Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8332e893-cb2c-3bb2-bca2-d86aa44451d6.roa
File:                     8332e893-cb2c-3bb2-bca2-d86aa44451d6.roa (raw, json)
Hash identifier:          BYLo+WInvmtXIN97gmBFoBDIf++mgmnjdVTN0V2rLyY=
Subject key identifier:   4B:7C:79:C3:12:CB:48:0C:F7:33:9C:52:F1:38:13:10:3B:D3:C3:7F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498B1C94E1456BCB33F92100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8332e893-cb2c-3bb2-bca2-d86aa44451d6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.17.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:1c:94:e1:45:6b:cb:33:f9:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1f3879d8-7c7d-4575-83cb-31d0f3e78c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:38:fb:a0:cf:ec:f0:a4:cd:6d:a9:e9:b7:
                    41:18:80:15:d3:75:b3:2b:1b:47:ea:1c:3d:cc:a5:
                    01:97:d9:11:5c:99:ac:04:97:76:9e:51:15:83:0f:
                    f2:f8:c4:37:9f:59:6f:2c:a7:b2:09:79:46:67:8b:
                    a0:28:05:6c:dd:4d:60:ab:a7:cf:56:4d:d7:70:08:
                    b6:02:5f:d1:12:c3:65:9c:c3:2f:9a:99:cc:9b:76:
                    fa:46:d9:1b:a7:ee:f6:dd:d7:ff:8c:51:23:a9:59:
                    3f:ba:ea:6b:0c:1a:5f:8f:b7:98:59:57:db:65:78:
                    7e:80:cc:38:8f:7a:7f:8f:73:26:9e:06:5b:b0:4c:
                    55:d6:66:a0:53:81:b9:f3:fe:b3:ac:52:ac:ca:05:
                    97:aa:e0:71:7b:2b:58:83:b9:5d:c4:98:3a:64:8e:
                    de:14:00:5d:c2:05:b7:c2:9d:3a:d2:60:07:5d:c3:
                    f6:62:7a:45:90:5c:1d:c9:e0:e7:e2:fd:86:31:1d:
                    6c:f2:1c:a7:fb:43:6d:4f:58:6a:3b:30:05:61:ac:
                    d2:1b:09:9a:09:a7:32:de:65:78:ce:e4:8f:39:54:
                    9a:e4:08:50:5c:07:28:9c:10:d6:ac:72:6a:9e:71:
                    86:f3:19:ea:17:be:73:e8:c6:b7:ea:ea:d6:a2:58:
                    7c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7C:79:C3:12:CB:48:0C:F7:33:9C:52:F1:38:13:10:3B:D3:C3:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8332e893-cb2c-3bb2-bca2-d86aa44451d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:25:98:de:b3:84:87:a6:ed:78:ab:af:f5:87:c4:d4:f1:cf:
         28:88:47:c1:88:1f:ef:e8:4a:9b:53:3e:16:d2:75:bf:77:a7:
         a7:af:ec:ae:dc:97:a5:ba:a1:ee:22:5f:4f:db:d0:05:b5:ee:
         ec:08:e3:71:73:cc:98:0e:80:4a:7b:aa:e7:c9:16:0f:f1:bb:
         ce:19:7d:ed:33:b4:7f:b6:1a:82:d6:e1:ae:da:25:dc:f0:7d:
         f6:aa:66:72:ed:3c:e8:3e:d4:b1:04:8f:ad:f6:ce:73:0a:9e:
         ae:96:b3:ba:5e:e5:53:e7:1f:89:3d:8e:4a:5d:60:92:d5:ce:
         cc:60:36:71:d7:12:cf:e8:0e:6f:49:fb:2d:68:93:b7:2d:d8:
         eb:b2:5b:ff:aa:c0:1d:61:f4:87:38:75:4d:62:0b:7f:d6:fd:
         0d:d9:ab:7e:80:2d:13:b5:65:85:f4:6d:57:a4:63:1a:69:e9:
         49:de:1f:9d:7c:0f:48:90:13:51:b9:d8:9a:0c:ec:6b:a4:7d:
         d0:13:33:9d:a7:80:99:ef:8a:46:43:1f:68:6b:99:75:58:39:
         d3:ea:cb:5f:4a:ee:2a:d9:20:32:a5:3d:62:6a:15:16:84:aa:
         8a:56:bf:5b:0a:f8:d7:44:d7:d2:ca:c0:31:be:d3:92:d5:80:
         a9:86:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:40:35 2026 by rpki-client