Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e32ad45-a116-3682-9a2f-9910a5cd3bf0.roa
File:                     4e32ad45-a116-3682-9a2f-9910a5cd3bf0.roa (raw, json)
Hash identifier:          3mgXRkJsjbSVzE6qB4ctwtbwdGJD6PJW7/PDct6YgSc=
Subject key identifier:   1B:67:01:B4:51:F8:CD:B5:AA:F4:22:AE:80:E3:4D:B6:87:67:E1:0E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F6AF2BB9FB1B470B98056EC20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e32ad45-a116-3682-9a2f-9910a5cd3bf0.roa
Signing time:             Wed 07 Oct 2026 01:00:12 +0000
ROA not before:           Wed 07 Oct 2026 01:00:12 +0000
ROA not after:            Tue 05 Jan 2027 02:00:12 +0000
asID:                     30036
IP address blocks:        173.20.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6a:f2:bb:9f:b1:b4:70:b9:80:56:ec:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  7 01:00:12 2026 GMT
            Not After : Jan  5 02:00:12 2027 GMT
        Subject: CN=ac0b1583-ca00-4048-8db7-27939c1a6e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:df:c3:cb:90:34:0e:c8:82:c8:17:d3:62:
                    bf:33:34:04:44:c3:b9:d9:41:fb:3b:79:ec:5b:97:
                    52:d2:8f:90:a9:15:46:2e:d0:fd:61:40:cf:ad:2c:
                    27:77:4f:3a:89:1d:47:49:00:28:f4:32:c1:53:77:
                    57:97:16:e0:cd:a1:52:34:05:dd:f1:3a:e8:d7:18:
                    4e:48:ac:2c:c2:6c:a8:7a:9f:06:ce:eb:3b:97:95:
                    d3:74:dd:38:4a:0d:d2:e1:60:57:25:f3:16:90:8c:
                    24:86:d1:8a:1e:71:e4:7d:cd:7b:ef:de:52:9b:25:
                    9a:4c:d5:45:9c:fc:0f:95:33:a9:c4:ce:17:10:08:
                    5d:98:bd:8f:bf:2e:c2:ae:a2:9f:75:cc:7c:c9:c9:
                    a5:2e:72:d1:53:29:84:a8:81:07:5a:05:01:a0:62:
                    1f:ce:17:9a:4a:d3:8f:d2:6e:4c:37:5d:9d:a6:88:
                    fc:60:64:63:90:95:ed:eb:46:40:86:6f:88:61:4c:
                    10:25:6b:a3:0e:44:39:05:29:37:7a:38:ea:d9:56:
                    65:d8:05:48:e8:f2:3f:72:f7:f9:75:a4:26:53:3a:
                    91:1f:e9:9d:31:46:c2:d1:f8:df:dc:ed:62:c2:3e:
                    c0:9b:2b:29:79:d8:e9:b3:98:df:ac:0f:2c:88:1f:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:67:01:B4:51:F8:CD:B5:AA:F4:22:AE:80:E3:4D:B6:87:67:E1:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e32ad45-a116-3682-9a2f-9910a5cd3bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ef:a4:5f:04:4d:9b:9f:09:0d:3b:67:08:d1:4e:fe:33:a2:
         a7:40:ff:62:ea:97:43:e7:34:db:11:64:5c:80:98:2a:0b:44:
         85:cf:01:e3:76:fc:ae:34:6f:35:f3:1a:5e:a5:91:c8:01:ce:
         e0:10:e0:4f:02:bf:27:fe:2c:88:98:c7:82:ad:17:d7:8e:50:
         4a:7e:52:8f:84:89:53:9c:56:ba:df:ed:4b:f5:0d:03:9e:2c:
         6f:16:cb:d8:e2:83:ba:57:1e:e7:06:c4:5b:44:2c:9a:65:55:
         4a:81:0a:17:18:2f:0c:05:4e:23:ac:36:d7:c5:96:a9:3d:a8:
         d5:75:e1:b7:5c:c5:14:9f:09:56:bd:11:d8:63:2b:84:58:8c:
         74:31:24:f0:63:4a:ac:7d:5e:00:e7:7c:ad:06:e3:93:34:ee:
         ae:9b:75:25:8f:a8:8f:07:5f:c9:fc:74:b5:97:e3:5a:44:06:
         4a:5e:a6:90:55:a5:93:89:a7:02:f0:59:9f:ab:9e:c7:11:9b:
         7f:88:08:f6:97:5b:e4:e7:80:85:0b:99:df:5c:65:67:77:87:
         65:2f:4a:aa:ad:49:4e:90:99:ce:56:f7:fd:8c:ff:e2:3f:85:
         79:dc:4b:33:4e:af:2d:29:b4:2d:a1:74:02:ae:6c:56:42:a0:
         94:13:11:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:26:43 2026 by rpki-client