Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa470923-e74c-334a-af00-4a5da29031fc.roa
File:                     aa470923-e74c-334a-af00-4a5da29031fc.roa (raw, json)
Hash identifier:          F6Z3iisHMLnXwn8XeiFxZW9TPZyUiiycSmK0jiBro38=
Subject key identifier:   81:9B:EA:70:DF:06:FF:DA:67:38:50:BC:32:5E:24:27:8F:F8:FD:B5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DC565C9C1FD7FE7DFBFFC82C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa470923-e74c-334a-af00-4a5da29031fc.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     30036
IP address blocks:        173.19.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c9:c1:fd:7f:e7:df:bf:fc:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=cc8d0c7a-b56c-4ba7-9e0c-13aac99f08b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:99:3d:37:0d:4d:80:0e:31:03:56:d1:ce:
                    fa:d8:61:d1:c9:e8:95:71:46:af:33:ae:45:d4:34:
                    cf:c4:63:70:25:08:ee:bb:55:cf:56:b1:3a:e0:3c:
                    9b:c2:54:ba:6f:8c:41:b2:18:6d:99:aa:36:42:f1:
                    79:85:3e:88:5f:b0:b5:92:4c:d0:7b:3d:1d:c4:1b:
                    3a:e7:0b:33:f3:32:fe:94:24:11:d1:90:77:68:77:
                    48:76:02:a0:2a:cc:a7:80:72:37:f0:15:f6:37:33:
                    f2:0c:c9:6e:00:dc:e0:92:2d:fc:58:28:a3:9d:02:
                    e1:76:ac:d6:3b:72:3f:ba:a3:63:81:69:90:52:d8:
                    5a:8f:8a:a9:27:77:64:99:fd:60:32:9e:b4:c9:eb:
                    71:73:84:fd:69:b1:ea:22:6d:8c:fc:14:f3:f1:ad:
                    0c:33:f4:2c:59:a7:00:ac:7e:41:dc:11:ec:34:50:
                    2e:2d:35:1b:e6:40:58:2b:e8:c4:c2:2f:57:24:db:
                    ee:4c:38:03:53:1f:b6:b2:d9:72:45:18:2a:55:ae:
                    75:1c:3d:07:32:55:ff:cc:30:53:53:9c:c5:07:12:
                    c0:58:02:b6:b7:af:19:21:c4:0e:4d:e4:52:3c:46:
                    25:16:30:12:02:51:41:22:10:7b:04:ad:c0:7e:3e:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9B:EA:70:DF:06:FF:DA:67:38:50:BC:32:5E:24:27:8F:F8:FD:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa470923-e74c-334a-af00-4a5da29031fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:6d:b3:9f:e5:5e:5d:b3:1c:11:49:69:69:68:8a:a8:af:61:
         c3:84:cf:2c:69:0a:87:2e:ad:d0:bd:3f:d9:d7:4a:ca:c3:91:
         a5:bc:50:9d:26:ff:d6:e4:5a:39:0d:7c:d9:04:4e:fb:21:57:
         27:4c:d2:36:33:ec:fd:de:69:2c:f3:56:ed:c7:47:01:c1:cd:
         87:99:ad:56:7f:db:3c:2e:66:ba:a0:b4:7a:85:c8:d1:18:bf:
         e9:27:5d:0c:0d:c8:0b:98:0e:34:ef:4e:40:07:c1:99:bd:e3:
         cb:97:b3:d3:5e:3e:30:c8:0a:b8:ea:49:d3:d2:e8:d4:53:7e:
         ba:8c:24:28:05:25:fb:46:08:6e:4d:ad:e6:c9:db:d7:f4:79:
         ca:2b:30:03:7a:a4:66:19:11:cd:4c:4e:2b:e6:92:0a:75:7c:
         e9:2d:e3:e7:1b:eb:94:10:70:f0:c8:a5:80:6f:eb:8f:b2:39:
         76:03:01:b2:3a:12:8a:64:11:c2:ab:6a:ef:c9:c8:0b:89:f6:
         4c:d7:a9:2a:58:28:c4:9e:92:c5:f5:0a:24:a2:1c:ad:7a:31:
         b8:5f:de:5b:9c:38:01:12:5c:f0:6f:0f:4e:77:af:df:bd:b9:
         4e:d5:44:19:aa:25:22:ac:aa:04:da:4b:84:a3:96:d8:91:1f:
         ee:66:96:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:32 2026 by rpki-client