Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df3b5a92-6a7c-3f5e-8d4c-ef929bfc67c0.roa
File:                     df3b5a92-6a7c-3f5e-8d4c-ef929bfc67c0.roa (raw, json)
Hash identifier:          GeM3mfC7hDHUgwzupb1hyiNdC8FrwMEgmZuMG2yTRAA=
Subject key identifier:   2F:93:88:F9:81:C6:07:76:54:6A:A8:E2:94:39:39:60:A7:93:BF:34
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA78796F5AF69DC9AFA123F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df3b5a92-6a7c-3f5e-8d4c-ef929bfc67c0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        173.25.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:96:f5:af:69:dc:9a:fa:12:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=02af7d39-1e3b-4267-8f19-1279d89feea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:7a:1b:b4:4b:b3:a3:e7:8b:fc:c0:da:60:
                    f4:b8:21:8f:43:bf:7b:82:05:06:55:f3:45:38:d2:
                    f5:35:83:33:3d:b0:94:a3:07:b0:73:29:0e:01:32:
                    79:f8:23:ef:52:c4:5f:74:6e:57:78:d7:4c:87:ef:
                    26:cb:c3:ee:61:49:de:ce:ef:1f:29:cc:e2:9a:8f:
                    59:2a:d6:68:36:0e:68:25:39:3d:86:1c:3f:79:8d:
                    a4:85:2a:28:60:59:f4:0d:c6:23:6e:b4:58:19:44:
                    21:05:97:ea:11:45:15:af:7e:8a:df:6d:36:e4:74:
                    66:8f:02:8c:38:ff:bd:cf:54:4a:60:0f:2e:bb:bd:
                    33:39:91:3a:3d:aa:96:fe:08:50:a3:5f:4e:d1:df:
                    82:a1:be:ab:f3:cd:6e:3c:cf:7d:4f:a6:ec:1d:04:
                    9e:79:73:2f:a9:11:33:c7:8a:0c:8f:ad:ee:e5:1d:
                    1a:17:72:aa:02:06:f3:fd:42:87:07:d6:ad:d8:f7:
                    a7:e0:b2:e5:8d:66:53:ff:c1:60:c4:e8:90:06:32:
                    dd:df:75:67:e6:f3:56:38:28:63:83:4e:6d:cf:da:
                    63:67:88:1c:bf:8b:cf:14:b8:67:6c:be:b7:6e:25:
                    be:07:57:f3:32:50:75:94:9f:a6:48:88:32:f3:74:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:93:88:F9:81:C6:07:76:54:6A:A8:E2:94:39:39:60:A7:93:BF:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df3b5a92-6a7c-3f5e-8d4c-ef929bfc67c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:40:d1:c8:a1:96:be:e8:6a:e4:ab:75:ca:8d:15:c9:6f:06:
         3c:46:cd:3a:43:32:a9:d8:3e:c7:5a:66:d9:db:ee:25:cc:3e:
         f8:b5:b7:7d:47:0f:94:5f:d2:68:74:84:ac:e0:b1:7c:56:98:
         8f:97:d6:3c:9c:c2:2e:05:e8:66:b7:42:80:cb:be:fb:03:da:
         ae:8d:8c:5b:ef:ea:26:70:6a:6d:ba:76:af:3f:94:13:6c:63:
         f6:ad:ff:be:e6:19:59:70:7a:be:aa:68:32:6a:99:63:58:91:
         03:b5:ce:c5:bf:fa:67:1e:c7:08:00:cc:b6:ee:05:f8:2b:0b:
         cd:91:56:6f:44:6c:58:08:c2:69:9c:b6:cd:fd:9f:13:fb:c4:
         94:56:48:24:41:2b:b6:55:62:6a:a6:df:b6:0e:12:3e:86:f9:
         71:d2:94:19:b4:b6:1f:2a:55:f0:f8:77:c7:d9:d5:5b:f1:18:
         88:74:df:f9:63:5d:d1:55:b8:4f:c0:70:97:49:0b:cc:46:4f:
         6a:f1:91:3a:a5:c6:8a:12:bf:72:41:01:05:2a:06:ff:7d:20:
         ef:0e:92:f0:c8:3c:dc:cb:96:41:41:c6:6e:06:8e:d3:fe:dd:
         ee:da:d0:8d:fd:4d:d7:0a:10:72:a8:98:86:66:c1:0d:5a:c2:
         5d:fc:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:25:29 2026 by rpki-client