Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a9caa48-f7b3-3afc-bf71-c02e7ba4faa9.roa
File:                     8a9caa48-f7b3-3afc-bf71-c02e7ba4faa9.roa (raw, json)
Hash identifier:          x85zom4F6XKGnSFxCjD75L+j2j5Ihzh/n55/7UWBV4I=
Subject key identifier:   FA:DE:74:7D:53:4D:2C:2C:D4:28:1C:76:82:0F:BF:D5:9F:D7:20:EE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EBC7706EE7D3D1EDE49EE8EC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a9caa48-f7b3-3afc-bf71-c02e7ba4faa9.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        173.16.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:06:ee:7d:3d:1e:de:49:ee:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=7b666e4d-30ff-4c97-9e0a-cbd46b35de85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:3e:5e:d2:37:aa:d2:8d:61:15:7e:64:ab:
                    fa:db:6e:91:93:3c:66:54:93:a0:09:94:b8:9b:10:
                    93:fa:90:5f:6e:26:a3:3a:93:63:91:dd:41:69:5f:
                    e6:3d:57:f7:84:9a:9c:67:d1:1c:54:9e:44:d8:0a:
                    6d:a3:10:96:c9:07:d7:37:dc:5b:c5:a3:f4:25:2f:
                    d5:71:93:0b:40:45:b1:47:5f:2e:1e:82:af:01:39:
                    55:07:4d:27:d6:00:6d:7a:09:18:77:1b:d4:4b:34:
                    4f:0e:88:3a:ec:57:b6:de:dc:d2:01:0f:f8:d2:1d:
                    f3:24:b3:f3:af:97:66:ee:9d:e7:2c:3b:3e:91:91:
                    f3:16:3d:e1:fd:d6:a0:55:5f:17:7f:47:0b:53:0f:
                    ca:2f:e9:b6:a5:dd:2d:2d:05:6d:b2:1a:64:cf:6f:
                    ab:b9:64:7a:3b:70:0e:0c:bb:67:98:a3:fe:bc:c9:
                    ef:0e:31:b1:d8:7d:b6:52:3e:dd:b2:ee:a5:82:fe:
                    55:09:73:4b:84:63:65:16:ca:14:c0:46:50:29:4c:
                    ae:e6:89:f9:eb:07:49:f3:b5:ef:df:9f:41:90:e1:
                    9e:bb:6a:40:1c:2b:79:cd:54:1a:b6:3b:03:0f:ff:
                    aa:f4:e6:c7:56:0d:d6:34:84:fb:02:6e:aa:93:0f:
                    9b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DE:74:7D:53:4D:2C:2C:D4:28:1C:76:82:0F:BF:D5:9F:D7:20:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a9caa48-f7b3-3afc-bf71-c02e7ba4faa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8e:4b:d8:39:99:8d:bb:b3:c7:f9:9d:98:a3:77:7e:58:56:
         be:90:c5:07:74:af:11:7f:87:a5:40:22:3d:37:fa:55:f7:e5:
         4a:35:18:6e:61:5e:43:1e:ef:32:bc:2b:f0:9d:ab:36:4c:2b:
         d0:7d:32:b7:62:43:29:8f:04:4b:c0:2d:b5:3f:52:ed:7b:59:
         e4:85:fc:75:0c:f5:9d:d6:a4:22:5e:ec:e2:db:a5:3c:44:34:
         ae:a9:2e:d9:4e:01:38:74:32:32:58:3a:ba:1b:7c:0f:e7:ba:
         5e:8e:9c:07:2f:65:61:91:17:40:8a:66:da:f3:86:63:21:11:
         8a:d1:3f:6d:09:f5:92:ab:01:9a:f5:be:db:06:ab:0e:03:04:
         7c:d4:1e:d7:88:fa:13:42:41:93:c7:d3:9f:d4:f0:04:9e:51:
         6d:df:7e:84:0a:fc:1e:07:36:2e:c1:96:4b:77:85:4a:d3:50:
         fd:9e:59:87:d9:c4:df:89:ae:a2:9c:be:7d:95:a8:01:c8:19:
         0c:98:4d:e1:b1:2c:6e:ed:7f:35:49:93:86:be:bc:69:e8:b1:
         27:25:31:d6:2c:9b:37:d6:29:9f:71:a0:fc:6d:74:6e:1e:31:
         7d:59:a9:43:ba:eb:74:71:4a:ee:b6:f4:3a:ca:1e:da:55:ba:
         76:e1:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:07:35 2026 by rpki-client