Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1391788-a4ce-37dd-98c4-195c2e286d79.roa
File:                     b1391788-a4ce-37dd-98c4-195c2e286d79.roa (raw, json)
Hash identifier:          cpwOpqieSzmgaeNVHTh5QcYVIWHBA9u6oTOzwmI2Y7g=
Subject key identifier:   77:A4:68:13:AE:6C:87:8D:3D:1A:57:2E:89:26:05:0D:A8:74:B5:1E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AACA264508BF9417920C20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1391788-a4ce-37dd-98c4-195c2e286d79.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        173.22.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:ca:26:45:08:bf:94:17:92:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=cfc2fcfb-e4f1-4687-b0ff-94559a33fcc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c9:f9:94:7d:94:10:d2:d1:90:cd:82:c2:f8:
                    c2:7d:e0:37:1e:9a:4d:1d:d6:e9:c4:a7:95:92:10:
                    0d:3b:ad:a4:17:d8:cc:df:40:8c:b2:d4:65:51:99:
                    dc:bd:29:da:6e:4c:af:33:e8:dc:31:64:c6:11:5a:
                    1b:44:32:1c:52:4a:76:9d:be:d4:3e:64:e7:bc:b2:
                    b3:7b:02:5b:f5:2f:04:95:40:d2:30:f5:ae:fa:cf:
                    a5:8f:f1:0d:06:26:80:b3:03:d9:28:9e:61:93:63:
                    89:5b:48:3a:60:6a:d1:31:a3:54:f1:4d:98:d2:6f:
                    95:8b:a8:16:54:94:cf:1f:b9:f0:84:ec:86:fa:cd:
                    cb:cb:6f:5a:92:7a:01:98:3d:f5:21:7a:7f:fc:51:
                    fe:e1:6a:17:0f:1a:57:25:d6:b6:85:dd:6d:b8:1d:
                    50:33:7c:10:c6:1b:90:cf:d4:36:2d:3d:3d:e5:ff:
                    dd:b2:54:ff:e3:55:c4:52:60:00:48:25:cc:4d:95:
                    9f:15:89:ab:79:cf:85:74:69:39:5e:f0:ff:00:9f:
                    1c:e4:2e:13:43:85:ac:f5:30:2c:f8:57:37:68:1a:
                    7e:f6:a3:79:eb:2d:e2:85:ce:e8:8a:01:d8:31:a6:
                    eb:59:73:95:97:e1:ea:54:44:33:97:0b:cf:79:c9:
                    5a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A4:68:13:AE:6C:87:8D:3D:1A:57:2E:89:26:05:0D:A8:74:B5:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1391788-a4ce-37dd-98c4-195c2e286d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:08:b8:6b:82:4b:36:ca:48:ab:ab:2c:3d:3a:a9:eb:33:
         87:de:92:8f:5c:57:22:2b:65:94:f1:3a:e2:3c:05:7b:72:2b:
         40:b5:8d:40:16:84:95:0b:d8:d2:d5:06:02:75:50:70:80:9f:
         74:b2:27:ac:34:51:eb:15:50:91:c8:4a:29:0d:95:27:ec:24:
         bd:16:16:e4:e6:a6:1f:98:0a:f4:f5:6a:d3:bb:b4:3e:91:39:
         fb:db:ac:6a:11:60:5a:65:dd:f9:4e:02:17:84:f3:37:e1:fc:
         b6:de:44:6b:9b:7d:1c:ab:f1:20:ce:c2:c5:fc:a1:52:af:f0:
         71:d5:3f:fa:31:70:d7:64:36:67:78:ea:6d:90:af:28:0e:da:
         03:1b:14:70:25:26:3a:24:e7:64:d6:8e:12:94:ad:65:ef:28:
         62:78:38:4d:fc:de:b8:bf:8f:2e:c3:9f:48:1e:e0:16:be:43:
         13:07:21:bf:db:b8:87:ce:35:64:66:58:c6:3d:3d:36:83:b5:
         36:2a:cc:0a:9d:54:4e:ac:4d:3b:98:16:a4:c5:95:21:de:6f:
         96:9d:ab:83:ed:78:d4:0b:83:ad:b9:78:be:73:c3:02:e8:58:
         2b:52:0a:45:41:07:a9:af:36:fd:cf:2c:dd:f1:fd:13:53:45:
         71:ea:62:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:52 2026 by rpki-client