Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6f65d47-32b2-3169-843d-968692c3f455.roa
File:                     b6f65d47-32b2-3169-843d-968692c3f455.roa (raw, json)
Hash identifier:          fyd1gWYVHisrZgxJ2OEDSegVDS5WsHpl4EPIo9gwjno=
Subject key identifier:   5C:44:89:27:A2:63:3F:25:A1:B0:1B:73:B7:A8:68:E7:10:07:65:BA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EBD0CE160B5E64F6E893CBD80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6f65d47-32b2-3169-843d-968692c3f455.roa
Signing time:             Wed 05 Aug 2026 18:02:15 +0000
ROA not before:           Wed 05 Aug 2026 18:02:15 +0000
ROA not after:            Tue 03 Nov 2026 19:02:15 +0000
asID:                     19905
IP address blocks:        173.17.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:0c:e1:60:b5:e6:4f:6e:89:3c:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  5 18:02:15 2026 GMT
            Not After : Nov  3 19:02:15 2026 GMT
        Subject: CN=4e7a56dc-20fa-4efc-9568-a5223789f8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:c4:3c:2f:91:ee:1a:f9:58:30:ad:ca:9f:
                    f1:e9:dc:73:ee:41:37:99:a8:49:61:de:57:9f:e8:
                    57:a6:f0:f6:3b:64:13:02:aa:c3:62:bc:17:0c:8a:
                    e7:0c:7c:1d:17:b2:d8:4a:da:e9:18:b8:ee:da:3b:
                    8e:c5:1a:00:74:9c:94:dc:5d:29:cc:30:fa:5d:2f:
                    71:f7:7c:80:01:1f:7c:61:25:0c:e3:b1:cd:28:84:
                    39:1e:87:89:56:ea:67:2a:f7:b0:46:97:c3:81:e7:
                    40:97:ec:61:99:85:0d:c1:3e:04:cc:2e:13:22:ec:
                    b3:44:1d:90:01:42:3b:49:f1:05:34:97:32:cd:2d:
                    8d:04:5b:af:f9:5e:c9:99:f3:70:69:db:0b:26:d8:
                    d0:5a:0c:2d:38:fb:94:b8:44:a3:68:15:1e:53:04:
                    c1:e9:d1:33:53:54:ee:4f:b7:b3:09:b7:69:f5:90:
                    7e:b4:bc:81:ea:55:b6:75:33:36:d1:b2:5a:7d:01:
                    f1:64:03:81:b4:b1:a6:8d:c4:33:82:08:d3:20:7b:
                    48:63:22:76:c5:3e:78:c1:6b:0d:3a:a3:fa:d8:76:
                    ee:0c:c6:17:57:0a:6c:0c:1c:cd:e1:ca:4c:c6:a1:
                    ef:d8:9c:3f:37:ee:b0:51:c5:ab:4d:96:be:00:2b:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:44:89:27:A2:63:3F:25:A1:B0:1B:73:B7:A8:68:E7:10:07:65:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6f65d47-32b2-3169-843d-968692c3f455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:27:d7:5a:ba:1b:f2:8a:74:e7:58:45:4c:ac:93:9d:ef:f9:
         dc:b7:a7:33:ae:11:5c:1b:8d:fa:30:e8:6d:af:d3:bf:c0:eb:
         24:b8:01:dc:46:fa:15:39:a1:c9:44:45:3c:fe:07:2c:ff:c8:
         90:3c:ff:1d:5d:f1:c9:38:93:f2:44:45:0f:af:a4:36:3f:04:
         31:45:53:4a:f2:67:40:6c:ae:f7:a2:0d:7c:a0:fe:fa:82:fd:
         ad:d3:7a:9f:a5:06:2c:74:1d:24:61:36:33:91:be:5f:ad:b7:
         76:49:9b:3b:4c:20:15:0d:36:fd:77:56:53:78:a7:90:20:ce:
         46:51:3b:0d:fb:a5:d3:a0:85:e9:08:d4:ba:81:f1:67:4e:58:
         0c:68:10:f9:1c:05:2d:42:bc:99:e2:8f:29:98:0a:61:2d:36:
         b4:bd:4a:d2:3e:0d:5c:bf:32:30:d7:ba:bb:b5:f1:e3:bc:63:
         04:7f:2b:4d:cd:d6:65:9c:47:49:5d:58:16:09:bb:e6:6a:20:
         00:e9:75:d6:ff:39:30:3d:10:bc:e7:6c:8a:3b:5e:c8:32:04:
         9a:86:b1:60:87:04:1e:76:87:45:17:56:c6:10:04:e2:88:2f:
         d2:6d:93:42:8f:cc:29:d7:32:a5:16:91:88:40:a9:2c:f9:51:
         b9:96:14:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:06 2026 by rpki-client