Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36ada5b9-75c4-3a8d-b34a-81d0b8f3af36.roa
File:                     36ada5b9-75c4-3a8d-b34a-81d0b8f3af36.roa (raw, json)
Hash identifier:          E8nuI2uPMoXfm70D9OcgdlEA1x0fsCeSCdNjUujl6/A=
Subject key identifier:   3B:7B:14:65:D2:92:07:BB:95:0D:E5:A2:F3:45:CF:5D:46:00:77:0C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49737925300CE4D2239DC600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36ada5b9-75c4-3a8d-b34a-81d0b8f3af36.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.31.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:79:25:30:0c:e4:d2:23:9d:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0dac1640-f090-414f-a955-67f9df494c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:2b:4a:f7:a7:82:48:87:47:a0:51:87:d9:
                    5a:05:a4:1e:98:d3:31:1a:de:78:72:4e:25:ee:8f:
                    74:bf:51:1f:0f:ad:5b:c3:7b:9b:f0:34:df:a6:ad:
                    5d:a5:1d:d4:fe:2c:77:e0:84:ec:6e:e4:af:67:fe:
                    d3:d9:36:47:d4:fb:7e:93:2a:0c:fa:44:f7:55:42:
                    3b:d6:ab:4a:0b:7a:89:36:68:61:a9:85:76:27:17:
                    ca:50:9b:f4:b1:aa:5e:25:14:8c:c5:d3:00:75:e0:
                    98:5d:b0:62:01:43:fd:af:62:42:98:7e:b8:a8:d1:
                    08:95:ab:c5:ca:4e:9f:5d:d2:2f:62:92:eb:cd:1e:
                    01:4a:1f:ba:0c:d2:88:0e:37:2d:ec:f0:84:b8:64:
                    a3:f9:de:c8:ab:17:76:10:76:63:07:43:04:1e:49:
                    55:a1:85:4d:34:b6:6a:cf:80:0b:87:6b:82:b3:5a:
                    78:11:51:6e:e0:23:7c:4e:7e:1c:af:82:70:17:f7:
                    5d:23:a3:5f:b9:7a:30:a8:74:21:cd:9a:f2:2e:a8:
                    47:eb:b2:58:cb:2e:75:74:41:a6:d1:fa:3c:ea:84:
                    dd:3d:1a:fc:8b:ca:e5:1e:f9:bf:b0:d4:32:fa:f1:
                    0c:c6:ee:db:76:dd:2a:6a:b9:34:5a:c9:f9:09:d1:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:14:65:D2:92:07:BB:95:0D:E5:A2:F3:45:CF:5D:46:00:77:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36ada5b9-75c4-3a8d-b34a-81d0b8f3af36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ec:39:05:df:b0:4f:1f:5c:27:75:63:03:0a:c6:89:ea:24:
         3e:eb:cf:e8:f9:a2:0f:86:dd:42:b5:19:0d:7b:73:9e:b4:da:
         f1:da:d6:70:75:bc:42:03:d2:05:3f:70:84:c0:bb:45:2b:d3:
         93:c0:62:92:15:cd:55:f4:54:ee:56:6d:bb:be:c5:c2:f6:67:
         96:b5:6b:b2:22:25:74:92:7e:8e:40:f2:e4:6b:2e:d4:bd:5d:
         8f:6b:4e:19:38:60:cd:a5:b5:0b:70:fa:4b:a9:37:8e:f0:92:
         e9:94:03:90:ae:70:61:30:b6:5e:b7:ee:1d:49:f0:33:fb:c8:
         49:ab:ad:41:c8:b0:3b:4e:2d:3e:22:12:ca:a8:06:4b:9c:ca:
         13:b3:f4:e0:30:cc:df:db:37:b8:3d:62:3f:20:86:8d:89:70:
         26:cc:b0:00:05:da:bd:d2:aa:aa:c1:13:1a:96:ed:97:0c:33:
         4f:4f:f8:21:e4:8f:8a:ca:2c:09:75:95:0c:eb:20:41:87:66:
         4d:36:1c:da:0c:0f:17:1e:a3:64:21:0e:85:16:79:8f:04:bf:
         36:6e:ac:ec:58:bf:a4:98:e4:f7:d9:b5:ea:d5:32:be:d1:c0:
         4d:c8:dc:c3:48:8e:89:75:40:61:e0:31:96:b4:89:7c:2f:c2:
         44:32:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:43:58 2026 by rpki-client