Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/273dfd6a-9db9-36c5-a78c-f4e8a062db7e.roa
File:                     273dfd6a-9db9-36c5-a78c-f4e8a062db7e.roa (raw, json)
Hash identifier:          7xptTdXhxu7zU4qzUykuKX4rUB9SOlOcC8utaVNAvyc=
Subject key identifier:   F9:A0:82:2F:14:AA:8B:6F:12:2E:FD:AB:4C:4A:E3:17:BC:42:53:93
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584ED2CC7CC7F9939C7D1E1ADA54
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/273dfd6a-9db9-36c5-a78c-f4e8a062db7e.roa
Signing time:             Thu 13 Aug 2026 13:00:12 +0000
ROA not before:           Thu 13 Aug 2026 13:00:12 +0000
ROA not after:            Wed 11 Nov 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        173.22.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d2:cc:7c:c7:f9:93:9c:7d:1e:1a:da:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 13 13:00:12 2026 GMT
            Not After : Nov 11 14:00:12 2026 GMT
        Subject: CN=34dfe6c8-2809-411a-a816-63890a4e7519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:de:0f:8f:00:78:13:cf:b2:f4:5e:5a:34:
                    63:59:a0:30:ae:13:a9:b9:05:6e:6d:6f:bc:c6:53:
                    1e:fd:b4:de:9e:1e:ce:d9:bb:40:30:a4:06:00:24:
                    10:26:0c:c7:c6:e7:c9:85:94:e3:dc:a2:e7:7c:4b:
                    0e:9a:e4:b0:97:01:08:7a:be:94:4d:db:6d:24:c1:
                    de:4d:52:97:42:b5:6e:c8:14:d1:c5:6a:89:06:3e:
                    e8:2b:58:aa:a6:e2:b8:9d:97:c9:bd:48:29:ba:1f:
                    3c:c9:c7:8c:9c:89:15:ea:88:b2:da:76:39:90:98:
                    3a:99:3b:91:df:05:39:4d:ca:a4:da:06:d2:cc:33:
                    3e:fb:30:5f:fe:9e:11:ef:1c:fb:c5:a5:0f:da:9f:
                    5a:45:7c:94:22:46:0b:c6:02:82:e2:01:1c:14:f0:
                    1e:68:0f:0a:da:d5:4a:81:c5:c2:2d:79:9d:35:cd:
                    09:63:2b:ec:dd:3a:29:ff:f5:c3:31:c6:bf:91:b1:
                    57:fc:b8:9a:d4:bf:2c:62:e8:b8:0c:cd:cf:9b:9c:
                    bf:0f:2d:dc:1d:bb:19:77:00:d8:4b:cb:85:12:67:
                    24:04:15:ca:1b:8b:90:89:df:fb:5f:8a:01:33:d2:
                    0e:08:7a:0e:1c:70:eb:29:18:19:8d:b6:64:30:c7:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A0:82:2F:14:AA:8B:6F:12:2E:FD:AB:4C:4A:E3:17:BC:42:53:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/273dfd6a-9db9-36c5-a78c-f4e8a062db7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:aa:64:4d:03:29:f6:2a:a2:90:38:4c:23:28:4b:47:ab:49:
         27:36:ee:bd:5a:38:95:8f:35:19:e6:6e:0f:a0:1a:f5:e6:40:
         ed:6a:8a:41:92:9a:a2:0f:bb:48:f5:34:55:16:7f:a9:c3:f4:
         1b:54:e4:e6:6e:09:6f:cd:ed:06:25:50:43:c4:c2:99:de:2c:
         b2:e6:3f:e7:02:7a:a2:e6:b3:30:50:a3:52:4b:8c:2a:21:63:
         21:29:c0:9e:68:1c:36:c4:37:b8:73:c4:55:d5:1b:43:c9:4f:
         24:bb:0d:18:7d:e9:25:6b:0f:12:b9:e7:d4:e5:ac:ee:55:97:
         2a:00:39:16:ba:3e:ae:08:8d:91:48:0d:af:54:de:ff:e0:9e:
         b3:a7:d8:ec:dc:98:76:67:19:ac:29:ec:fd:fd:a3:c0:5b:f3:
         7c:5e:c0:c1:38:37:90:2f:82:cf:14:01:1d:36:d9:d4:fb:87:
         29:ad:c3:2c:57:cf:b1:85:81:1c:12:88:09:19:b7:2d:14:37:
         17:c5:51:d0:d1:d0:4f:8a:ab:72:14:58:f0:09:9d:68:29:a4:
         ab:d5:02:8f:33:ab:60:d3:12:eb:df:8a:20:e2:08:36:a7:7c:
         2b:c9:73:bd:aa:9b:73:16:27:0c:0c:b4:0c:75:d2:db:7f:41:
         c0:c1:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:27 2026 by rpki-client