Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27b37548-4562-3242-bb1c-375ff25ef6bc.roa
File:                     27b37548-4562-3242-bb1c-375ff25ef6bc.roa (raw, json)
Hash identifier:          SJqkTp6Yc8Lx03Oed7IvFjJa9vZI3aOa8mG74fP0W90=
Subject key identifier:   6E:BA:EE:D0:13:BC:4A:40:30:66:8D:B3:6E:09:D1:1D:3C:90:8D:8E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E13247E074E876CA59BD80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27b37548-4562-3242-bb1c-375ff25ef6bc.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.19.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:32:47:e0:74:e8:76:ca:59:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=319be149-70c5-466b-8252-a56dc7c7ef58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:87:69:43:38:02:85:4b:17:c8:f8:e3:4d:
                    ba:82:83:c7:60:46:1c:b5:fc:aa:c2:3c:2a:d7:f8:
                    2b:de:58:91:7e:e7:2c:cd:88:1a:ca:00:a4:89:04:
                    4f:ce:a4:63:83:f8:0a:4e:49:43:01:55:4d:ba:07:
                    65:3e:ea:e7:e2:ba:c7:16:e3:3c:03:cd:24:f0:97:
                    b1:e8:23:67:73:2c:41:be:cc:00:90:92:67:cb:00:
                    89:10:2d:87:2c:75:25:f6:e1:a4:9d:a4:a1:94:54:
                    7d:01:bc:10:09:20:9d:3d:fd:75:27:93:cf:98:33:
                    18:35:32:ce:c9:56:97:2b:92:2d:ac:cc:a4:f5:79:
                    bb:9a:dd:d2:5e:11:c2:e2:1c:79:0c:0d:9b:b3:55:
                    ac:10:e2:b8:a8:56:47:d9:32:36:92:4a:96:11:37:
                    b4:c0:0e:60:78:83:60:f5:c8:dc:1a:56:b7:a6:bf:
                    16:93:32:37:6c:61:a5:dd:51:8f:de:bb:41:a4:53:
                    c0:da:08:94:64:ab:41:a4:dd:44:ec:2c:5f:0b:2c:
                    63:52:16:3d:32:6e:df:20:38:6d:11:4a:02:85:5c:
                    47:26:ae:db:70:29:40:48:f0:7e:37:20:0a:8c:7f:
                    dc:27:d5:b3:b9:40:5d:e6:9b:b9:08:de:60:6e:a4:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BA:EE:D0:13:BC:4A:40:30:66:8D:B3:6E:09:D1:1D:3C:90:8D:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27b37548-4562-3242-bb1c-375ff25ef6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ee:82:38:a3:2f:93:14:23:3b:e5:66:43:79:e8:7a:75:9d:
         b6:98:c2:7d:c2:34:b8:94:fb:dc:ae:90:0a:43:00:7f:65:5d:
         49:22:8f:a2:00:70:58:a9:b0:1a:71:20:1e:c2:77:ad:61:b8:
         33:59:67:5c:10:e6:50:25:9e:ee:1d:b1:b9:e0:da:52:66:bd:
         ae:87:ff:b3:9e:c9:3d:56:f4:35:a8:74:24:4c:3d:e7:ea:52:
         52:99:b7:41:38:0f:5b:5f:14:28:e6:2d:57:d6:e1:9d:fa:b3:
         e3:cd:00:b1:48:f3:a1:1e:b6:d1:43:70:43:92:6d:b1:9e:16:
         6e:04:b5:65:ed:a6:86:e1:f8:2f:dd:fc:21:e9:0b:cb:62:d2:
         39:ea:21:95:35:df:65:70:fd:97:1a:20:1e:a5:f9:09:85:dd:
         a7:f4:eb:f8:e3:72:a2:64:73:ad:43:33:c9:59:c0:b5:94:cb:
         68:25:39:49:9d:c6:79:89:6c:3a:fd:f9:a4:af:30:36:0a:73:
         ec:3e:22:1d:57:9c:49:77:23:97:8a:e2:8a:d4:c6:22:e5:90:
         96:ff:c4:c9:68:57:90:ec:b1:ad:1e:9d:02:1a:8a:4e:a5:7c:
         85:4c:e6:6b:d9:b4:68:ad:a5:b8:d3:f6:b5:35:f4:74:de:62:
         bd:8b:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:07:35 2026 by rpki-client