98:ea:64:e0:e6:
                    3f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:14:99:7F:7B:25:00:78:FF:6D:A3:89:80:FC:B9:AC:47:26:C9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdc4773d-c88e-3d01-a66b-0c268d6bf7c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:24:cd:a9:94:d4:8e:1e:af:fd:3d:ee:fc:43:c1:e2:52:
         f9:a1:17:3d:27:72:73:81:f0:03:4f:e9:ce:77:2b:16:f1:68:
         22:b3:5f:bd:83:14:4d:4e:dd:05:bd:f7:fb:5d:ba:db:97:f7:
         59:ee:e9:e6:83:af:36:73:76:5f:58:18:2e:9c:03:1d:be:2e:
         69:c5:de:b6:90:51:9c:88:d4:41:f8:0e:ba:00:64:e4:09:a3:
         74:1d:eb:84:fa:b5:dd:4b:dc:28:d7:7c:ca:f5:6b:92:06:7b:
         57:38:d5:88:91:de:7b:e6:aa:c8:ba:16:5c:10:8f:f8:ef:ef:
         88:b4:06:a3:41:09:45:d0:50:76:dd:e5:d3:27:ab:19:9c:49:
         83:f1:e7:03:83:90:47:f7:3d:29:be:e5:9d:fe:4f:1e:42:99:
         27:04:be:65:57:4c:c1:d0:84:cb:29:96:ef:87:bf:08:d2:27:
         31:fd:86:7f:87:16:24:51:71:5f:a8:8f:32:28:3b:94:47:03:
         e2:b6:3f:06:41:fb:64:a4:ce:ce:5e:92:23:a6:94:91:f4:e0:
         78:66:38:2f:2c:d2:1f:87:5e:b6:4a:76:8c:90:95:0f:b5:06:
         7e:cc:27:6a:08:e5:35:7e:78:57:22:cf:44:c0:43:21:9a:2b:
         3e:a6:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:10 2026 by rpki-client