Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/517bdef3-cd62-3bc6-8f7e-04a891085fb0.roa
File:                     517bdef3-cd62-3bc6-8f7e-04a891085fb0.roa (raw, json)
Hash identifier:          W36DoyOczYHvhKMqkuK/3sRC/QZ9JtA41qs8IVWIhdQ=
Subject key identifier:   4A:B8:BB:FB:2E:12:56:A1:A1:E0:64:93:88:55:00:0F:59:CD:D7:4A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D39CF97A7372B002F7F516250
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/517bdef3-cd62-3bc6-8f7e-04a891085fb0.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.17.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:97:a7:37:2b:00:2f:7f:51:62:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=d8e26152-d745-4763-928d-6a641aea4061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:36:9f:e4:f9:36:21:b7:e7:22:50:19:47:
                    be:b3:58:a5:75:f7:bb:cb:cd:65:79:43:df:10:aa:
                    b1:b7:4a:4f:ab:ae:46:90:f3:4b:4a:13:ee:08:a1:
                    ff:65:96:f2:94:12:e0:bb:80:da:09:8e:0d:bb:0b:
                    ce:6e:15:3a:a7:7e:f7:8f:a4:a9:29:67:1f:a7:2c:
                    5b:87:f2:91:da:95:12:1e:cc:ed:d8:6a:1c:e6:e8:
                    7a:9d:4b:c5:b4:0c:cf:0f:bb:88:49:aa:97:97:85:
                    da:6c:e6:c8:1c:d5:7e:d4:11:0a:d5:2f:76:d2:0f:
                    47:9d:83:d9:11:ec:c6:84:9f:a1:6b:cd:f0:cb:fc:
                    17:78:84:90:3c:10:af:4d:b7:b6:05:80:cc:53:2f:
                    d2:c8:36:2b:04:dc:33:78:ef:1e:fa:e1:47:d9:b0:
                    97:8d:8f:00:cb:57:3f:24:19:fa:bc:80:8a:22:69:
                    f1:66:e3:61:b7:08:6d:bc:a1:05:a6:82:d4:47:cd:
                    c7:c6:ff:03:6b:62:ca:c6:b9:e1:fc:a3:74:67:83:
                    c2:5a:2c:50:b4:83:f0:8b:14:ad:f4:bd:5c:36:3d:
                    91:1c:42:12:b7:86:38:da:6f:7b:1c:90:a2:89:df:
                    43:f0:59:d0:b7:ab:cb:fb:41:c8:d1:35:77:79:1d:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B8:BB:FB:2E:12:56:A1:A1:E0:64:93:88:55:00:0F:59:CD:D7:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/517bdef3-cd62-3bc6-8f7e-04a891085fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fd:1f:7e:2f:a2:b4:69:79:89:05:c0:dc:d2:c3:aa:ea:00:
         bc:e0:ca:9b:f5:4d:7e:50:ab:2e:08:ab:73:1d:88:0d:55:6b:
         46:d6:e8:c2:47:09:7e:6e:d9:37:11:84:6d:2a:35:74:e4:13:
         bf:f7:b0:07:53:de:86:a4:f6:d9:a3:e7:5d:76:e6:39:37:e4:
         2d:bc:8a:d0:2d:b0:f0:a0:fb:43:6c:1c:cf:f3:e2:19:69:bb:
         07:7a:0c:99:88:c1:f5:18:56:85:cc:41:2d:fa:93:d9:78:ae:
         d7:49:8d:98:e1:1c:b2:1d:ef:ad:b1:f6:4f:61:8c:58:1a:96:
         d3:21:31:15:61:37:53:4e:23:0c:0e:b6:f1:90:e9:2c:46:c4:
         ca:5d:27:6c:f2:58:de:77:9a:24:6f:79:b4:5c:a7:66:87:33:
         05:5d:20:84:1a:f2:8c:a6:07:ec:21:cb:0e:18:f0:4b:1b:3d:
         42:cf:a3:7b:18:47:4b:85:c4:02:34:f3:8e:d3:55:2f:7e:26:
         b1:a4:07:8a:f9:9f:c9:58:27:93:41:4b:0c:2a:f1:9d:7d:91:
         bb:03:73:ec:9d:de:8d:32:59:32:f8:78:b7:ae:f7:32:89:55:
         10:0d:f5:90:51:da:d0:72:88:27:c4:c3:39:c7:f4:be:f6:a3:
         c3:01:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:45:41 2026 by rpki-client