Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03256ca1-d24a-311d-a695-dc13ac7a88d0.roa
File:                     03256ca1-d24a-311d-a695-dc13ac7a88d0.roa (raw, json)
Hash identifier:          ojy2LR1XEadju2jAxcub33ULUtZYkT0noFF3g5yZgM8=
Subject key identifier:   89:E0:EF:C5:0A:5A:57:E3:BB:4B:53:69:4F:81:42:4E:0E:12:14:32
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E66DA3C75A97600333EA34A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03256ca1-d24a-311d-a695-dc13ac7a88d0.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        173.28.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:3c:75:a9:76:00:33:3e:a3:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=b9e3d663-9a92-4739-9ca4-6f630b0e139d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:0b:09:23:7e:a1:48:d7:60:b4:bf:71:4f:
                    8d:89:ba:b6:ee:73:32:a5:6a:df:64:50:f8:89:3f:
                    f4:b6:98:f9:4e:8c:23:cd:d8:71:e3:c5:1c:2c:48:
                    7a:68:49:17:8d:68:76:c8:a0:dc:6a:b2:31:11:69:
                    91:8d:b5:8c:dd:fe:c0:8c:7e:2e:8c:3a:d5:18:23:
                    3d:76:a9:63:9f:81:e1:69:19:c4:b3:b8:81:09:85:
                    31:44:68:e6:be:21:2f:eb:f3:44:94:39:59:13:bd:
                    0e:74:51:81:34:6a:00:eb:74:b0:83:30:f4:14:e0:
                    46:44:b7:d3:d9:c1:65:dd:c5:09:f9:12:58:82:8f:
                    3d:86:20:04:3a:db:45:ab:dc:68:3c:df:f4:22:cf:
                    b3:c2:57:39:0f:8a:95:28:7e:04:66:b9:b3:03:2e:
                    74:e8:1f:ef:3e:cd:d9:46:45:da:b1:d8:ae:d3:38:
                    a8:e0:48:86:59:91:eb:5b:9d:a7:86:44:ea:fa:4b:
                    38:f1:0d:22:f8:42:5a:7e:64:48:42:c5:f6:2e:76:
                    a8:c0:38:f8:f8:d1:b2:4c:9a:13:06:0c:b3:71:1d:
                    09:4d:b8:9b:fc:ed:2e:bf:ea:80:05:e0:7e:8f:17:
                    45:3a:dc:f0:ea:88:75:cf:50:dd:79:5e:c0:93:3d:
                    b1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E0:EF:C5:0A:5A:57:E3:BB:4B:53:69:4F:81:42:4E:0E:12:14:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03256ca1-d24a-311d-a695-dc13ac7a88d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:14:f0:8d:a9:2c:74:81:e4:56:71:30:c5:d7:d3:83:0e:
         f0:08:c3:44:d1:26:93:f9:88:9b:95:c6:cf:01:73:85:32:0f:
         e6:59:31:f9:84:dd:32:04:fd:92:fe:2a:3f:5f:c1:a3:d4:0c:
         32:29:da:22:d7:b6:2f:46:ef:84:22:12:93:db:c5:65:62:8e:
         ba:89:9c:8f:8b:9a:31:df:9a:38:a7:08:2e:e4:16:71:69:af:
         a3:c4:6e:e2:d2:9a:ed:a4:ff:eb:23:cd:c8:de:d5:e9:27:c1:
         49:c0:4e:47:1b:52:99:b3:d2:54:27:f4:18:e2:4e:e8:40:57:
         f6:81:34:66:35:09:f5:31:4d:35:68:57:3c:74:98:5c:e1:d5:
         8c:36:af:fe:cc:2b:88:8f:46:80:68:be:d2:8a:a5:36:65:28:
         67:f1:fe:26:ed:44:e1:9a:0f:51:25:0c:e1:3c:4a:42:6b:a5:
         d6:10:99:9f:44:e1:3d:22:c0:b0:a3:8b:05:42:ed:5d:7d:1e:
         56:e0:7b:7b:fe:d7:5b:7a:91:8b:ec:da:90:cc:4a:d6:93:fa:
         7d:76:c0:b4:18:36:b2:2c:f5:1e:e5:da:5f:5a:54:ad:47:be:
         b2:c4:75:3a:23:98:90:c6:cb:df:87:bc:64:00:0d:44:3f:ca:
         53:1a:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:47 2026 by rpki-client