Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa
File:                     4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa (raw, json)
Hash identifier:          q6VJktftadR/p6e3owmFrs53yMaX7Be9qm4V+9gIP7A=
Subject key identifier:   CC:C4:85:22:8F:1A:DD:DE:9C:FB:CE:39:1B:57:DC:EC:2C:4C:69:3F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EAA519E6C478AF002DF88A200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.20.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:9e:6c:47:8a:f0:02:df:88:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=6f1bc698-7469-447e-b618-d06eee68ed68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:22:93:6b:dd:cb:7b:46:9d:34:e6:56:d9:
                    03:51:32:de:4c:49:51:f0:ee:3e:ac:55:b5:ba:47:
                    c9:6b:24:69:25:ec:43:68:d0:d4:f8:63:01:d1:46:
                    9e:d2:15:ca:af:61:b9:80:6f:cb:d5:f2:97:68:23:
                    d0:5e:60:2a:f6:b7:ef:a1:d8:5b:61:7d:58:55:2e:
                    8b:43:02:ef:d8:eb:59:f1:d2:84:48:eb:2b:fb:de:
                    69:7c:fb:3a:39:4a:e6:93:aa:00:c2:c1:79:bd:46:
                    ff:07:7c:7a:c4:2c:b8:8d:58:fd:19:24:c3:dc:72:
                    77:da:68:dd:c7:f9:4f:f8:7f:c2:8e:ba:aa:14:22:
                    14:0e:ac:59:b9:e3:8f:fc:80:8b:fc:18:d1:d3:0e:
                    a9:bb:b6:9e:0a:45:5d:2a:8c:f5:d1:e2:0a:fe:48:
                    74:6b:06:c0:7a:e0:94:71:7b:5b:30:6d:dd:dc:e2:
                    a3:b6:f2:f8:c5:bc:2a:83:60:5f:95:2e:5d:9c:f1:
                    f5:66:f1:59:e0:14:5d:fa:79:09:fe:fb:4a:6c:cf:
                    94:d8:17:43:76:ed:f7:4b:72:07:f7:74:54:19:a8:
                    7c:a2:d4:81:65:e4:73:a9:4a:34:2d:6a:3e:6d:99:
                    18:e1:a9:1f:37:cd:16:55:1d:e1:5d:dc:fa:1c:53:
                    e3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C4:85:22:8F:1A:DD:DE:9C:FB:CE:39:1B:57:DC:EC:2C:4C:69:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:98:61:23:eb:e8:34:58:e4:39:2e:f1:b9:c8:87:9e:fd:d5:
         71:29:b5:6d:3e:21:ff:0f:cd:a7:8d:6a:97:63:8b:6e:bd:94:
         b5:89:37:8c:e2:80:9f:a4:09:ef:82:6f:aa:13:07:7f:e6:9b:
         d2:2e:e4:85:cc:2b:d4:47:34:b5:2c:9d:4b:e4:71:cf:a5:9b:
         a4:ae:da:54:02:8d:ac:a7:f9:6f:f5:ef:c3:7e:50:53:15:e7:
         77:df:0c:45:4e:fd:ae:c4:4d:1e:56:b7:cd:ab:96:5a:72:ac:
         da:ea:23:1c:12:9e:46:ca:bc:5d:de:5f:f5:ef:45:ed:52:63:
         5f:5a:7d:5b:0f:de:04:c1:cf:ed:03:44:07:98:67:33:21:f2:
         13:a2:d7:13:40:0c:17:05:19:fa:f6:0a:eb:29:00:73:3b:a3:
         16:47:14:25:e3:f3:c9:15:1b:eb:27:e6:92:6d:0d:02:d1:ba:
         a5:00:38:d0:3a:55:d7:97:f2:24:b0:4c:12:1f:b6:5e:2d:f2:
         54:c8:57:eb:78:e3:82:16:2a:37:cc:f1:0b:9e:43:26:47:c1:
         7c:69:b8:f1:bd:86:1d:95:bf:f3:bd:1e:5d:3a:35:23:c9:73:
         fd:88:80:11:cd:e8:ad:7f:26:bf:94:34:e1:5c:4d:0c:b6:6f:
         d3:fd:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:21 2026 by rpki-client