Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3817a9a8-a4e0-353a-b432-109778ebd706.roa
File:                     3817a9a8-a4e0-353a-b432-109778ebd706.roa (raw, json)
Hash identifier:          Ga9gT/ERTNZlwkE7E4YlzCVgD6nbpPbjKm+Ry2pB6/I=
Subject key identifier:   BA:48:FC:91:0B:B4:03:64:E5:6F:74:95:D2:67:44:11:0B:D9:37:45
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5FC8034ECE48A060D8ACF72C
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3817a9a8-a4e0-353a-b432-109778ebd706.roa
Signing time:             Sat 03 Oct 2026 01:00:12 +0000
ROA not before:           Sat 03 Oct 2026 01:00:12 +0000
ROA not after:            Fri 01 Jan 2027 02:00:12 +0000
asID:                     19905
IP address blocks:        173.28.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:c8:03:4e:ce:48:a0:60:d8:ac:f7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:12 2026 GMT
            Not After : Jan  1 02:00:12 2027 GMT
        Subject: CN=cd34588c-1e8a-469d-9527-6f1c402bca20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:d2:37:3e:99:8b:72:a4:22:0c:cc:73:af:
                    34:5e:80:9b:37:bb:27:cc:71:2f:3f:f0:53:f2:15:
                    cf:1b:eb:45:95:c4:0b:4d:ba:76:02:09:2c:e2:57:
                    b8:da:f1:ad:f4:2b:5c:24:2b:70:03:6b:1e:b2:b0:
                    bb:67:21:8c:70:9a:4d:0f:4e:00:97:0f:2f:eb:1b:
                    18:c0:31:f4:21:d8:d7:05:67:2c:b7:c2:3c:b8:3f:
                    50:2c:63:9f:27:1e:9d:8e:7b:f8:bc:ce:0a:2e:06:
                    2f:4f:1a:24:8b:98:0d:7e:32:f6:eb:79:11:a8:29:
                    ec:6d:bf:5d:69:34:0e:d1:ef:65:db:f2:8f:1c:2e:
                    e0:45:e0:f3:32:79:d4:23:1d:5e:ea:82:f5:4f:10:
                    f0:88:13:d2:3a:f8:08:91:da:f2:dd:25:74:a6:92:
                    ce:fe:8a:b5:cd:99:15:0f:d6:a6:58:0c:5f:9c:83:
                    67:91:e3:6e:62:6e:aa:db:ff:06:58:a5:90:72:2b:
                    43:d7:8f:2b:d5:10:9e:9a:9c:79:46:3d:53:f0:7f:
                    6b:ed:d6:af:3e:a3:28:f5:80:67:e0:cb:32:09:85:
                    ce:8f:29:dc:27:c6:5a:2d:8b:48:3e:fb:b7:55:50:
                    52:4a:f8:05:e3:ff:1e:0e:a1:7b:3e:70:95:a6:ba:
                    ef:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:48:FC:91:0B:B4:03:64:E5:6F:74:95:D2:67:44:11:0B:D9:37:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3817a9a8-a4e0-353a-b432-109778ebd706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:31:4c:ad:84:5d:e1:ef:0c:a3:d9:2f:b3:cd:a0:90:3b:83:
         19:47:e6:6a:b6:fc:30:4a:30:49:61:72:6e:59:9a:94:88:4f:
         12:bf:c1:f0:7a:47:a8:cd:09:e2:b9:11:56:8a:fa:7a:d3:58:
         47:8f:03:83:9b:6f:ea:c5:c0:5a:d1:f7:ea:97:5b:3d:fe:4b:
         5a:ee:35:5f:e1:57:af:08:9f:e4:9a:1b:a6:3c:43:ae:3f:f1:
         80:aa:74:04:85:81:2a:53:d6:b2:13:54:1d:be:f9:55:6d:e9:
         41:8e:b7:45:f6:68:d9:4e:be:c8:7a:78:c4:3e:d1:f5:6c:26:
         28:86:f1:84:06:3d:e5:1c:01:22:55:e2:e9:33:b7:6c:24:96:
         77:90:aa:ce:21:ef:76:a4:81:87:01:dc:3e:eb:86:4c:b3:64:
         62:58:19:87:c4:df:34:a8:85:a2:2b:e8:e4:7f:d2:c7:e2:68:
         bd:fd:fe:68:f4:bf:6b:01:f6:2c:c1:cd:a0:50:4b:5c:3a:9a:
         5d:34:5c:0e:99:c9:ad:4d:86:40:ba:c9:07:0a:cf:a6:7a:6a:
         55:cc:3b:a8:d3:0b:74:d2:44:fc:9c:17:8e:7d:c8:17:14:fb:
         e7:c3:4b:ef:50:60:cc:1c:3e:c8:ab:c6:56:09:99:a1:e7:03:
         71:a8:fd:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9fyANOzkigYNis9ywwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MTAwMzAxMDAxMloXDTI3MDEwMTAyMDAxMlowLzEtMCsGA1UEAxMk
Y2QzNDU4OGMtMWU4YS00NjlkLTk1MjctNmYxYzQwMmJjYTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwjSNz6Zi3KkIgzMc680XoCbN7snzHEvP/BT
8hXPG+tFlcQLTbp2Agks4le42vGt9CtcJCtwA2sesrC7ZyGMcJpND04Alw8v6xsY
wDH0IdjXBWcst8I8uD9QLGOfJx6djnv4vM4KLgYvTxoki5gNfjL263kRqCnsbb9d
aTQO0e9l2/KPHC7gReDzMnnUIx1e6oL1TxDwiBPSOvgIkdry3SV0ppLO/oq1zZkV
D9amWAxfnINnkeNuYm6q2/8GWKWQcitD148r1RCempx5Rj1T8H9r7davPqMo9YBn
4MsyCYXOjyncJ8ZaLYtIPvu3VVBSSvgF4/8eDqF7PnCVprrvpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLpI/JELtANk5W90ldJnRBEL2TdFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzgxN2E5YTgtYTRlMC0z
NTNhLWI0MzItMTA5Nzc4ZWJkNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADExTK2EXeHvDKPZL7PNoJA7gxlH5mq2/DBKMElhcm5ZmpSITxK/wfB6
R6jNCeK5EVaK+nrTWEePA4Obb+rFwFrR9+qXWz3+S1ruNV/hV68In+SaG6Y8Q64/
8YCqdASFgSpT1rITVB2++VVt6UGOt0X2aNlOvsh6eMQ+0fVsJiiG8YQGPeUcASJV
4ukzt2wklneQqs4h73akgYcB3D7rhkyzZGJYGYfE3zSohaIr6OR/0sfiaL39/mj0
v2sB9izBzaBQS1w6ml00XA6Zya1NhkC6yQcKz6Z6alXMO6jTC3TSRPycF459yBcU
++fDS+9QYMwcPsirxlYJmaHnA3Go/W8=
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:00:56 2026 by rpki-client