Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a99687b-af60-3752-963d-1fa077514245.roa
File:                     8a99687b-af60-3752-963d-1fa077514245.roa (raw, json)
Hash identifier:          0SEDS+uamRF0LQAhILHoRCg7Tale1uoeU/TBuzP6BUA=
Subject key identifier:   0F:9B:D7:EE:AD:66:42:FD:C5:31:D2:8A:E7:C0:B9:CA:5E:D9:50:53
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EC8A4A329A237908B7E59CB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a99687b-af60-3752-963d-1fa077514245.roa
Signing time:             Sun 09 Aug 2026 21:41:54 +0000
ROA not before:           Sun 09 Aug 2026 21:41:54 +0000
ROA not after:            Sat 07 Nov 2026 22:41:54 +0000
asID:                     19905
IP address blocks:        173.20.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c8:a4:a3:29:a2:37:90:8b:7e:59:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  9 21:41:54 2026 GMT
            Not After : Nov  7 22:41:54 2026 GMT
        Subject: CN=6054b555-fa01-4e5e-872b-22d32b98cb9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:38:eb:e7:bc:33:21:ed:66:8a:6f:10:55:59:
                    1c:34:d7:6f:c1:77:23:6a:32:8f:62:06:29:d6:34:
                    21:f0:e2:4a:fc:21:9b:42:8c:26:51:5b:0f:2c:d7:
                    e1:4a:04:2a:40:16:8b:7b:ba:67:bf:27:8c:23:b8:
                    72:a1:aa:23:b2:41:ac:9f:88:68:a3:c3:09:a5:a0:
                    8b:9e:70:7f:a6:5e:a2:3e:e4:bd:1f:1a:50:eb:03:
                    f0:01:51:21:30:9f:fe:1e:00:ce:eb:20:86:fc:ad:
                    d7:09:4e:7b:7f:ee:e3:8d:04:a3:23:93:32:62:81:
                    75:7a:fd:7c:35:dd:fc:2a:de:16:02:78:12:e8:77:
                    17:6b:f3:fa:87:47:4b:14:a0:01:4a:c9:12:85:6c:
                    59:d3:09:d2:91:11:5a:85:ae:4a:51:93:8d:0e:0e:
                    41:4f:5a:aa:4c:11:d8:8b:36:41:5e:58:e0:4d:87:
                    a9:c2:b1:46:e2:a2:34:7d:d5:c5:c4:47:58:66:42:
                    63:35:5b:c3:18:7e:44:48:50:b1:c3:97:bd:e0:4a:
                    aa:6f:3c:16:0a:9d:c0:a3:b1:d9:9c:33:62:8d:da:
                    d5:c6:9f:2d:d0:0b:31:81:98:8f:b6:01:1b:8d:4d:
                    fd:67:c3:66:ee:72:e3:7e:b8:58:a8:27:96:c5:74:
                    7a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9B:D7:EE:AD:66:42:FD:C5:31:D2:8A:E7:C0:B9:CA:5E:D9:50:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a99687b-af60-3752-963d-1fa077514245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:08:f8:df:03:93:93:e7:80:23:28:be:30:cc:70:ad:79:e4:
         fc:81:32:3a:d1:55:d3:0d:48:a6:7e:bb:3e:c4:3b:e1:5f:90:
         e9:59:46:a7:0c:59:4e:b0:ca:af:4b:d2:a2:70:22:da:43:65:
         dd:ce:d6:39:aa:05:c3:69:a1:a7:f7:97:55:b8:29:28:90:4b:
         d5:ee:db:52:41:05:fb:f4:5e:da:44:a3:b1:53:ff:c7:8d:f7:
         90:39:76:8a:ae:8f:92:4a:78:bb:0b:ba:57:55:ee:05:0d:ee:
         ca:2d:6a:97:5e:fc:ed:69:e9:e2:38:f3:18:87:80:76:48:6a:
         40:c0:d7:0e:d4:be:03:fb:39:f2:6f:5d:37:cc:58:7e:83:a8:
         eb:d9:b8:8c:0a:68:86:9d:46:a6:2e:7e:33:8f:67:eb:b0:6e:
         2b:75:ee:06:d9:23:04:76:70:dc:b3:31:f0:1b:d7:4d:56:4a:
         36:f7:c2:49:00:1f:dc:84:b2:82:79:cf:81:d5:44:1a:6e:25:
         fa:b3:32:dc:48:fe:81:61:66:c6:d7:15:0e:04:cb:93:5c:97:
         83:55:d6:e5:76:80:c6:cd:0b:89:32:00:43:d7:15:db:19:2d:
         dd:39:d1:d8:61:a2:46:4a:41:21:36:26:f7:a1:0e:6e:3e:1d:
         83:35:05:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:04 2026 by rpki-client