Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a33e3f42-22af-3049-b620-319c6cb89364.roa
File:                     a33e3f42-22af-3049-b620-319c6cb89364.roa (raw, json)
Hash identifier:          XWVPLnJPfmuYQwm/kBh1VEth4eQHPAOzgCpbWqzbThE=
Subject key identifier:   04:2E:66:C8:5A:8D:D4:B0:84:ED:9E:9E:76:76:B8:55:2E:74:FF:DB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E132015FECBE0F42C627C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a33e3f42-22af-3049-b620-319c6cb89364.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.19.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:32:01:5f:ec:be:0f:42:c6:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=64c832e3-8301-42a5-8bb9-c7bc7429575d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:00:ac:50:dd:a7:e6:81:1c:03:1a:24:9d:
                    aa:c6:22:b0:20:c6:93:b6:20:7e:20:93:c9:02:ba:
                    e2:40:bd:8d:3e:a5:ef:e1:d7:94:9e:89:04:1b:c0:
                    34:2d:9b:65:a1:02:0c:2c:19:c6:da:d8:ba:37:9e:
                    10:6c:34:1f:82:e0:00:45:b0:74:c1:b3:05:20:e4:
                    0f:84:d5:de:78:ab:1a:8c:f6:ba:f4:0e:9a:ff:53:
                    8f:c8:4a:55:77:f0:c0:cb:ef:b9:82:9e:de:33:92:
                    cb:37:0a:7b:86:b3:55:1d:56:cb:d4:61:1a:87:39:
                    dd:9e:23:2d:7b:31:71:12:9c:b1:ff:d5:79:b5:1b:
                    a3:83:3e:49:ee:f8:44:57:29:da:fe:fe:3d:9a:87:
                    70:1d:a7:50:71:80:4c:65:f0:b8:4b:b9:00:66:c0:
                    7a:04:04:13:06:00:c8:37:92:ba:79:00:e6:da:2c:
                    72:e4:dd:ba:55:35:25:84:81:fb:82:dd:8c:bb:81:
                    79:39:78:bf:bd:9c:d1:09:7a:43:21:7c:3c:61:f0:
                    a8:2e:f3:0d:17:34:fc:18:16:c0:39:ae:ca:dc:b4:
                    96:16:e9:55:00:af:58:90:ca:4c:38:c7:17:43:e1:
                    5f:85:0a:e4:05:e9:1e:2c:f7:10:0f:c1:66:d4:4a:
                    fa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2E:66:C8:5A:8D:D4:B0:84:ED:9E:9E:76:76:B8:55:2E:74:FF:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a33e3f42-22af-3049-b620-319c6cb89364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:80:2c:b8:21:3c:f7:00:5e:86:1e:32:e1:96:ee:cd:f8:41:
         5e:74:11:3f:e6:f9:dc:8d:fb:29:ca:7f:05:37:8e:02:50:c6:
         16:67:5d:da:9b:2c:f8:56:45:be:eb:36:c0:dc:96:eb:15:86:
         df:be:fb:c8:4d:72:72:e4:2e:7c:35:c5:60:4a:fb:e7:85:e3:
         fd:75:8d:61:d8:14:1a:fd:87:c4:91:c0:b0:2b:d1:86:d2:ce:
         6f:c0:1d:8f:50:59:12:81:f9:c8:58:15:21:30:bf:94:93:c6:
         7c:eb:bb:8a:d7:f9:38:4a:64:92:02:3d:f9:80:a0:42:70:66:
         62:49:a4:38:dd:db:fa:ad:3d:1c:4d:58:ca:4e:07:96:73:ed:
         63:25:ba:8b:d0:50:93:1b:85:87:13:d7:e9:a9:7f:a8:84:47:
         60:f9:de:2f:34:10:7f:3f:9c:61:b6:13:32:2c:57:d6:95:99:
         c2:9a:2f:30:9e:96:b3:06:c7:0e:a2:5f:3c:d8:a1:6b:30:bc:
         46:f0:bd:4d:45:ff:ea:98:f6:25:51:6e:8a:04:53:4a:0a:dd:
         5a:85:64:53:71:09:cc:0a:5a:ba:46:06:ef:e1:a5:c0:fa:71:
         a5:97:1d:5b:d9:68:7c:18:53:e1:7a:c7:75:6f:eb:b3:81:2f:
         a9:dd:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:16 2026 by rpki-client