Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f7140b1-7244-3644-82db-c38c8ba69fbc.roa
File:                     5f7140b1-7244-3644-82db-c38c8ba69fbc.roa (raw, json)
Hash identifier:          s80+qhe0QRxoa+edu5MFqHlQU/sBLExU3qdniYrN8Ac=
Subject key identifier:   8C:5C:7E:0E:D2:2E:46:B5:EB:C8:7B:83:03:C6:1D:9E:A3:10:2A:20
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E90BA5A8AED342E2878AFB5C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f7140b1-7244-3644-82db-c38c8ba69fbc.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        173.17.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:5a:8a:ed:34:2e:28:78:af:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=1f0840a6-e197-4fc1-8201-c858f223ac16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:bb:47:ea:13:db:e3:db:2a:75:e0:26:6a:
                    a2:63:2f:02:9c:26:05:f3:72:98:ef:cd:48:de:1a:
                    fa:c3:42:13:53:1e:75:3c:fc:d7:7a:d1:7c:b8:7e:
                    b3:1b:7f:10:86:3f:76:66:03:f5:20:77:bf:5e:55:
                    15:9b:50:3d:20:f2:c2:65:f5:80:11:4f:b4:14:51:
                    3b:9d:da:45:48:30:80:11:1d:34:8e:d3:32:20:ca:
                    f2:ea:83:f4:19:1b:b9:9b:f0:ea:ef:65:d8:c3:48:
                    92:51:6b:09:c9:60:7b:8a:29:4b:a7:30:9f:44:18:
                    77:e1:33:5d:c0:31:cb:8c:ce:6b:e7:6d:25:b4:c2:
                    78:3b:5d:a6:5b:af:5a:eb:67:76:af:79:4b:2c:61:
                    99:95:5d:6e:fc:e2:fb:1b:20:56:6c:3b:ab:84:fa:
                    b6:41:67:87:18:57:76:54:72:d8:23:57:4f:69:10:
                    e7:4c:5e:aa:05:0b:8c:1e:f0:b9:33:ca:80:7c:fe:
                    ab:1e:e5:9a:33:df:ae:b1:4a:b0:6f:b6:46:3b:a5:
                    6b:17:c8:42:86:8a:34:c2:25:c7:9e:00:17:b1:99:
                    8f:44:3b:22:e8:2f:bf:72:50:a5:b5:3d:f5:3a:23:
                    2b:7f:af:92:45:dd:f0:34:43:be:ba:b3:79:3d:84:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5C:7E:0E:D2:2E:46:B5:EB:C8:7B:83:03:C6:1D:9E:A3:10:2A:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f7140b1-7244-3644-82db-c38c8ba69fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e0:26:54:cb:ff:25:91:2d:4b:75:70:13:55:c6:a7:d0:9e:
         a7:bc:2f:c7:ef:00:03:6a:6e:88:d3:87:c7:6f:dc:2c:25:74:
         5c:9c:e1:d8:f9:44:f1:73:16:d9:ce:55:d1:f8:22:f7:18:f8:
         8d:2e:f3:6c:93:ec:0f:16:7b:41:db:58:8b:a5:40:36:e0:e2:
         59:ff:d0:fa:ee:65:3a:59:a8:08:64:70:70:84:26:c2:f5:e6:
         eb:0e:94:ab:c8:71:b8:13:78:31:29:de:fd:5b:2a:b5:db:21:
         1d:75:93:ae:32:72:ce:be:eb:ed:e8:c4:c9:3b:d2:1c:69:89:
         a5:b2:9e:eb:12:4e:74:40:00:f2:ab:87:26:8c:b8:86:8d:41:
         4f:34:90:9c:10:b2:af:41:63:bd:c8:b1:c0:a0:2a:12:7f:4c:
         a7:ee:32:42:e2:8d:f1:af:80:e8:58:58:df:aa:c4:b4:52:6c:
         50:d1:d1:a2:71:37:ab:db:a4:97:25:97:d6:40:33:c6:77:67:
         b4:e1:45:b9:13:9f:14:ff:ea:09:f9:28:91:e1:ee:47:5b:0c:
         65:1a:e2:2c:f3:ff:3b:68:7f:fc:fe:5c:ed:ff:6b:68:4b:33:
         c0:66:c7:ee:d9:ec:55:5e:bf:be:c0:83:e7:a9:cd:10:6d:66:
         c4:3e:ee:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:36 2026 by rpki-client