Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fd4c182e-4032-3aca-99de-2e533c41b73a.roa
File:                     fd4c182e-4032-3aca-99de-2e533c41b73a.roa (raw, json)
Hash identifier:          CAyJN100Td/PTkaZan8KWnmr3B7axcQd0pMmDgSugv8=
Subject key identifier:   55:C1:53:5D:1E:B0:1D:3E:9A:41:7B:72:A6:64:45:92:51:39:C4:7A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA78770C8A7DB102ABB358CC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fd4c182e-4032-3aca-99de-2e533c41b73a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        173.16.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:70:c8:a7:db:10:2a:bb:35:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0a2a1ae5-df57-4451-99a2-8b674dd147ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:72:c4:8e:f9:2b:9f:20:aa:af:eb:f5:86:
                    46:01:96:ef:74:03:48:57:49:73:62:04:02:44:aa:
                    ec:66:99:58:9a:5a:80:92:cf:d5:f6:d8:ed:12:28:
                    92:e9:31:48:f7:39:29:4f:88:2d:75:9a:d9:e2:bb:
                    b6:cc:87:b3:89:4f:a9:b6:8d:4a:70:d8:5d:f1:4b:
                    3f:12:1a:ea:1b:b7:ad:db:44:48:00:4f:84:cf:29:
                    ff:ac:b3:e5:db:bd:49:7e:ab:a8:cc:4a:0f:ce:d2:
                    03:61:ca:5a:0c:cd:eb:12:34:9a:de:d2:de:e5:d3:
                    d0:db:08:af:f9:e7:ce:5a:30:78:d2:ed:80:8a:d3:
                    54:e6:bf:5f:7e:02:ce:82:0c:39:95:5c:0f:8e:68:
                    03:ed:45:58:99:5d:f1:dd:72:c8:5d:14:a7:cf:9b:
                    7f:18:cf:95:2f:09:bc:7e:87:2e:09:18:28:3e:9a:
                    23:da:3b:02:ee:a8:e0:31:96:b1:5a:58:ce:9c:4b:
                    bf:69:ee:fc:80:ff:e8:69:65:68:da:6f:cd:82:36:
                    37:5c:77:95:b1:53:aa:53:5f:88:eb:ca:81:5d:d3:
                    dd:a2:9b:08:cb:70:87:5e:1e:e4:a0:5a:fc:3f:98:
                    9b:4a:8b:68:a5:90:0f:0f:40:ab:ec:19:cb:3b:42:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C1:53:5D:1E:B0:1D:3E:9A:41:7B:72:A6:64:45:92:51:39:C4:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fd4c182e-4032-3aca-99de-2e533c41b73a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b8:d7:75:7c:17:45:7b:69:d1:67:72:a6:b4:59:72:51:a2:
         d5:7e:ae:de:44:e8:23:f3:22:51:e9:47:60:ba:6e:56:24:e4:
         eb:cb:e1:4a:9d:9d:53:7a:06:d1:85:f7:e5:e4:f6:75:bf:d7:
         46:89:d5:73:cf:84:19:0a:1f:34:96:55:3c:b9:77:11:aa:dd:
         a0:10:cb:9c:05:eb:09:15:6e:ce:91:b9:6d:d7:7f:d4:cd:18:
         4a:51:9b:de:18:62:23:93:a1:48:30:5b:d5:3e:de:0d:16:f6:
         82:95:39:ed:37:cb:05:a5:c4:ed:6a:0d:7c:5d:7a:f4:98:a3:
         d6:8a:09:eb:f2:d1:5a:63:2b:c4:53:08:82:45:27:47:9a:ce:
         82:a6:0b:d9:ad:27:86:53:8f:cf:3f:8d:72:1d:a4:2d:68:b9:
         3f:0b:dc:12:de:0b:6d:2e:58:50:87:5c:ae:bd:a8:d2:45:4b:
         05:80:28:f2:15:ea:52:9a:84:68:2e:ee:4a:dc:7d:d9:e7:3d:
         98:79:32:80:9c:79:87:44:7f:7a:55:1a:4d:8a:06:d7:0f:11:
         49:68:35:95:27:26:7a:38:59:7c:b8:76:d2:26:1d:c4:5a:8f:
         a1:46:d3:c0:c6:cd:7e:6e:55:6f:59:06:9a:57:27:08:8a:31:
         6e:96:1e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:07:13 2026 by rpki-client