Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1f9b0b1f-8b47-3996-8455-679a09c4ce21.roa
File:                     1f9b0b1f-8b47-3996-8455-679a09c4ce21.roa (raw, json)
Hash identifier:          0Of7vbveeLnafNzQYq2dm0q/mJ1KtX+VWUwcxNG+P1A=
Subject key identifier:   C6:5D:B6:F7:2B:07:EF:B3:04:C7:25:2A:05:2E:5B:E5:35:12:70:32
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F46A7E2A47EDF626F0DFF1900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1f9b0b1f-8b47-3996-8455-679a09c4ce21.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.19.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e2:a4:7e:df:62:6f:0d:ff:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=c8918f21-7908-4992-8679-786680faceee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:9a:6f:49:92:40:b1:5f:e2:3f:34:25:ac:
                    89:8d:83:5f:cb:11:eb:28:34:f5:d2:ef:32:fa:74:
                    63:b8:01:2c:b0:05:8b:57:ec:03:6b:7d:a2:e8:9b:
                    cc:46:3f:c5:8b:a0:14:10:fe:71:49:f1:ef:25:ad:
                    cb:0f:8e:ac:23:ed:f9:9a:ce:84:64:45:4d:05:5b:
                    71:07:3d:05:a9:ad:03:54:be:8b:a1:6e:c6:e1:8c:
                    3b:87:04:8d:9c:fa:3f:5b:ea:8e:3c:a8:b1:c2:33:
                    bb:22:81:4e:ba:4f:1e:b3:31:21:ab:bc:55:dd:dc:
                    5c:3b:5d:90:bf:6f:4a:c7:1b:15:cf:3f:65:92:7a:
                    34:f4:ed:0e:74:ec:f8:b6:a0:7b:13:d2:e9:5e:8e:
                    46:91:61:7f:b8:f6:bb:db:83:7f:6a:e7:4f:9d:72:
                    cd:af:11:09:bc:dc:0e:1f:88:b0:d7:11:bd:6e:3a:
                    35:37:50:3c:74:94:1d:fc:f5:f3:e1:7d:98:97:ee:
                    8d:ae:38:87:fa:a2:6e:d5:7d:9f:39:e8:53:c4:14:
                    cc:ea:d5:f0:47:58:86:7c:ac:3e:b5:6d:3e:97:dc:
                    29:49:fa:2f:68:41:1c:d5:03:cb:4f:54:62:30:e4:
                    67:1b:67:82:03:4e:d7:d3:5e:fb:c9:0b:35:42:1c:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5D:B6:F7:2B:07:EF:B3:04:C7:25:2A:05:2E:5B:E5:35:12:70:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1f9b0b1f-8b47-3996-8455-679a09c4ce21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:2d:d5:c9:05:db:16:80:7f:19:2c:01:84:8f:3e:0a:e7:47:
         93:6d:5f:52:02:ab:d3:02:58:25:40:a4:3f:5f:a4:bd:1b:46:
         61:8b:bc:9a:32:ff:12:fd:5f:e4:de:da:af:f6:d6:d2:fe:7b:
         c6:f0:de:2d:02:d8:fa:e2:3d:ef:4d:2c:2e:d6:db:31:e5:19:
         48:59:b7:52:b1:6c:ce:6b:f7:4c:86:9a:2a:f8:c4:14:5f:4b:
         51:6c:0b:7e:0f:b8:08:c2:a4:ce:89:9e:6e:8b:af:30:cd:ec:
         d9:31:d4:ff:0c:8d:45:9c:e2:04:ad:fa:4e:ce:96:77:b0:60:
         f4:4c:26:ec:b6:8b:a4:cb:06:8e:11:d3:2f:9d:62:e9:5c:33:
         83:f5:22:67:23:37:cb:98:9b:de:d1:3b:2c:47:01:13:59:17:
         49:70:5d:1b:94:bb:49:f9:6e:21:18:77:c0:21:3a:b0:6f:3a:
         b9:c4:6c:b1:b8:1f:75:b1:37:1a:66:2d:d9:94:41:d1:5b:71:
         68:60:68:f3:70:d8:4b:c1:f8:8c:ed:a4:c5:c7:62:0c:a5:7a:
         b4:5c:a5:b1:be:73:45:76:c9:f6:7c:42:bd:96:44:84:98:ab:
         3d:92:4a:65:fb:59:a4:8d:cb:d1:08:27:56:21:01:9b:03:5e:
         21:12:9c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:58:11 2026 by rpki-client