Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0869d78b-1ed9-390f-88be-33f781a56577.roa
File:                     0869d78b-1ed9-390f-88be-33f781a56577.roa (raw, json)
Hash identifier:          Fk7rJD1HJbaUYWJgE+Vv/y1kXutj4Ctsm+lOze7jkc0=
Subject key identifier:   D1:EB:E7:A3:1B:32:77:26:0B:31:C7:C9:4F:E1:B4:14:2C:D1:3E:CE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA786F1C4E1B0D21F6F142500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0869d78b-1ed9-390f-88be-33f781a56577.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        173.27.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:f1:c4:e1:b0:d2:1f:6f:14:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f83e747c-83c1-4758-9960-5ff58ff0ad82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:55:50:58:96:d6:11:4e:c6:0e:00:73:18:
                    1d:a9:ab:89:5c:52:7a:c5:96:3d:9f:2c:8d:d7:5d:
                    72:98:8c:75:a4:bb:a4:d3:88:bc:56:a4:ff:0c:1f:
                    bd:04:89:42:35:72:72:79:3b:76:76:fb:cb:81:ac:
                    b6:bf:b1:ae:7e:b9:c0:55:a2:39:47:4f:32:47:21:
                    f9:75:e9:4e:9a:48:46:94:c2:30:12:66:f0:07:60:
                    3a:40:d4:f5:85:76:3f:6f:0a:06:24:57:0d:b4:ba:
                    41:65:44:63:37:44:5d:7b:a5:69:a6:8f:2a:80:48:
                    4a:ac:e9:20:fe:34:3a:e3:4e:55:4c:b7:92:78:7a:
                    aa:4b:fe:c6:c8:b6:98:54:2d:a8:1d:ee:52:a7:80:
                    b7:0c:0c:5e:5a:f3:ed:f4:a7:ad:2d:0c:d7:8b:c3:
                    12:da:3a:1e:59:cb:62:50:a8:47:3f:f5:bf:74:fe:
                    9e:74:67:23:12:90:46:fa:a0:b4:58:f4:d5:df:cb:
                    1b:e9:3a:0e:9f:e4:5f:9d:ac:3b:42:8e:4c:ce:a5:
                    60:e1:c0:4e:d2:79:61:f8:0c:52:f0:4d:4b:42:fd:
                    34:0a:1e:85:96:62:8c:4b:46:fc:8a:46:da:f6:c6:
                    d8:0c:a1:3e:b0:0a:ad:c0:82:b4:e7:49:b7:8a:4e:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EB:E7:A3:1B:32:77:26:0B:31:C7:C9:4F:E1:B4:14:2C:D1:3E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0869d78b-1ed9-390f-88be-33f781a56577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:73:da:d9:72:d7:63:0c:30:f6:e6:54:86:15:f7:d8:f4:fe:
         93:b1:54:d4:32:71:d1:94:25:12:02:cd:53:8a:2e:8e:f3:9d:
         87:e6:97:c1:d2:e4:1a:23:5f:8a:7c:87:98:c9:7c:67:f3:c5:
         80:06:fa:ba:5e:fe:54:07:97:8c:87:53:c3:24:05:ec:7f:d9:
         61:23:d5:6b:c7:85:4b:7a:97:6e:aa:83:40:2b:95:e8:73:6e:
         ad:b8:fb:89:88:55:c6:1b:7d:60:ef:a7:36:0b:79:d2:14:57:
         c7:21:94:43:4a:56:e8:c5:27:64:0b:05:91:1c:20:f0:93:1d:
         b7:38:b8:e6:2e:cb:c1:0e:14:21:fa:6d:60:7f:f9:bb:b3:e7:
         6f:2e:d1:55:46:03:ef:ad:e0:d4:92:6b:30:cc:e4:55:80:06:
         37:3d:59:2c:00:78:a6:6b:c6:f1:d6:d4:6e:bd:18:4c:39:a5:
         55:fa:0d:55:a1:b4:37:79:d8:9d:59:e9:2b:d8:8d:62:8d:6a:
         d3:4d:fe:88:19:e5:c2:55:6c:48:12:66:3c:1f:7e:4f:f8:1c:
         44:a5:e5:fb:09:55:dc:9f:36:b7:38:9e:78:e3:1f:13:34:41:
         79:fe:a4:b2:1b:1c:3a:ae:11:35:fc:88:7a:4c:c5:5f:ec:91:
         84:e7:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:30:04 2026 by rpki-client