Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20bdd0d6-1fcb-3dcb-82bb-82d43283f19d.roa
File:                     20bdd0d6-1fcb-3dcb-82bb-82d43283f19d.roa (raw, json)
Hash identifier:          koHK1/Nl0QgR0trPCQEjzJwStfgd/cj7WK/qruuxRYU=
Subject key identifier:   0C:00:F5:AA:C4:FF:01:D3:C8:F1:F4:E0:C2:66:AE:05:CF:84:8B:EE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498A6D4E9A8B083BCA604540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20bdd0d6-1fcb-3dcb-82bb-82d43283f19d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.19.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:6d:4e:9a:8b:08:3b:ca:60:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=671df982-87a4-4933-8bcb-1b054b2ab9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:98:07:dd:6e:0c:0a:af:b7:01:14:50:b0:
                    f5:d1:4e:2e:f9:50:f1:a7:aa:3a:ca:42:9c:c9:0e:
                    a9:8d:75:aa:ed:ce:8f:df:26:db:8e:e8:00:2a:fa:
                    ad:fe:b5:c2:69:6b:8d:a6:e5:aa:fb:c3:9e:68:85:
                    b1:d1:52:ca:48:72:29:36:8b:af:75:39:15:09:d0:
                    fe:5a:37:c2:b1:90:2e:3c:5a:a5:60:e3:f1:1a:4e:
                    b3:db:4d:7f:d7:08:48:47:95:c0:68:7a:d1:f6:4f:
                    23:4a:8c:6b:fb:d0:1c:ad:90:e3:54:df:99:7e:41:
                    4a:4c:67:f3:a9:ed:e2:92:6a:0c:50:e5:22:c8:9f:
                    0a:f2:04:55:b7:f7:33:e0:40:69:9f:be:90:71:6f:
                    0d:d8:31:67:17:f2:70:b3:46:7f:21:10:9c:e8:5c:
                    0b:57:23:93:c6:03:01:9d:0a:c0:f9:ec:f5:6c:73:
                    06:4b:d0:36:cb:63:32:ec:04:15:44:d3:16:d8:d2:
                    8f:ea:79:5f:86:d3:fa:d5:73:b5:d0:06:79:43:68:
                    53:11:67:9f:72:fc:b2:ce:b8:12:eb:51:49:88:de:
                    4b:49:2c:f2:7f:bd:0a:06:08:62:07:c5:8c:1c:c9:
                    e2:d5:db:13:2a:b3:4a:10:95:7c:0d:ea:24:44:5c:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:00:F5:AA:C4:FF:01:D3:C8:F1:F4:E0:C2:66:AE:05:CF:84:8B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20bdd0d6-1fcb-3dcb-82bb-82d43283f19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e4:09:2e:cd:5a:f6:3b:0b:0e:03:f5:62:e7:19:aa:fa:a1:
         d4:5f:f4:72:13:e0:e3:33:c4:d5:b7:ea:59:3b:19:e3:e2:b3:
         9e:1a:92:b4:8e:25:bb:fe:73:50:98:7c:e8:86:a8:73:63:cf:
         39:c3:b6:66:12:d3:51:4a:bd:85:79:8d:9f:42:d9:62:80:32:
         3e:19:84:d7:c3:21:2b:5d:21:9b:a5:11:aa:38:0e:6b:06:30:
         79:6b:ae:93:21:86:57:f5:e2:63:1e:be:c8:96:bf:07:b6:6a:
         2f:e8:45:25:ee:0b:cd:1c:1b:39:1b:17:4d:36:cd:00:15:a9:
         91:71:d1:2b:78:da:da:bb:56:cc:41:1c:c3:ea:cc:7d:d7:05:
         6f:9e:2f:0e:39:c3:4d:7f:f2:75:4b:f2:ba:ea:f7:09:39:c0:
         f8:2d:3e:52:e5:46:a9:20:07:02:c7:a6:56:96:89:ac:f1:85:
         42:6c:bf:18:dc:cd:20:06:9f:a8:4c:f4:39:a8:65:f7:b8:cf:
         81:6c:f9:cf:c6:60:3e:e6:8f:00:17:85:9f:90:36:fd:95:23:
         da:7b:f0:54:91:2f:ec:7f:c4:26:90:d4:b2:e9:25:77:f8:04:
         24:7a:f3:d9:38:65:66:8b:24:06:d7:6c:2d:32:45:3c:6c:24:
         8c:89:e6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:32:15 2026 by rpki-client