Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/320fdcb1-da17-37d4-a57e-e33ff9106025.roa
File:                     320fdcb1-da17-37d4-a57e-e33ff9106025.roa (raw, json)
Hash identifier:          1eT0Z2wZQyQJNt8Z4NBuoE3NntOaztPyAf01qmzvCf8=
Subject key identifier:   4B:74:A7:F0:6E:2F:42:64:1A:A1:D5:30:F9:75:FF:55:2E:E8:9B:4D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DC565C447941599680C238740
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/320fdcb1-da17-37d4-a57e-e33ff9106025.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        173.31.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c4:47:94:15:99:68:0c:23:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=bdce4a66-d98f-4ca2-898a-fbc14916329e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b1:3e:0c:42:68:1b:c5:f7:a8:d9:08:5c:cd:
                    03:79:93:bb:1e:f9:9e:55:f1:ef:6c:aa:a8:37:dc:
                    41:80:a0:86:94:79:bd:08:bd:81:a8:22:24:b2:76:
                    a7:4f:8a:a6:40:2d:30:31:f8:ef:fe:0c:e5:76:55:
                    ed:33:35:e9:b1:84:e6:29:0d:79:90:c8:bf:26:62:
                    05:1b:97:a9:17:e2:ce:9c:67:ac:ee:5e:af:2a:57:
                    f6:3b:e6:ae:5c:aa:74:31:16:d0:1b:ef:a8:68:95:
                    a3:70:c9:f6:1e:c9:4f:82:5b:fd:a1:eb:e6:2e:bd:
                    b1:3f:c4:eb:1c:1c:b9:7c:27:cd:4f:8d:9b:06:b6:
                    75:cc:bc:86:fd:d0:a9:94:8e:5a:4f:27:ad:ff:aa:
                    08:49:10:02:aa:e2:70:0c:03:97:43:dc:42:4b:26:
                    f3:4f:70:6e:b5:41:64:1e:55:da:02:2f:fb:9c:64:
                    9c:56:ef:e1:7b:73:42:9c:2a:8f:41:a2:71:99:aa:
                    15:57:fd:c4:eb:4c:93:4e:33:34:7d:a2:08:9f:35:
                    19:5c:fe:a5:8d:b8:1c:e7:f1:d7:81:5e:82:67:73:
                    ab:50:6d:ee:a0:cf:28:b1:76:b0:a0:e0:ea:27:f6:
                    80:43:72:e9:6e:f3:6b:4a:09:28:5c:1e:db:c9:33:
                    a3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:74:A7:F0:6E:2F:42:64:1A:A1:D5:30:F9:75:FF:55:2E:E8:9B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/320fdcb1-da17-37d4-a57e-e33ff9106025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:cb:a1:39:9e:d8:48:fc:12:5f:ff:2c:7c:3f:6f:13:77:
         b4:2a:33:b0:9c:11:b3:96:49:b5:44:f6:8c:96:a3:40:0c:65:
         11:ca:01:c1:b7:d8:1e:d7:05:7f:e8:82:5a:6d:aa:15:c2:26:
         ae:19:6c:fe:56:18:3f:ba:c7:c7:d0:2c:ff:9b:68:85:5b:2d:
         c6:d3:bd:63:74:2c:64:ef:4e:e7:99:53:60:47:e5:bc:e7:89:
         8c:be:63:f7:d1:5f:fe:ef:3f:48:37:8e:25:ba:8c:f3:f8:26:
         3f:91:f4:0a:c5:c5:9c:41:af:94:78:61:ac:42:01:44:5d:eb:
         75:14:41:34:e5:b2:83:3e:8e:48:43:33:b1:70:b5:6b:f5:92:
         1b:ae:6d:b7:32:e3:1e:63:7e:57:c9:85:66:90:5e:3f:b2:f6:
         0b:ba:ea:d8:eb:df:49:69:1a:f2:60:3c:92:1a:25:f3:10:18:
         24:b3:bf:e6:6b:e3:47:a2:54:de:5f:5f:cd:bf:3a:ac:3a:d9:
         28:8a:60:e7:af:06:f9:93:20:8d:39:a9:c2:d5:60:b7:0d:36:
         91:f8:09:8a:52:04:6d:2e:04:39:db:77:db:33:81:c9:87:21:
         97:7c:6a:42:eb:d7:a4:e2:30:b8:f4:03:99:3e:f4:49:b4:2e:
         d0:8c:60:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:16 2026 by rpki-client