Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa
File:                     84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa (raw, json)
Hash identifier:          X9ZZTItM1Jn8Zq9kPUwL7R7La8WTtxcYSK+CAu711c4=
Subject key identifier:   4D:B9:17:7F:13:7D:3E:3F:FC:7B:F9:C6:D3:6E:88:FF:6F:39:A0:22
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5E62E5647672F51397EC7500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     19905
IP address blocks:        173.16.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e5:64:76:72:f5:13:97:ec:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=24236930-de91-46b4-a875-27ee751377d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:58:be:05:cf:f1:a7:71:72:12:ab:18:20:7b:
                    05:e3:ca:7d:cb:31:1a:a4:08:09:be:9f:ce:d9:19:
                    65:5e:f2:96:b0:fd:1b:29:e3:cc:05:ca:0a:e5:9d:
                    dc:49:f4:39:13:f7:5f:f2:ed:bd:1e:41:c1:74:f7:
                    df:28:d8:36:2b:da:eb:94:ab:f1:9f:9f:c5:2e:0a:
                    e8:7e:be:06:47:3e:8c:99:53:d8:7c:1b:64:4a:d5:
                    34:e1:0f:fe:b4:1a:dd:d6:f9:cb:2b:ee:b1:19:cf:
                    25:2f:a9:2c:07:65:e9:a6:c2:3e:f0:da:87:4b:65:
                    7d:1d:ec:cd:d1:91:e4:a5:2c:84:20:2c:db:66:1f:
                    dc:74:28:14:c2:37:19:f0:bb:6a:9d:78:30:24:60:
                    01:c3:e8:11:e0:58:50:31:90:f7:8a:ca:10:28:bf:
                    f9:77:4f:66:46:3f:7d:42:1c:0a:17:c8:b4:1a:92:
                    49:2b:e2:39:b5:f4:c9:e3:75:bd:99:2a:05:19:11:
                    33:db:7d:b1:db:88:ee:e5:6e:43:02:99:b9:2b:1d:
                    a8:f1:af:66:b5:f3:95:88:bc:ef:31:df:c5:99:12:
                    6c:c6:3d:4b:31:79:64:03:45:db:07:ce:02:f3:2b:
                    7c:89:2b:3b:61:b7:98:bc:7d:21:e1:74:db:5c:54:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B9:17:7F:13:7D:3E:3F:FC:7B:F9:C6:D3:6E:88:FF:6F:39:A0:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:11:90:bc:4f:0b:eb:fa:28:9f:e7:a5:bb:da:fa:52:ea:81:
         8d:00:7e:8f:6f:84:f1:53:38:d6:ee:32:f9:04:23:e5:8c:fe:
         38:72:42:43:c0:be:41:c2:c4:99:05:12:8c:b7:eb:fc:b8:ba:
         50:b9:de:40:59:47:45:ab:2e:6a:47:32:e0:7e:d3:6d:e7:87:
         79:d2:7e:fe:0c:77:02:05:e9:7f:33:ec:83:e0:03:e7:af:23:
         c6:6b:ea:14:52:5b:4b:a0:76:11:06:c0:52:d0:59:85:c3:6a:
         0e:13:ac:ab:66:73:3b:07:bc:7b:a9:1b:4b:52:0b:32:0e:11:
         4c:c2:eb:4e:bf:d6:91:b2:bd:c1:9a:af:49:70:02:b8:1e:0a:
         52:4a:60:aa:ce:77:7c:b5:68:fa:78:5d:98:15:35:40:01:4a:
         f4:4b:e5:86:55:24:dc:61:2e:86:13:72:98:8e:2d:e9:ae:cf:
         27:c7:ba:dc:f3:fe:0c:c1:a5:23:20:96:59:15:1c:4c:74:75:
         25:52:18:c2:d4:34:47:16:9b:79:26:b5:fa:a5:d0:ba:82:77:
         50:5b:8a:7a:9c:94:2b:6c:c3:88:8b:2f:bc:7b:25:9c:0b:72:
         b9:c0:30:01:b8:bd:c0:01:cd:9b:bb:90:6c:46:d6:50:b0:59:
         5a:bc:15:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:00:29 2026 by rpki-client