Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb7f2e9c-c6f0-3924-a734-9620a3cb44dc.roa
File:                     fb7f2e9c-c6f0-3924-a734-9620a3cb44dc.roa (raw, json)
Hash identifier:          lVs9me5qa/WQpm7EqgtdWtQFPYuS0JxGbYEokG1quBE=
Subject key identifier:   C9:5D:02:7C:67:E9:10:5E:3C:57:33:43:7B:E6:98:A6:4D:B4:82:0B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D8D8FFA92CECC81B992C58480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb7f2e9c-c6f0-3924-a734-9620a3cb44dc.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     19905
IP address blocks:        173.28.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:fa:92:ce:cc:81:b9:92:c5:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=7782b0d8-dea1-43c9-9cad-af46267deb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:31:9f:95:76:07:57:96:fd:90:32:a5:88:b8:
                    fc:eb:e3:29:ef:d7:fb:f5:0e:1d:fb:86:35:06:eb:
                    1e:9e:f0:e9:59:69:32:70:9b:6f:79:8b:76:f8:c6:
                    9b:62:e6:dc:75:15:f7:21:40:e9:41:8d:33:26:93:
                    cf:6a:ad:d5:d0:c6:93:06:25:1f:86:1e:b9:7e:a2:
                    36:1a:8e:80:a0:09:1e:bd:ac:7d:4c:e4:da:ff:5e:
                    7d:ab:8f:04:88:0e:46:5b:f3:bc:84:94:39:fa:99:
                    47:07:f8:3f:0f:8d:00:c0:3e:ee:cf:df:83:4d:c4:
                    a6:09:23:f6:ed:4f:ae:40:2f:e1:6b:4f:37:51:9f:
                    07:36:58:ed:ce:74:bd:8f:44:40:83:04:55:63:0d:
                    0f:a5:48:80:b8:93:9e:3d:ed:ad:30:f2:60:c4:d0:
                    d5:60:60:94:1f:ba:c2:a2:c9:53:09:ce:37:a4:ef:
                    24:b7:de:42:81:1e:f9:15:fe:9a:48:50:7f:56:44:
                    34:ac:7c:77:c3:11:3f:82:cd:f1:75:55:85:a7:37:
                    f2:f9:b9:af:be:be:88:f1:23:d8:63:ff:e9:1e:de:
                    d5:c0:6c:07:7f:3c:81:80:29:8f:d7:9f:92:c9:05:
                    48:79:ac:a3:ad:8b:c0:93:1b:e6:e7:19:88:29:67:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5D:02:7C:67:E9:10:5E:3C:57:33:43:7B:E6:98:A6:4D:B4:82:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb7f2e9c-c6f0-3924-a734-9620a3cb44dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:36:bc:f0:fc:c1:37:85:5a:97:f8:cb:26:93:bd:9f:b6:91:
         4c:0d:1c:dd:98:9d:45:b2:25:13:15:6e:14:59:a3:e2:52:a0:
         0c:bf:df:b8:37:a5:1c:95:27:94:d5:2b:47:81:05:00:d3:fe:
         28:f4:04:c8:b7:73:49:1e:bd:f3:d3:54:04:60:0e:0e:08:cf:
         1d:2b:e0:3a:ff:fa:97:1e:05:6f:1a:38:2c:2f:c9:bb:bb:8c:
         ec:98:a1:cf:ef:60:98:c7:4f:c9:e0:99:29:20:e0:d2:c2:d6:
         8c:95:24:37:cf:00:8c:c1:8f:25:2f:a7:e3:f4:e8:90:da:2b:
         02:bc:4c:b8:47:a0:ea:37:cf:7f:05:07:2b:4d:c8:f6:96:e1:
         b9:3f:b4:5b:79:69:80:db:f0:17:16:62:e8:59:df:06:66:6f:
         15:96:6f:a9:83:94:9e:b0:45:6b:e9:51:e0:65:b0:4a:27:d7:
         9c:07:18:ee:6e:ce:6d:fe:6b:3f:da:1f:7e:3d:25:99:89:67:
         f2:69:4f:69:0d:d6:ef:58:96:5a:cb:c1:37:d6:97:61:f2:88:
         c3:93:98:09:9f:42:9a:28:09:7d:72:de:43:bc:00:a7:4e:28:
         6d:3d:a1:a7:49:b5:fc:a1:41:a4:9d:04:34:68:9f:96:ff:53:
         87:e5:60:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 21:29:41 2026 by rpki-client