Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44672f70-2e48-3fe6-a6f4-446c479ee9a8.roa
File:                     44672f70-2e48-3fe6-a6f4-446c479ee9a8.roa (raw, json)
Hash identifier:          wiKVCNB9ap9HRSC2Wk0LcOKU7Fh7xJRCxsDFaeag2BA=
Subject key identifier:   2A:D5:7F:E8:77:22:87:4E:FF:36:BC:6B:94:3F:00:C2:32:9F:18:39
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DC565C58177BB1E36DF57A180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44672f70-2e48-3fe6-a6f4-446c479ee9a8.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        173.20.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c5:81:77:bb:1e:36:df:57:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=90cf823a-ebbd-4959-b1f9-84526397b3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:93:56:09:7e:89:96:7c:fa:f0:3e:42:a7:1e:
                    93:7c:9e:98:98:b4:b9:c8:87:31:86:45:1b:c4:ed:
                    70:04:e8:8c:35:39:74:49:d8:17:92:f4:05:4a:b6:
                    c8:bc:fc:c8:d3:30:3d:02:70:ec:94:13:35:3e:8f:
                    43:29:9f:79:e9:68:2a:04:88:bb:82:5f:74:0e:95:
                    72:02:17:b2:0f:c2:c4:08:6b:43:5a:a4:c7:51:46:
                    fc:4e:07:82:f8:2d:b1:8e:8d:49:64:fb:8e:69:a2:
                    21:37:04:85:82:07:bd:e5:2f:b0:0b:1d:06:bd:6e:
                    48:03:50:ac:17:1a:a5:fb:63:bb:e0:e1:e3:0c:5e:
                    29:af:96:5f:07:b5:d7:8f:5b:18:8d:03:10:92:12:
                    2f:22:bb:8b:1a:15:76:a7:83:e9:07:a2:40:cc:80:
                    ca:ec:af:e4:28:92:d3:46:74:7e:f9:00:c5:7f:a3:
                    21:70:5d:7e:d5:9d:af:97:94:94:7e:22:90:04:f9:
                    8c:30:8e:c8:2b:02:b2:8f:09:b3:ce:f9:d4:c5:f2:
                    68:e5:77:24:ba:02:41:47:2e:49:83:63:e7:98:e9:
                    8c:56:f1:61:f1:a7:a4:da:2f:7d:01:d1:7e:5e:98:
                    89:7b:1f:48:df:ef:9b:04:b9:1d:d0:d5:4a:a0:a7:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D5:7F:E8:77:22:87:4E:FF:36:BC:6B:94:3F:00:C2:32:9F:18:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44672f70-2e48-3fe6-a6f4-446c479ee9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:27:ba:bc:d9:d9:28:50:3f:04:56:d4:52:4c:27:68:83:93:
         d6:48:01:ed:45:a5:de:df:35:64:87:b3:b6:88:6f:b8:da:f8:
         67:04:dc:de:78:01:b9:b8:46:ff:3e:da:c5:2b:88:10:ae:16:
         2b:e4:58:5f:27:0c:f4:ee:e9:2e:b7:c1:ed:0d:0d:20:68:bd:
         da:97:71:75:e0:0b:98:b5:39:9d:e8:cc:6d:7f:75:f7:f9:14:
         1c:e9:01:91:d5:ed:7f:fb:9b:e7:40:bd:58:3e:b7:7e:d3:6a:
         c9:34:17:b0:8e:52:0e:b9:c0:9c:6d:12:20:34:71:67:64:1b:
         e8:e0:71:ad:c9:e0:13:e3:c9:3d:27:fe:53:2b:27:fc:04:a6:
         40:c3:ec:7f:de:44:a7:15:09:e8:19:26:1c:d2:b5:23:da:6c:
         09:a5:43:b8:54:ee:41:2c:bf:a6:a3:c4:82:78:0f:5b:d0:26:
         32:49:f6:ee:b9:82:0c:bf:50:43:ee:70:a4:bd:59:27:b5:90:
         56:48:ae:4e:a6:0f:32:89:98:f3:e9:38:e7:db:82:77:7c:9f:
         48:fb:7d:f2:af:7a:89:d8:14:65:00:b4:d2:ef:65:05:7c:33:
         db:a3:84:48:ce:31:aa:5c:87:42:23:43:ba:49:3a:7c:62:b4:
         2e:51:8a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:13 2026 by rpki-client