Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a6bfa7b-6c56-3aca-bc41-08667f6bbf07.roa
File:                     7a6bfa7b-6c56-3aca-bc41-08667f6bbf07.roa (raw, json)
Hash identifier:          PjaUtc+iGMip7mf/FI+H8rF4L9sC110oE4yT/0kgGlY=
Subject key identifier:   6F:F0:C4:1C:26:D9:43:C0:41:1E:B8:5F:AD:AE:BB:C5:BF:92:B8:D5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498780ED94CF7708E1083340
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a6bfa7b-6c56-3aca-bc41-08667f6bbf07.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.27.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:80:ed:94:cf:77:08:e1:08:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=11063039-2456-4ea0-9742-49b3e13aaf49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:ee:36:e7:37:13:52:3f:f5:25:ab:b9:40:
                    48:9e:89:8e:cc:41:67:aa:7b:9e:f8:04:75:ca:3a:
                    aa:ee:73:ea:7b:16:88:43:8b:09:f2:d7:2e:f8:b8:
                    a9:99:86:0c:23:c9:09:14:c5:5f:87:9b:34:80:13:
                    85:3d:28:a2:58:7f:8f:cc:1a:8d:64:3a:40:8b:3e:
                    47:b2:84:2b:b7:ab:86:a4:86:76:8f:a4:2c:23:f6:
                    9d:4e:e3:f2:65:65:1a:e3:59:de:10:a9:42:59:c5:
                    f1:bb:c3:22:9a:9e:ca:28:c9:b3:86:eb:10:b8:30:
                    05:e8:40:a1:25:49:28:bc:df:71:07:f8:8f:55:ae:
                    db:48:d0:38:69:7d:e0:51:b5:c9:b4:e2:93:50:79:
                    64:7b:d7:ef:02:06:8a:b4:25:33:92:b1:60:0f:e1:
                    4e:a9:71:34:82:d8:ba:d9:4b:c2:e4:63:eb:78:05:
                    21:47:4d:96:bb:50:38:d1:6f:4f:21:fe:4e:b8:2a:
                    10:46:ca:c0:21:8c:f3:99:a2:00:e5:a0:00:7d:ee:
                    8b:14:e4:a4:63:0c:3c:2d:1b:11:16:16:42:91:bd:
                    96:c5:07:3b:36:36:f8:b9:be:a0:cd:16:b8:c9:40:
                    b1:40:03:71:7a:a7:ae:28:a9:fc:0c:5d:79:b4:c4:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F0:C4:1C:26:D9:43:C0:41:1E:B8:5F:AD:AE:BB:C5:BF:92:B8:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a6bfa7b-6c56-3aca-bc41-08667f6bbf07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:bd:58:15:c0:ea:4b:59:db:29:4c:15:c7:a7:09:1e:1c:d6:
         40:97:71:80:45:cf:49:8c:d9:8d:18:ca:0e:77:29:d1:11:e4:
         44:f5:ac:51:6e:19:fc:54:ed:79:92:77:fa:73:26:99:7e:d0:
         0a:44:4a:61:0b:77:47:2b:a1:d5:f5:bd:ee:04:26:31:4c:97:
         51:4d:a1:99:5f:28:67:d9:89:4f:4c:71:df:35:73:a2:b3:70:
         9e:5b:02:d0:e5:fb:0f:82:92:9e:1f:9a:b0:73:af:df:27:9a:
         31:98:01:38:df:6a:76:31:61:2f:04:8c:82:70:54:c2:01:62:
         b0:17:76:23:96:f9:97:b2:78:9a:05:b8:c0:1b:b6:05:d6:04:
         99:12:73:2b:0f:be:2d:99:ac:75:25:62:6c:8c:34:51:2b:23:
         bd:bd:45:ec:cb:40:f4:61:44:7f:39:02:46:1e:76:b1:f2:27:
         50:74:ee:f5:c7:ce:01:5f:50:84:26:d2:bb:89:99:6d:61:c5:
         a1:a4:3e:a4:a8:dc:ec:d8:0a:9c:a4:7b:0b:29:53:de:39:98:
         dd:81:f6:d1:f4:b4:84:f8:67:f6:7a:c3:56:88:25:bb:57:70:
         78:f9:5a:ac:55:bc:90:10:72:b8:5d:8b:77:3c:c3:03:86:dd:
         d9:95:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:34:52 2026 by rpki-client