Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d31ff050-a648-3eb6-bff9-9d93c86f61af.roa
File:                     d31ff050-a648-3eb6-bff9-9d93c86f61af.roa (raw, json)
Hash identifier:          O7hmp4Eo3EnOHipnBvNKlBP2dJZcnbuc2YuL7fjht4c=
Subject key identifier:   D3:BF:6D:B5:5E:4B:48:30:15:5D:F7:35:BC:94:FF:BA:86:7D:52:FC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1B1A65D03E2E03A8293E1D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d31ff050-a648-3eb6-bff9-9d93c86f61af.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.28.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:65:d0:3e:2e:03:a8:29:3e:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=fde616c6-a9bc-4419-9f27-c020b36c4f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:e1:1b:ea:ee:7f:50:75:21:27:3d:42:82:
                    ad:fd:13:94:00:22:e0:9b:20:37:30:73:7d:da:d2:
                    fb:7f:f9:8a:63:45:41:da:6e:de:fc:8b:8d:39:07:
                    13:cb:87:a0:8c:62:47:93:74:dc:00:54:bf:7e:0d:
                    51:fe:83:bd:c2:31:67:59:82:83:d6:47:e5:95:54:
                    c4:86:c1:f2:03:47:bf:39:66:90:c9:68:a5:56:9b:
                    f0:97:4d:ac:65:55:82:a0:5e:bf:82:58:fe:e8:44:
                    7c:27:c8:dd:da:b8:83:69:10:f2:33:9e:89:c3:68:
                    0f:94:4e:65:37:9d:8a:7a:8b:61:ae:f8:3b:6c:c2:
                    26:77:1e:0e:ec:61:c6:1c:ff:f2:c4:a4:63:f9:a1:
                    44:72:5f:ef:d0:c1:9f:89:1f:e9:4b:66:11:d5:b2:
                    94:c8:82:d1:da:16:51:5e:ca:b8:50:e0:9c:0c:f5:
                    fc:5e:be:50:8b:71:cf:c9:73:5b:49:66:b9:e4:87:
                    7d:8f:4a:1c:bd:6d:03:49:53:42:42:4f:1f:0a:ba:
                    04:5f:8f:e6:bb:ad:ab:fa:53:69:20:66:45:9f:3a:
                    b9:c8:f4:fc:ac:5c:73:20:3f:b3:9b:b6:eb:fa:d7:
                    e0:0d:50:78:42:b6:7b:67:ed:29:70:96:07:e0:e8:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BF:6D:B5:5E:4B:48:30:15:5D:F7:35:BC:94:FF:BA:86:7D:52:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d31ff050-a648-3eb6-bff9-9d93c86f61af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:5f:1d:8d:f3:ab:e4:ca:68:3c:b7:b2:2e:b5:1a:fa:17:27:
         cc:78:7a:67:d4:70:9b:f0:ab:4f:fe:e6:cb:f0:f0:d3:14:a7:
         20:34:91:33:cd:70:88:67:37:90:32:2e:97:14:e8:ed:89:6f:
         52:10:17:47:2c:61:41:4f:ed:87:7c:88:75:64:ee:aa:43:9f:
         66:33:c6:c6:01:ec:6d:66:af:2a:77:b6:c9:d4:10:68:e3:55:
         ba:f4:82:41:7e:25:7a:ae:d2:b8:01:92:93:11:2f:41:f9:6e:
         84:8a:10:14:f0:ad:7c:ec:2e:17:c0:01:9d:c9:08:03:e3:a1:
         b9:17:87:54:8e:3c:1a:57:c8:24:43:26:45:57:5e:e5:47:a7:
         a3:7c:71:c4:77:20:31:50:a4:dd:71:c7:17:76:e8:c7:1a:6c:
         6d:ef:65:f1:f3:49:51:37:a3:02:dc:80:6c:c1:ad:ea:e0:71:
         38:fb:04:96:e6:71:e3:c4:bc:e9:20:e2:72:4d:14:64:97:3c:
         d6:19:1f:ae:63:bc:c7:78:1d:ad:11:7e:a0:39:30:44:f7:ce:
         86:dd:38:b3:13:c0:9a:40:7c:a0:84:06:d2:05:df:31:2e:2a:
         68:f1:c4:75:e0:ce:14:bf:bf:a1:82:e9:38:fd:38:ce:6c:d6:
         28:b3:b9:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmXQPi4DqCk+HYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
ZmRlNjE2YzYtYTliYy00NDE5LTlmMjctYzAyMGIzNmM0ZjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqinhG+ruf1B1ISc9QoKt/ROUACLgmyA3MHN9
2tL7f/mKY0VB2m7e/IuNOQcTy4egjGJHk3TcAFS/fg1R/oO9wjFnWYKD1kfllVTE
hsHyA0e/OWaQyWilVpvwl02sZVWCoF6/glj+6ER8J8jd2riDaRDyM56Jw2gPlE5l
N52Keothrvg7bMImdx4O7GHGHP/yxKRj+aFEcl/v0MGfiR/pS2YR1bKUyILR2hZR
Xsq4UOCcDPX8Xr5Qi3HPyXNbSWa55Id9j0ocvW0DSVNCQk8fCroEX4/mu62r+lNp
IGZFnzq5yPT8rFxzID+zm7br+tfgDVB4QrZ7Z+0pcJYH4OjakQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNO/bbVeS0gwFV33NbyU/7qGfVL8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDMxZmYwNTAtYTY0OC0z
ZWI2LWJmZjktOWQ5M2M4NmY2MWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRw4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFfHY3zq+TKaDy3si61GvoXJ8x4emfUcJvwq0/+5svw8NMUpyA0kTPN
cIhnN5AyLpcU6O2Jb1IQF0csYUFP7Yd8iHVk7qpDn2YzxsYB7G1mryp3tsnUEGjj
Vbr0gkF+JXqu0rgBkpMRL0H5boSKEBTwrXzsLhfAAZ3JCAPjobkXh1SOPBpXyCRD
JkVXXuVHp6N8ccR3IDFQpN1xxxd26McabG3vZfHzSVE3owLcgGzBrergcTj7BJbm
cePEvOkg4nJNFGSXPNYZH65jvMd4Ha0RfqA5MET3zobdOLMTwJpAfKCEBtIF3zEu
KmjxxHXgzhS/v6GC6Tj9OM5s1iizuW0=
-----END CERTIFICATE-----
Generated at Thu Mar 12 03:43:11 2026 by rpki-client