Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51a2256a-bd05-3f3c-82b9-5d3d5829ba7d.roa
File:                     51a2256a-bd05-3f3c-82b9-5d3d5829ba7d.roa (raw, json)
Hash identifier:          5+fKpL/1hJhdK54FxON0HEOpavoAHtDHjv8RLDdCn1g=
Subject key identifier:   19:87:A6:E0:9B:56:47:3F:35:BB:FB:B3:6E:8F:C9:58:85:A6:0E:80
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49733D2DF028734172D3C420
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51a2256a-bd05-3f3c-82b9-5d3d5829ba7d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.24.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:3d:2d:f0:28:73:41:72:d3:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=03aceca3-332c-40dd-851d-dc26d4bc5c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3a:7c:c2:36:59:3f:93:b6:7a:f5:c0:7e:ef:
                    db:18:e5:a4:03:8d:d8:fa:f2:a3:24:6a:78:62:c0:
                    9d:43:8d:db:f5:0a:f8:0d:2c:5a:f3:66:b9:e3:24:
                    64:fc:76:4f:2c:25:fd:7f:08:ce:0b:de:1c:ff:a5:
                    65:26:21:e4:62:58:2a:44:d8:49:98:8c:b2:a1:2b:
                    ec:27:90:de:9d:bd:a2:3d:08:93:f2:fe:06:c9:4a:
                    ef:7c:b0:9f:5b:f3:15:fb:9b:57:61:64:d8:67:99:
                    67:ae:c1:a6:2a:a6:0e:74:b5:df:2c:f5:d2:24:3b:
                    be:b5:26:2f:5a:87:15:c3:cb:28:93:b4:3f:ff:2d:
                    c8:ec:d2:07:00:54:d5:f6:bf:3a:55:cb:9f:77:15:
                    d6:62:4c:74:62:06:fd:58:7f:7e:25:16:cc:85:6b:
                    d7:ce:a7:ce:6c:a0:6e:c2:fb:f1:28:cb:c1:73:ca:
                    c2:92:92:eb:fc:7a:c0:b1:30:47:d2:c0:d6:ee:ee:
                    eb:60:f5:35:46:60:04:1c:a8:60:e3:22:1b:6e:82:
                    7d:bc:73:31:df:e0:ea:80:0a:a6:1b:dd:93:4e:52:
                    a5:40:82:a0:ef:09:ef:d0:59:3b:aa:7b:36:73:63:
                    ba:a7:41:cd:3d:50:15:47:ce:34:d4:de:fd:73:d5:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:87:A6:E0:9B:56:47:3F:35:BB:FB:B3:6E:8F:C9:58:85:A6:0E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51a2256a-bd05-3f3c-82b9-5d3d5829ba7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:16:44:05:0f:3b:09:9b:c8:15:2f:6a:fc:e2:18:e6:2f:e6:
         25:85:33:14:72:c0:b8:2d:71:90:6b:e3:df:cc:c4:b0:90:2b:
         4e:95:79:04:d1:60:a3:de:d0:9c:31:2d:91:80:4f:a6:cd:cd:
         ea:85:39:c1:3f:16:f3:af:a6:bd:ff:4a:d1:0e:23:8c:1b:0c:
         41:76:94:44:ce:41:38:e9:e1:a9:5d:50:40:8c:d1:59:9c:3e:
         0d:b7:bf:a1:d7:48:4d:d9:e2:e0:54:84:8a:cf:3d:1a:88:93:
         e5:d1:a1:89:e7:f7:fd:54:d5:5a:fb:c0:5f:a9:a0:12:61:67:
         d8:41:83:ad:65:18:77:bb:c2:ec:1b:c6:59:0a:cd:05:16:9e:
         db:23:62:e2:47:bc:17:04:83:f1:81:b7:8b:73:b3:f5:d8:ad:
         bd:62:0c:75:35:84:f4:45:18:2b:39:2e:b2:e7:ed:ca:ee:03:
         5a:0d:0d:fc:d9:57:96:0d:aa:22:4a:9a:76:4c:b9:00:a2:e4:
         9f:bd:72:8c:d2:39:8c:40:3f:30:ee:d7:c2:f1:de:d5:8d:b8:
         54:f0:ac:ea:59:f7:e9:9c:0c:9e:94:50:df:5f:db:46:1d:08:
         d5:74:27:61:a9:ae:ee:56:7f:a2:64:8a:c9:79:a2:ed:a5:be:
         46:10:4c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:18:19 2026 by rpki-client