Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6735cd14-5ce8-34a4-8876-cc1e2ca16c47.roa
File:                     6735cd14-5ce8-34a4-8876-cc1e2ca16c47.roa (raw, json)
Hash identifier:          BkUJQVKdg62F6fN5Q0cSRSdvFXpUsPDBAtyZtVkyhMc=
Subject key identifier:   96:A5:8F:15:FC:40:D8:1F:26:A8:AB:95:90:88:F0:23:D9:9E:00:0A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3D63AD11315E380E24BFC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6735cd14-5ce8-34a4-8876-cc1e2ca16c47.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        173.17.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:63:ad:11:31:5e:38:0e:24:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=c74dec49-66d1-4a60-a4dd-2a3982fdd65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:68:28:9f:57:60:27:13:2b:ec:48:49:61:
                    f1:f6:2b:f5:a2:e2:c2:b9:4d:ef:16:38:3a:0c:78:
                    dc:e8:b5:51:1f:2d:f4:56:57:65:67:92:1e:37:d2:
                    6e:75:88:e1:d3:f3:82:cf:1e:2d:59:d4:e7:f2:b5:
                    8f:f1:6d:b8:ed:96:7a:cb:5c:e1:1a:7e:d8:e5:cb:
                    5b:dd:d7:7d:b5:45:98:1b:25:b6:77:60:96:01:16:
                    c0:a4:b8:e6:2f:62:41:40:c1:ee:c5:59:1e:70:2a:
                    d2:75:ca:f5:5a:07:70:fb:31:58:b4:83:93:2c:7a:
                    74:c6:bd:0b:b2:03:68:0d:bc:17:c4:58:cc:1a:b6:
                    6a:0a:66:23:a6:42:51:bf:4d:ca:e3:98:ac:6c:81:
                    35:38:0a:8a:90:9e:83:34:1d:58:88:75:69:4a:a5:
                    36:42:ef:6a:03:7f:eb:09:c3:92:7f:3c:1c:11:39:
                    2a:0f:38:52:a6:86:33:12:6f:72:ea:fb:81:16:cf:
                    55:61:f1:24:30:1a:e9:2c:b0:73:76:a4:04:00:05:
                    bc:9c:c2:42:33:c9:29:17:6f:b5:02:dd:9f:11:0b:
                    1e:c6:1a:62:f4:00:38:96:14:f4:69:8c:8a:8c:ed:
                    21:39:e8:05:5d:1e:33:73:77:1d:01:4b:c7:a9:4b:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A5:8F:15:FC:40:D8:1F:26:A8:AB:95:90:88:F0:23:D9:9E:00:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6735cd14-5ce8-34a4-8876-cc1e2ca16c47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:69:ea:81:70:65:ea:e3:56:6d:82:25:cd:94:d2:72:c3:d7:
         23:eb:7f:a3:6d:b2:58:c5:13:51:0d:81:f8:17:10:58:5f:3c:
         c3:20:6d:46:d6:f8:1c:46:49:e8:e6:8f:bc:7c:f8:df:49:1a:
         5e:ee:8f:0b:df:28:ef:79:54:41:6d:e2:f7:be:51:b6:81:d7:
         50:63:b1:0f:75:b8:30:29:74:a4:d4:8e:be:a7:5a:80:e9:1c:
         96:e6:a6:10:c3:0d:e4:fd:d7:19:5f:1f:c2:a9:4f:3d:53:bd:
         95:e9:59:81:9e:8d:c4:c0:a2:b4:e4:e4:32:26:8b:ce:9d:70:
         69:48:3f:e6:d6:69:00:3e:63:3c:01:4e:0d:62:27:8f:72:f0:
         98:9a:20:52:26:eb:6c:19:43:03:58:1b:c0:22:61:85:8a:e0:
         7d:6c:5e:fb:9a:d5:19:5f:04:f2:96:90:cf:dd:ef:40:c6:5e:
         56:0b:49:b3:d2:06:67:21:a2:7a:64:a1:e9:3a:2f:c4:4c:f5:
         ef:41:c6:91:86:61:81:7a:b3:14:5e:de:1e:15:c9:45:f6:17:
         68:43:99:1c:09:a4:b9:11:84:f3:e1:60:e2:04:c2:d4:78:c0:
         9f:17:f1:ca:35:64:00:d0:8d:99:9c:6b:c5:55:2f:95:34:66:
         a5:e8:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:44:15 2026 by rpki-client