Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09cfcca2-cdf3-3097-8d29-048fa0c28638.roa
File:                     09cfcca2-cdf3-3097-8d29-048fa0c28638.roa (raw, json)
Hash identifier:          Lll79hZTcBeKFnw2xlCZx/+JW81tkWX9r6asfBoIXzs=
Subject key identifier:   38:9E:8A:EA:45:05:D6:93:5E:55:DD:DF:8B:5E:EB:88:CC:7B:60:38
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E815FC096134CCBE614ED3F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09cfcca2-cdf3-3097-8d29-048fa0c28638.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     19905
IP address blocks:        173.19.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:c0:96:13:4c:cb:e6:14:ed:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=f05b7f04-a657-4dbe-a093-da1ca51982e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:2a:6c:68:4c:20:fc:b4:55:5b:24:fd:4a:
                    f2:d1:e8:6c:f3:d7:a7:5d:9b:00:53:dd:85:1a:bd:
                    9e:71:74:48:3d:94:64:97:5b:45:f6:b2:c6:e0:06:
                    55:ed:ab:f8:3d:c1:fe:ad:26:47:21:44:62:eb:17:
                    37:fe:9a:44:62:7f:e1:70:f7:e4:50:29:3c:68:32:
                    ed:f3:93:ef:f5:de:e8:45:10:d7:cc:0a:8f:ee:8f:
                    61:46:27:dc:f4:eb:ce:9d:b8:79:e0:52:b3:36:58:
                    bd:bb:bc:97:de:b1:d7:56:6b:71:10:30:8e:43:c4:
                    aa:8e:14:0a:d0:3b:fc:e6:1c:43:f6:fd:28:16:f9:
                    61:0d:c0:44:43:e5:a0:2f:45:e8:e6:a3:b2:2f:04:
                    a3:20:04:d2:cb:0a:ed:a7:70:68:23:e6:10:24:44:
                    e1:62:7a:58:ac:06:12:55:fe:73:5e:0b:ed:94:ca:
                    f6:1b:93:41:66:ca:a9:a7:e8:bd:0b:5a:fd:85:04:
                    e3:39:37:00:99:90:38:e2:f9:48:57:7a:9b:aa:e4:
                    03:ff:f9:1d:72:f8:97:87:7a:7f:ad:68:49:3d:4d:
                    82:e9:e0:e3:99:8c:5a:4f:d6:d6:c2:70:3c:f0:aa:
                    a0:66:b5:d6:81:2f:98:00:ca:68:5f:d7:64:ed:b5:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9E:8A:EA:45:05:D6:93:5E:55:DD:DF:8B:5E:EB:88:CC:7B:60:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09cfcca2-cdf3-3097-8d29-048fa0c28638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:38:fd:50:87:a2:58:b0:10:02:48:64:36:61:f9:e1:22:c9:
         a0:7e:a8:20:9b:03:b0:47:0a:64:75:19:13:ab:b3:6f:9e:3e:
         d2:50:b0:39:b5:94:d5:da:c2:5e:73:8a:ba:30:43:8b:5e:52:
         67:4a:af:73:f7:9e:75:57:c0:63:ed:8e:ca:cd:cd:d1:c7:c2:
         5e:84:04:2a:c7:1a:11:c1:1b:9c:35:35:f4:07:2c:62:b6:77:
         bf:75:ce:54:24:42:4d:07:cd:5f:3f:03:26:52:3a:dc:1a:d8:
         75:cb:39:0d:f1:4d:6a:f2:62:7b:24:ab:4c:c6:cb:5a:a7:dc:
         65:b7:a7:c2:db:e4:b5:bd:45:37:b8:49:7b:61:79:bd:78:0f:
         48:9a:e0:09:7c:56:2a:de:4c:fc:9d:6f:49:0e:a7:9e:b8:89:
         8c:40:ca:51:97:dd:b9:f1:f1:36:95:55:69:82:14:d4:f3:97:
         09:a6:b4:74:a9:bf:1f:04:7c:02:fb:77:12:3a:75:72:f5:fb:
         64:30:79:ba:a6:18:ed:e6:72:40:f9:25:13:01:cf:86:c3:3e:
         01:d9:29:36:60:f4:4e:90:78:60:c3:cc:3a:9a:f4:04:7c:3a:
         7d:36:e3:9a:31:5d:e6:24:8a:61:3d:45:f2:5b:be:39:07:a3:
         27:3f:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:36:36 2026 by rpki-client