Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa
File:                     57fff646-7145-32f1-a13c-3572fed83485.roa (raw, json)
Hash identifier:          c4IZDm+jKQ+rlJhLDQCF3J+sLkY6XP88OErTJNc5oPg=
Subject key identifier:   85:89:18:7E:92:DD:21:B4:77:2B:3C:FB:E6:1B:9A:A5:8A:FC:82:4D
Certificate issuer:       /CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
Certificate serial:       010D0C9F4328584D2644B41D5D864D5956E2B6C0
Authority key identifier: CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     393397
IP address blocks:        173.195.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b4:1d:5d:86:4d:59:56:e2:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=a4a7d6d1-ec12-43b4-85a7-a7ff34a2db91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:37:30:18:b3:19:f7:82:77:88:6c:6e:52:be:
                    67:46:63:4c:ff:80:8f:a0:fe:3e:ef:a4:3c:db:ae:
                    f5:cf:8a:81:4f:a1:d5:56:07:62:cd:00:ac:7b:9a:
                    d8:36:f1:a0:4a:01:82:0d:4a:be:74:51:ed:b7:15:
                    3e:ab:44:3a:05:62:de:2e:bd:08:54:9f:6b:9e:3b:
                    ea:7c:34:f7:83:ea:0a:f5:3a:7f:fa:e6:e8:3e:3b:
                    79:ce:18:e0:0b:46:c6:d2:c3:78:f3:37:18:89:b3:
                    d8:a7:3b:35:99:d5:f4:36:05:8b:a6:5d:bf:60:c1:
                    0d:e3:7e:51:dc:5b:e6:13:c2:28:16:42:3b:48:6c:
                    7f:95:ff:76:93:18:8a:36:54:8e:85:c1:c5:85:76:
                    e5:5d:20:6b:e1:b9:9a:6f:92:66:77:7c:ee:68:82:
                    f3:a9:63:24:ff:6f:e2:b0:22:05:ff:30:fd:0e:d5:
                    3b:df:a9:22:8c:79:0f:fa:b4:1a:5c:d0:5c:60:97:
                    29:e6:a4:d2:d8:cf:50:0c:62:c1:38:08:ad:c1:a8:
                    b8:27:0c:3e:1f:27:3b:c7:d0:74:4d:1d:6c:c9:7e:
                    82:f0:a2:4c:8f:9c:7f:d0:e4:52:01:eb:3a:68:bd:
                    d7:ab:93:42:5a:8a:4e:6b:76:ef:8e:eb:dd:a4:57:
                    93:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:89:18:7E:92:DD:21:B4:77:2B:3C:FB:E6:1B:9A:A5:8A:FC:82:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl

            X509v3 Authority Key Identifier:
                keyid:CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:3f:f0:f3:90:b0:a6:45:44:f8:6a:d6:5a:53:a5:eb:a1:
         ff:20:af:6c:3f:90:9f:c2:ae:65:da:bc:bc:4b:aa:eb:1c:19:
         b5:36:e6:1d:f8:c6:a9:23:13:41:03:9c:87:16:1d:84:94:7c:
         80:6c:72:ab:21:ab:5e:69:59:d8:3a:08:3e:84:3a:08:87:04:
         56:f3:49:25:a8:07:d5:d3:47:04:1f:c0:90:c8:cb:e2:cf:37:
         18:6e:68:b1:f9:f8:bf:57:0d:03:4d:dc:e5:9c:f5:ac:ad:9e:
         80:23:49:af:d8:b0:ca:7f:8b:7c:50:25:2d:25:dc:f6:c8:86:
         f1:80:5c:99:11:f2:9f:2f:c6:d4:d1:84:9b:3b:3c:c6:7f:26:
         26:4d:7e:90:28:0e:bc:c4:a9:d4:08:5a:e3:06:93:0a:44:9c:
         b6:df:87:11:30:58:6d:a6:af:8e:27:40:90:28:97:d6:d6:4d:
         b0:43:d1:d2:f1:77:65:5d:09:09:27:41:1f:c9:52:3f:19:25:
         22:d2:8c:e6:82:9d:ae:9f:f1:11:e3:e1:4d:1e:80:aa:b3:84:
         d1:24:a9:c9:ee:58:00:70:08:83:78:66:4e:93:b7:0e:64:06:
         43:d9:38:7d:2a:a2:4d:8c:e0:19:1b:27:dd:68:62:31:90:1a:
         82:ef:57:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 10:01:09 2026 by rpki-client