Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa
File:                     79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa (raw, json)
Hash identifier:          tZxtEMWPcCTh2lfDBeVWtHohG9rXppvnkY+X48foa68=
Subject key identifier:   19:C4:C2:52:13:3B:8B:EA:5D:08:63:01:C2:60:FB:DF:A3:47:4F:9B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EAA519BA9EC9FC3263A7C5880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.20.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:9b:a9:ec:9f:c3:26:3a:7c:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=a6832f7b-a0eb-4782-9774-0955470865d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a6:bc:8d:f1:61:d1:9f:6c:5f:80:1e:7a:01:
                    e9:2c:a9:3d:b6:c0:f4:b6:a0:23:16:71:f5:95:68:
                    62:0f:50:d0:91:ab:23:c9:a7:e3:e3:7b:15:d0:9c:
                    44:c8:74:2d:d3:a4:8d:23:f8:de:fd:a2:8b:51:12:
                    9d:61:87:ea:90:ff:86:ef:65:d6:ca:85:fc:7c:ab:
                    8a:b9:e5:70:a8:c1:77:34:5a:ac:61:0d:fd:23:09:
                    a5:29:55:b1:c1:6c:a4:dd:9a:9b:90:08:d3:da:47:
                    52:6f:6f:72:6a:5c:06:26:e7:58:e9:7d:3c:37:5e:
                    0b:1e:30:ea:a9:d5:28:57:da:84:6c:3d:4d:12:99:
                    02:91:97:67:6c:74:f3:ed:7f:8d:bd:14:6b:d8:b6:
                    0f:b1:2a:a8:ea:18:b4:1c:d2:af:f6:f4:e7:ea:7c:
                    f1:96:b0:ba:53:a0:f5:f5:d8:a4:ae:ac:77:30:ec:
                    7d:44:e3:04:e7:10:b8:8f:53:a9:b8:5a:a9:61:5a:
                    c2:41:b1:33:62:74:47:1d:57:bd:d1:02:69:70:db:
                    5e:5d:10:a1:67:84:5d:d2:ed:65:66:96:cd:40:52:
                    64:3b:be:be:44:ae:6c:7a:1f:13:66:37:af:d5:51:
                    8c:6a:0f:05:f5:dd:7a:88:d1:3c:9b:88:ed:cb:84:
                    e6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C4:C2:52:13:3B:8B:EA:5D:08:63:01:C2:60:FB:DF:A3:47:4F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:ee:ec:41:14:be:b0:d0:91:b5:1b:8f:23:f0:90:ab:b7:
         4a:f0:1a:93:e1:c8:0b:d6:ea:98:b3:84:14:29:74:e4:8b:e2:
         8b:55:38:f4:e1:aa:d4:5f:39:d7:09:47:9e:06:d6:8c:aa:73:
         2e:a1:4d:a4:23:af:b9:f8:e2:18:e7:66:cb:c7:94:92:fb:e0:
         8c:e5:7f:55:ac:95:89:59:b1:4d:c9:e4:47:74:cb:31:07:da:
         3f:8d:90:20:3d:a9:94:c9:6a:51:c1:1d:67:96:54:05:9a:20:
         c1:d4:b1:ea:1a:7f:e1:d7:00:f2:ae:6b:6c:15:38:7e:55:b4:
         94:2e:ea:fe:b8:8b:a5:4b:d6:5d:61:d3:1d:02:cf:f3:d2:34:
         d8:19:2d:09:6f:fb:a2:20:64:d1:76:db:a4:62:6f:5c:7c:a6:
         2e:fb:a7:ba:f0:2d:84:fe:99:81:36:f1:b0:8e:95:07:6b:79:
         e5:e4:cc:5f:b7:8c:91:e5:55:71:e1:ad:eb:9f:dd:34:01:27:
         ff:ac:17:21:82:53:71:6d:7e:99:67:62:30:08:63:00:fa:56:
         3f:dd:8d:44:6d:7e:59:67:43:a4:10:80:52:ad:72:d2:02:4b:
         3e:ac:77:d5:e0:df:70:92:3f:79:b5:22:9e:80:32:a1:55:d5:
         21:dd:61:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:45 2026 by rpki-client