Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5b6aaea-edc3-3c09-b2ab-2037710a9978.roa
File:                     e5b6aaea-edc3-3c09-b2ab-2037710a9978.roa (raw, json)
Hash identifier:          JAcqU/gk3aZAKaczdtuPU0Uavxa4HSt4V65PWmWMhtA=
Subject key identifier:   28:DF:C1:BE:61:F1:7F:C6:BC:36:47:63:FA:A7:34:A6:20:FB:55:30
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D39CF965354DD0DC247B505C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5b6aaea-edc3-3c09-b2ab-2037710a9978.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.28.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:96:53:54:dd:0d:c2:47:b5:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=5b26ac7a-c6dc-461b-a267-d9ecbd484db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:48:5b:0f:78:f2:8b:51:99:a3:42:a2:1f:
                    27:11:1a:c5:c6:7b:88:f4:13:3c:1b:1c:3b:5b:72:
                    74:5c:2d:ea:e7:29:b5:07:43:17:70:6c:59:d7:2f:
                    ce:6e:50:a9:66:8b:b5:b8:e8:e6:9e:a6:b4:3c:49:
                    82:43:ef:de:50:25:5b:95:8e:f3:e5:7b:d7:81:fb:
                    8e:84:c8:0b:21:b4:76:30:af:92:24:5e:19:fe:7f:
                    18:70:49:2c:ee:7a:d6:43:b9:3b:af:48:bd:6e:c0:
                    0d:1e:77:ee:1e:eb:13:43:85:63:db:42:20:26:dd:
                    bb:b5:4a:7a:73:45:e8:11:0a:31:48:f9:27:2c:ba:
                    04:0c:85:f6:f0:9a:2f:23:2a:c2:80:ba:42:5b:26:
                    65:a7:e1:01:7d:4d:66:49:60:38:5a:7c:53:29:98:
                    24:ac:ae:e0:44:48:9b:cc:23:bf:e1:e6:b8:8a:43:
                    82:40:cc:41:51:ce:b7:06:58:d2:48:55:6c:9c:6a:
                    ef:a2:96:9d:3a:40:97:1d:a5:c3:bb:0a:0a:39:1d:
                    bb:e6:ec:9b:a9:b0:4d:40:79:be:e1:81:cb:e0:bc:
                    e5:96:bb:8a:ba:e6:c2:5b:52:65:d0:39:bc:36:76:
                    8f:97:55:1e:72:cc:52:29:b1:78:d9:e2:30:6d:52:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DF:C1:BE:61:F1:7F:C6:BC:36:47:63:FA:A7:34:A6:20:FB:55:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e5b6aaea-edc3-3c09-b2ab-2037710a9978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:db:5a:2a:11:a3:86:46:57:9c:a4:6b:65:9d:f3:ee:fd:b3:
         da:35:c6:07:c5:2b:18:1f:82:ce:c9:31:75:12:14:04:bb:45:
         90:72:33:34:f7:38:24:53:8a:a2:fa:ea:81:4b:f2:38:e5:57:
         18:56:66:98:0b:51:34:14:a7:43:1e:d6:9e:21:a0:fc:91:f3:
         3d:22:aa:ba:05:10:ec:f6:be:8e:ba:04:42:29:da:6f:6d:3e:
         2b:e8:59:a3:14:9c:20:ea:16:18:57:3f:95:55:73:95:a5:24:
         b5:4f:99:63:01:7e:13:3d:13:cd:7e:f2:c2:e0:ec:ba:eb:76:
         54:47:23:7a:8e:27:27:ad:3c:78:bd:a3:d3:af:dd:b9:e1:ff:
         18:2a:69:e7:2c:1f:e3:b8:4c:b7:b8:ea:aa:07:3b:38:9c:70:
         d1:4f:cb:1c:9f:05:f1:25:b5:0b:5f:02:83:ac:1a:b5:b7:c0:
         6b:7e:c7:4a:20:71:4f:1b:a4:26:c8:6e:63:f9:8c:df:2d:ff:
         82:43:46:6b:ac:ea:99:21:35:04:aa:4a:16:b8:e0:57:fc:4e:
         bc:ca:4a:ba:75:31:f8:70:f7:f5:79:95:f6:47:7f:22:b2:76:
         78:90:d9:93:21:b3:ac:07:17:57:6d:b4:65:b9:d8:d0:2c:ba:
         e1:2d:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:58 2026 by rpki-client