Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa
File:                     1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa (raw, json)
Hash identifier:          yaGguWGPWnTCkQ6Sq8A4+QD1NUoUda53h/ywQRSn6TM=
Subject key identifier:   43:10:52:EB:F0:30:38:42:7B:AB:3D:92:3A:5F:B7:24:04:B3:19:C3
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E35FF17D39F2FF43C83953180
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     174
IP address blocks:        173.232.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:17:d3:9f:2f:f4:3c:83:95:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=564e0e9c-b9a1-4b02-97b7-1bc71576be1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:8d:8c:4b:88:d0:c0:e1:86:ee:71:59:b6:
                    43:55:95:58:46:9a:0b:fd:80:6b:18:6d:53:a1:f6:
                    df:08:4f:6a:c4:f1:e2:f0:ce:4c:a9:c0:bf:cf:29:
                    55:92:0f:cb:b5:cc:35:45:83:3c:ee:4a:1c:54:c9:
                    9a:19:6e:93:50:82:95:93:7d:47:6d:a9:54:bb:06:
                    18:17:99:72:6e:9d:42:c1:36:e6:da:cc:69:ff:60:
                    d1:4c:8f:ce:1a:ba:bd:0b:13:11:d4:51:05:e9:2a:
                    77:88:f9:d3:7e:f7:4f:40:98:62:96:4c:c3:32:a1:
                    1c:d4:f8:c8:f2:67:20:f5:58:12:7e:1b:ab:c5:3f:
                    54:19:29:90:a1:55:4f:f0:6d:37:d7:31:92:6d:a4:
                    84:06:a9:78:41:29:3f:8f:aa:a1:c7:96:ab:eb:7a:
                    66:3e:e5:c1:64:36:06:4d:64:ba:3b:77:1a:74:81:
                    2b:71:1d:e6:ef:36:ae:b1:bd:e4:be:c8:32:1b:77:
                    d4:73:a5:64:38:98:40:b6:16:97:73:e1:c3:ad:eb:
                    6d:3e:e5:d8:0e:cb:26:b2:de:2a:a8:ad:bd:94:42:
                    db:c3:40:11:47:16:31:1f:3a:1e:7a:4f:18:db:e5:
                    3e:8d:a1:39:00:a1:d8:ba:22:03:ec:81:18:2b:62:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:10:52:EB:F0:30:38:42:7B:AB:3D:92:3A:5F:B7:24:04:B3:19:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:90:36:7a:01:d8:2d:3e:56:58:0a:04:22:95:be:51:14:
         1c:b9:1f:9c:ec:c8:a4:89:a8:37:bf:30:42:c7:f2:af:15:3e:
         36:5b:ed:45:95:d0:8c:15:8c:ca:ab:cc:cb:1d:02:23:a9:74:
         26:4c:f9:38:b8:96:24:31:15:b2:d6:18:8e:74:ce:08:5d:a3:
         f5:de:b5:03:91:4d:2a:c0:89:49:7f:3f:36:d0:d9:c3:39:22:
         e3:74:43:aa:a7:5f:bb:b8:89:f0:b4:2e:35:f1:76:d5:ea:96:
         a4:5d:df:50:63:6c:23:e2:18:82:3f:a1:7a:4a:f3:35:d5:4d:
         52:9b:2b:36:95:bd:8e:91:88:74:49:52:93:0e:27:b1:5b:44:
         72:cc:d3:48:7a:f9:06:4a:d4:c4:2c:8c:94:09:df:75:53:9f:
         b0:2a:44:5e:34:47:af:4f:66:16:6a:2a:b7:2f:57:a4:44:88:
         87:70:3d:73:4a:6e:d3:49:8a:ab:af:5d:15:10:5e:4c:17:cb:
         06:19:6a:1b:60:46:ff:98:7e:08:1d:0c:d7:6b:98:35:50:19:
         8d:9d:d4:84:28:b6:08:f5:59:5b:d5:99:60:e5:19:b3:4a:fa:
         05:73:73:32:6c:3a:92:9c:09:95:1a:3d:1f:71:cb:ed:63:65:
         98:d5:c7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:28:49 2026 by rpki-client