Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef985c12-bcd0-3b44-8303-e03c70c77766.roa
File:                     ef985c12-bcd0-3b44-8303-e03c70c77766.roa (raw, json)
Hash identifier:          UAReG0ohjLkRXEtH60YXwHkNp7sUdHXCxz4bRKKp4Ks=
Subject key identifier:   87:8D:54:DC:D2:4C:26:A0:36:27:62:29:5A:C8:B1:3D:59:95:A4:1C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EAD1C45C4A09189723CF4F800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef985c12-bcd0-3b44-8303-e03c70c77766.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     19905
IP address blocks:        173.22.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:45:c4:a0:91:89:72:3c:f4:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=c84cab48-29f6-4df7-ac6e-8828d5560c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:bd:70:d2:9c:dc:52:6d:46:96:35:cb:8c:
                    16:2f:6a:df:92:59:f1:8f:2c:11:c0:81:9c:14:72:
                    b2:02:4f:d9:55:4b:f8:f0:13:36:a0:5a:9f:58:fb:
                    60:e6:8b:9a:0b:8e:91:64:3d:7c:f7:dc:2e:b3:81:
                    6e:18:a5:db:b7:1d:6c:46:53:c0:8b:72:fd:4c:9b:
                    a1:81:85:13:ab:20:92:4d:db:d9:9a:fa:48:ce:80:
                    3c:50:cb:46:14:59:40:e0:26:29:47:3b:5a:d4:05:
                    ef:0c:07:b6:85:f7:18:29:9d:26:d1:09:e6:fa:c1:
                    b9:e8:74:37:8b:0b:2d:6f:ae:80:b6:fe:8e:f0:e6:
                    f3:c4:31:8e:33:d2:88:a4:59:09:cb:e3:e1:d4:0a:
                    04:88:b0:b5:3e:88:1e:12:88:23:e4:5f:30:4a:d8:
                    21:d2:13:a7:3d:58:5b:56:80:95:b9:84:63:4a:41:
                    27:0c:a3:4c:76:d8:5d:fb:67:cc:88:c1:48:ed:36:
                    2d:11:6b:3b:13:e5:50:aa:ab:3b:95:bb:8d:7e:df:
                    98:cc:55:c0:ab:86:2e:a9:57:11:8e:a3:32:87:d4:
                    36:a8:5c:c3:e7:d0:ac:72:dc:67:30:23:79:15:4a:
                    87:10:81:3d:f5:99:44:00:90:c5:c7:72:ef:f8:88:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8D:54:DC:D2:4C:26:A0:36:27:62:29:5A:C8:B1:3D:59:95:A4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef985c12-bcd0-3b44-8303-e03c70c77766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:04:b9:29:45:91:df:95:c7:84:5b:34:18:7c:4b:a7:40:
         a5:cf:e9:1e:ee:bb:e7:87:d0:85:52:64:0b:f8:85:be:a2:a6:
         d8:60:fe:af:7a:36:d0:62:24:5a:1f:8a:05:ba:8a:94:64:0c:
         69:73:71:a1:21:58:5a:fe:46:db:28:57:e8:2d:34:d9:a9:d2:
         fc:e4:6e:56:73:b6:90:f9:fc:74:b2:a0:78:5c:68:4b:38:b3:
         e2:8c:a6:b9:14:86:34:85:b6:0e:4b:97:54:0b:cc:12:ce:69:
         f7:de:5e:aa:b7:39:91:6e:bf:93:c5:f0:66:b6:ea:b0:6f:b8:
         88:94:d2:13:d9:01:c4:2b:3b:c9:e2:b0:0b:0d:05:27:10:97:
         f2:0c:71:5e:7b:74:28:ac:7f:aa:fe:ad:59:c2:c6:0f:fa:30:
         84:84:c0:38:d8:38:19:35:1c:0c:a7:ff:11:05:95:48:79:b7:
         ea:b1:11:9d:c4:22:8a:e6:17:80:01:1b:00:bb:94:35:44:48:
         c8:9e:82:01:94:04:9b:76:ee:60:1a:f6:d1:b1:c1:e2:80:16:
         ce:23:54:dd:e9:b2:53:ab:b4:e6:d6:d4:12:c7:d5:51:50:6b:
         57:fd:2c:18:b5:88:fd:b3:3a:27:82:7c:b6:42:b5:2b:a2:2b:
         51:3c:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:27:24 2026 by rpki-client