Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ebb5600e-afd4-3e82-b8a6-cd56295ea1cc.roa
File:                     ebb5600e-afd4-3e82-b8a6-cd56295ea1cc.roa (raw, json)
Hash identifier:          /vW9DeyN8zLe055acS6nF4ba0D6bbwG8tVfGjBHxnCI=
Subject key identifier:   63:CB:EA:A4:65:83:80:86:EC:E2:44:32:66:49:B7:68:89:14:74:49
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584FD52697B1AA8E30EFBCB111C8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ebb5600e-afd4-3e82-b8a6-cd56295ea1cc.roa
Signing time:             Sat 14 Nov 2026 02:00:13 +0000
ROA not before:           Sat 14 Nov 2026 02:00:13 +0000
ROA not after:            Fri 12 Feb 2027 02:00:13 +0000
asID:                     19905
IP address blocks:        173.28.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d5:26:97:b1:aa:8e:30:ef:bc:b1:11:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Nov 14 02:00:13 2026 GMT
            Not After : Feb 12 02:00:13 2027 GMT
        Subject: CN=a10ca206-8237-4e94-8d65-dd58839c84bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1e:83:55:cf:f8:bb:a4:15:82:d6:6a:01:4e:
                    14:10:3d:27:17:1f:c6:c9:88:67:ba:93:16:85:5f:
                    f8:b0:36:fa:10:e0:e0:5e:ad:16:cf:8e:c2:9c:aa:
                    15:fd:bd:ec:26:32:20:b3:41:86:9e:de:8e:7d:f4:
                    75:f1:77:e0:41:e1:2b:a9:9e:80:96:0d:62:e0:6b:
                    ad:33:0d:0a:3b:22:92:2e:87:78:2a:46:c0:10:2a:
                    ef:66:97:af:60:81:ae:ee:01:49:cc:28:12:f8:4a:
                    92:35:8c:84:c9:7d:bb:5a:1c:db:7c:2d:45:5c:76:
                    8d:e1:cc:9a:41:db:c8:50:09:f6:c2:7c:a4:99:04:
                    5e:9d:59:03:e5:a9:76:7d:50:bb:c9:c9:3e:37:d2:
                    ae:79:72:fc:3f:37:44:77:59:71:89:33:b8:a4:60:
                    22:54:ab:ee:f1:7a:74:4b:88:b4:56:5c:20:1f:26:
                    00:d0:77:ec:46:4f:e0:4c:6a:ad:24:49:30:34:ea:
                    2b:68:1e:5e:c6:8b:e4:95:77:d6:4d:4f:88:c8:69:
                    be:49:7f:cf:e3:fa:95:ff:37:ed:d4:5a:13:fd:5b:
                    1a:7e:cc:63:03:ee:bb:89:17:ec:d2:0d:d9:4c:9c:
                    92:b9:95:d3:30:52:3e:ed:ef:cc:e1:db:64:29:b0:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CB:EA:A4:65:83:80:86:EC:E2:44:32:66:49:B7:68:89:14:74:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ebb5600e-afd4-3e82-b8a6-cd56295ea1cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:ea:62:7a:75:7e:35:db:8b:b2:d5:df:3f:49:ad:df:fb:
         b7:db:45:f1:89:a4:b7:94:db:1c:2a:4a:6f:e2:db:37:24:91:
         51:3c:07:41:22:48:7b:d3:fc:08:d1:e7:47:9f:79:eb:a3:14:
         67:14:a2:d5:53:4a:14:ac:7e:1b:17:d1:fe:e1:2a:9d:ba:ae:
         45:27:97:d0:8c:a7:47:44:06:3a:3d:5a:76:78:0d:99:cd:b4:
         d9:ba:50:01:74:d9:af:cf:9b:ad:a0:7e:db:8e:a9:ba:a4:e3:
         09:3a:20:35:94:b6:53:2c:f2:ac:ef:18:d9:05:01:2f:ca:0d:
         5a:6f:d2:49:ff:40:94:67:0b:b2:31:a5:b5:f3:ff:d3:62:a3:
         33:45:22:b2:8d:a5:ed:f5:4c:43:0f:16:39:f2:a8:3c:58:1d:
         69:1a:7b:b0:80:1e:8f:14:3a:c9:b3:2c:bd:05:df:a1:ae:dd:
         04:34:62:95:9c:52:21:ae:8e:6f:ac:f9:b1:27:07:5c:46:8b:
         8e:e8:ae:62:4d:4e:11:50:26:b9:d7:bb:71:96:20:4e:19:e7:
         e2:3f:7d:2f:55:ef:63:07:af:af:2a:c5:54:2d:ff:10:8f:90:
         f6:62:a9:f4:98:45:25:98:89:2d:95:51:18:96:f5:51:0a:8d:
         f0:82:7d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:45:19 2026 by rpki-client