Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b61b7df5-a9c8-3227-bb6d-022ae7f3b4ff.roa
File:                     b61b7df5-a9c8-3227-bb6d-022ae7f3b4ff.roa (raw, json)
Hash identifier:          jI9nfdVi97T6fELIQu0vTbijJCAYgqxUuw1HBmFp/3U=
Subject key identifier:   1D:50:43:B6:37:07:B5:B1:E2:EC:7A:34:23:A0:36:A0:98:53:EB:0D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E90BA52634590D1FA8D59EE28
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b61b7df5-a9c8-3227-bb6d-022ae7f3b4ff.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        173.17.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:52:63:45:90:d1:fa:8d:59:ee:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=00706c62-afcd-476c-84ce-e3601a34152d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:58:37:df:82:16:dc:35:ba:42:53:26:7d:60:
                    fd:77:58:d5:3c:70:48:57:c4:9e:53:c1:d6:15:7b:
                    a8:67:0e:ed:54:69:2c:b3:0b:36:e5:6a:f7:75:8b:
                    03:7b:89:15:68:6d:3f:9e:94:66:81:59:bc:38:4d:
                    40:45:4e:51:b0:16:5c:52:d2:a6:b0:29:06:5a:71:
                    11:3a:6a:57:9b:ad:0b:15:96:1c:93:25:3d:15:bc:
                    0f:8e:c1:8e:ba:c2:dd:1a:e4:5b:fa:1f:55:17:33:
                    89:d9:02:60:16:5c:51:c4:23:a4:e4:df:b9:cb:e3:
                    8e:9f:26:4a:1b:0e:1b:be:07:bb:bd:57:33:22:e9:
                    3f:1a:82:27:c7:1f:59:6b:8f:d2:43:4a:70:e1:71:
                    9e:79:6e:b4:4b:f2:d3:88:d2:62:0d:fc:2e:e8:52:
                    ff:2f:2e:fc:f0:6f:30:4a:3c:df:4f:63:61:2d:c1:
                    cc:35:c5:df:d9:15:c4:ad:54:23:94:73:1e:3b:e8:
                    0d:bf:3e:b4:33:31:24:d2:84:12:e1:fa:a7:0e:2f:
                    cf:a9:d7:ee:6f:dd:ed:e7:14:a9:c7:b3:79:e8:0e:
                    a1:3f:78:f5:13:0e:72:c7:a6:c2:bd:fd:af:38:f8:
                    a9:f8:67:71:c0:b1:70:f8:b5:44:74:c1:4c:24:70:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:50:43:B6:37:07:B5:B1:E2:EC:7A:34:23:A0:36:A0:98:53:EB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b61b7df5-a9c8-3227-bb6d-022ae7f3b4ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:91:53:9b:9f:59:1d:8a:33:51:70:ca:1e:42:54:b4:81:
         dd:18:56:a8:45:8a:ae:b8:3e:b5:db:58:91:f6:a1:b4:86:00:
         0d:2d:92:1f:48:38:cf:91:14:7a:2f:b9:26:8a:05:ec:61:32:
         07:32:9c:b5:d6:77:ea:62:cc:f5:aa:fa:a4:1d:c9:e2:f7:07:
         89:89:9a:e0:76:31:73:1d:aa:25:8a:7e:09:d5:56:f1:a1:24:
         dd:3b:9a:1c:ee:7d:00:82:4b:31:03:e1:c8:11:6d:87:f2:40:
         d9:45:ce:d0:1d:0a:d3:16:4f:8a:1c:7d:d6:10:78:c8:3b:d6:
         d7:89:3e:10:07:a8:8a:a7:2e:3b:55:3d:42:92:f6:72:91:cc:
         ef:c2:b7:4b:b8:2a:58:02:94:59:56:6a:d5:d1:78:dc:bf:f3:
         bc:60:d0:e4:b6:7f:13:35:01:5e:07:d5:8b:60:86:2b:d8:09:
         fc:d2:45:32:5a:c6:0c:b0:98:62:55:62:69:80:ce:6d:f6:b2:
         62:85:28:d7:f8:30:0e:6f:8d:ba:3c:2c:c9:84:70:77:e1:47:
         67:c2:f2:8a:ca:40:3f:66:14:2c:e7:97:42:40:3f:b0:60:cb:
         5d:f6:77:cd:eb:df:d6:ef:1d:df:cd:70:f0:c7:d4:da:f0:88:
         f6:79:92:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:41 2026 by rpki-client