Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57995440-cae7-3237-920e-d2e8ef63721f.roa
File:                     57995440-cae7-3237-920e-d2e8ef63721f.roa (raw, json)
Hash identifier:          oFlH8Fp7m0nRWg2EOPDUuG8nejkMQAxIddJshAvtsvU=
Subject key identifier:   C0:4E:84:22:93:38:FC:F1:E0:82:A2:B8:E5:8B:FC:70:15:7C:6C:E9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49748C35610467430C965420
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57995440-cae7-3237-920e-d2e8ef63721f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.16.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:8c:35:61:04:67:43:0c:96:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=507b281c-f858-4198-b187-791e1be16569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:95:13:4e:ac:06:ca:06:b3:89:58:e4:04:
                    90:a6:9d:e0:73:d2:10:52:c0:f7:5d:c4:d1:a1:28:
                    e9:a0:9d:68:b3:9a:5d:41:67:39:9e:bf:b0:37:a7:
                    1d:ae:47:1b:da:21:97:9c:a5:c3:32:47:25:13:62:
                    14:6f:87:f6:73:13:af:f2:e2:a6:d9:c0:4b:7a:cf:
                    6f:3f:36:9e:04:84:79:90:0f:56:a7:47:90:98:55:
                    3b:73:45:8b:9a:ec:c7:b8:06:4a:c8:d0:37:6d:18:
                    29:51:ac:0e:f8:71:10:ea:b0:3a:57:a5:90:9c:c5:
                    4e:c9:f3:3d:7e:a6:99:d7:d9:25:18:3b:95:a0:fb:
                    4b:93:0b:3d:e1:36:2e:f2:7f:0a:13:4e:ab:ac:87:
                    cf:0a:53:d4:55:82:38:16:b8:24:30:c8:71:bd:7d:
                    74:6e:cb:a4:56:83:35:50:91:3a:67:b6:ea:0a:75:
                    9a:78:ed:93:e7:63:0d:84:1b:7c:fd:5a:d2:56:26:
                    ee:9a:11:33:c7:a9:18:ff:32:4e:e0:68:f2:ae:aa:
                    8d:f3:5d:08:15:e6:72:79:02:e8:ea:bb:a3:52:62:
                    af:26:78:66:d0:eb:49:8c:5e:80:de:2f:02:89:5f:
                    34:c5:b2:bf:b0:22:70:cc:75:64:0e:8c:8e:dc:23:
                    9a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4E:84:22:93:38:FC:F1:E0:82:A2:B8:E5:8B:FC:70:15:7C:6C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57995440-cae7-3237-920e-d2e8ef63721f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:47:68:b7:55:10:fe:6f:6a:87:0f:31:06:df:ac:1a:36:1f:
         84:63:7f:f9:a5:08:9a:d8:ae:db:fc:48:51:e8:bc:d9:d0:9b:
         41:6e:18:54:bd:77:68:0c:6e:d9:a2:21:99:9d:75:64:7f:3a:
         a2:0b:a5:1a:ec:46:dd:43:85:71:00:b0:99:83:be:1e:a6:ea:
         69:f7:a8:09:bc:7e:be:ce:a6:65:16:e7:51:be:b0:77:eb:52:
         eb:a9:55:15:17:4d:93:cb:c7:96:e8:a8:72:87:ed:e9:2c:fd:
         04:f6:6a:be:bc:ee:27:8d:bc:8b:06:03:f2:5f:05:e4:07:b2:
         6c:25:ae:12:af:6a:cb:ae:6e:e9:a6:41:14:2f:e3:37:88:08:
         cd:cd:9e:90:e8:70:71:d4:09:54:c4:d7:36:65:e5:9d:79:1e:
         5d:24:dd:00:fe:ef:28:90:fb:9b:19:69:2b:02:a9:e7:66:8c:
         13:88:43:d0:ac:e1:df:64:05:e8:22:b7:9b:cb:9b:57:bc:46:
         22:5b:83:5c:e0:b7:bb:ae:29:a8:5a:0f:b0:ad:b5:94:c2:fe:
         db:f8:ae:9b:3a:46:4e:d0:33:a2:1b:3d:7d:6d:8c:a3:f9:ac:
         86:62:79:dd:65:00:94:f0:97:f4:e8:e7:da:05:a7:a5:52:65:
         04:81:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:14:41 2026 by rpki-client