Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f28cbfe7-9734-35d6-b26b-5d4c3b62db65.roa
File:                     f28cbfe7-9734-35d6-b26b-5d4c3b62db65.roa (raw, json)
Hash identifier:          V1jHLnsYcS2xc+ElDMOVHslD8q8Ivo0pLrfRyLgD7YM=
Subject key identifier:   9E:2A:58:0E:6E:B5:68:AC:CF:EB:7E:E0:C0:DD:97:44:59:F3:A6:5A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F7FD588A4C15B6C5E01361940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f28cbfe7-9734-35d6-b26b-5d4c3b62db65.roa
Signing time:             Wed 14 Oct 2026 12:33:21 +0000
ROA not before:           Wed 14 Oct 2026 12:33:21 +0000
ROA not after:            Tue 12 Jan 2027 13:33:21 +0000
asID:                     19905
IP address blocks:        173.27.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:d5:88:a4:c1:5b:6c:5e:01:36:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 14 12:33:21 2026 GMT
            Not After : Jan 12 13:33:21 2027 GMT
        Subject: CN=3ee9de3f-fc69-448c-a877-37604f1a0871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:45:76:8d:10:81:8f:f1:54:99:d0:b2:7e:
                    66:b3:69:83:a9:3c:c6:c1:38:d0:e3:c6:3b:54:9c:
                    49:d8:e7:76:f0:46:72:34:55:25:3b:4e:59:3e:25:
                    22:71:0c:51:56:3b:41:85:ea:7e:77:a0:4f:03:64:
                    73:94:7d:0d:d9:35:4e:33:b8:08:2a:9c:25:28:36:
                    64:8b:82:e5:79:93:5a:00:60:0f:c9:f0:92:24:04:
                    88:34:ca:44:f2:7f:75:59:10:19:cf:ad:e7:9b:c3:
                    27:49:0c:81:67:08:df:9c:5d:0f:90:59:cd:34:b7:
                    bc:99:b1:c1:2c:59:0d:e6:a0:85:db:90:94:27:de:
                    36:ed:44:19:7c:ce:21:5a:65:4d:d8:80:74:0c:2b:
                    33:5e:5c:d1:85:78:5c:af:10:47:02:b6:c9:72:c3:
                    c7:8d:d5:bb:a4:e2:68:07:17:a6:9c:68:5d:a9:03:
                    bc:9b:8b:a8:6f:6a:10:7a:29:ee:d3:dd:5c:fe:8d:
                    08:b8:51:89:92:dc:29:55:a6:43:b6:21:54:9f:3a:
                    dc:9d:65:0e:05:22:48:da:26:80:89:53:ff:33:dd:
                    36:23:92:73:a5:08:84:df:1f:0f:d7:86:80:07:d7:
                    19:19:65:db:2f:0e:d7:ed:12:ef:d3:91:18:52:b4:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2A:58:0E:6E:B5:68:AC:CF:EB:7E:E0:C0:DD:97:44:59:F3:A6:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f28cbfe7-9734-35d6-b26b-5d4c3b62db65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:22:55:a7:d0:ec:ff:11:93:df:47:fb:c9:d6:85:6e:a3:69:
         fd:0f:ec:fc:68:c0:59:77:0f:09:7b:ea:89:75:5d:4b:4f:72:
         34:02:bb:88:f4:b6:d5:82:68:2c:4e:9d:f3:ef:97:66:ea:e4:
         04:fa:92:80:77:27:17:9f:7f:b7:c3:d2:4c:fc:db:93:f3:9f:
         19:66:17:20:fe:bc:35:cd:26:9c:27:42:c1:34:ba:9d:75:65:
         3f:ec:1b:92:a3:07:f4:bc:a4:a3:47:de:14:6a:0f:91:4a:12:
         a5:b5:57:d3:ed:9d:8d:9c:f0:ca:9f:1b:cd:49:af:65:f6:32:
         e1:e5:cf:9b:00:a4:44:f0:37:77:8f:57:3d:03:0d:4c:e3:28:
         8a:d9:09:b5:f9:c3:17:1d:e7:45:c6:b3:82:93:7d:c1:18:fa:
         f1:96:41:ac:9a:48:99:a6:05:2f:40:10:3d:1a:27:8e:a8:63:
         63:d1:f5:e6:1f:aa:09:38:06:c2:f4:66:63:18:1a:cd:92:f0:
         ba:8b:e1:60:b2:c7:90:59:09:83:e4:ec:86:f8:35:a0:f5:96:
         62:1b:f2:31:e9:22:6b:f3:7f:8e:73:82:35:ee:0f:84:0e:ce:
         17:a1:4b:a9:bb:b4:31:97:7e:8c:bb:01:95:6c:a9:0f:6a:69:
         39:11:41:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:18:54 2026 by rpki-client