Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f51365-51a1-360d-9629-bff61c17c6e8.roa
File:                     f2f51365-51a1-360d-9629-bff61c17c6e8.roa (raw, json)
Hash identifier:          lJPDgHm4lKUM2tbV7ogw8hm8N2GtnwegPAEbM9Sv7/E=
Subject key identifier:   4E:EC:04:F6:A7:5E:31:EF:85:9D:BC:54:75:DB:A7:48:E1:8D:80:B4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA8EC4294B0A89F10F2DE81C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f51365-51a1-360d-9629-bff61c17c6e8.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     30036
IP address blocks:        173.28.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:42:94:b0:a8:9f:10:f2:de:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=2a27376e-b134-4984-8990-6e19f5eed299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0d:a0:6e:9f:20:29:3b:f4:44:e1:cc:73:30:
                    f9:79:46:6d:ae:17:ff:e8:81:5f:ae:88:da:be:9c:
                    7f:ff:05:63:85:54:b6:fc:8f:54:51:ab:18:ab:cf:
                    04:e7:60:99:16:a0:22:be:86:98:1c:37:f6:0e:55:
                    c7:c4:a8:37:e9:2d:a7:18:f6:de:98:ee:59:93:45:
                    d2:69:ef:b1:05:43:88:76:bd:cc:e4:11:d9:3b:55:
                    32:e0:0f:1f:3f:a9:49:a1:fe:13:cf:cb:a3:6f:1e:
                    96:d7:fe:f3:6e:9d:77:4e:ab:5c:dd:46:63:14:26:
                    51:0f:7d:6d:35:61:d1:ad:62:f7:2a:69:a0:1c:b4:
                    d4:d2:d8:ec:1e:e7:cc:ba:2f:05:34:9a:a7:ab:30:
                    af:74:9a:85:02:9e:50:8b:39:39:42:d0:3b:77:79:
                    ce:01:11:7c:a5:9f:c3:ef:10:87:51:6d:56:02:b7:
                    3b:06:47:e8:fd:9d:16:c9:21:20:ab:ce:2a:98:f9:
                    95:75:27:6f:8c:89:82:5b:60:e8:1f:c6:dc:ba:28:
                    a1:aa:6a:cc:4a:3d:77:e1:61:e8:51:80:82:49:96:
                    0b:c5:5a:b0:84:76:84:3c:78:26:c8:38:0c:ae:2a:
                    2f:98:0c:a4:83:be:4b:65:55:ec:3b:5e:8e:86:ea:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EC:04:F6:A7:5E:31:EF:85:9D:BC:54:75:DB:A7:48:E1:8D:80:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f51365-51a1-360d-9629-bff61c17c6e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:88:05:e8:62:d5:2b:0d:be:68:34:3e:bf:40:07:6b:dc:b9:
         5f:8b:f1:9a:d9:05:3e:9b:fd:05:73:d2:6a:30:b4:4c:a3:eb:
         38:53:f7:44:07:58:66:5f:13:b2:6f:57:bc:e8:16:cc:24:2f:
         a2:4d:35:a2:b9:83:ff:30:99:24:ff:de:b6:9a:bc:b6:cb:03:
         76:23:55:3b:89:74:e3:09:a3:59:bd:c1:a4:d8:9a:59:5a:ef:
         1f:98:89:e2:6d:26:11:70:4b:a9:07:f7:67:ba:ae:70:5c:fb:
         32:2b:92:51:ae:58:23:63:15:eb:d2:d2:a2:de:96:f1:68:92:
         0b:8e:b0:3b:d1:00:97:a5:52:7f:ba:ea:03:d9:62:c7:a9:3f:
         a4:7c:fd:16:18:07:ba:d8:3d:17:69:c9:f7:68:d8:90:7a:02:
         7c:da:66:f6:ef:f8:a1:4d:95:90:61:de:64:8f:0f:d6:a2:9d:
         e2:19:22:87:51:78:f1:63:d3:29:46:82:0a:fa:d9:06:fc:1c:
         35:a0:27:cd:e8:94:28:f9:15:28:a2:7f:68:be:28:ac:64:ff:
         e0:10:6e:64:ec:ec:a5:ad:80:c3:b0:2a:dd:33:e4:fd:6b:b9:
         5c:25:f8:c5:c4:3d:fd:97:28:60:cc:7b:dd:4f:10:f1:57:55:
         40:d4:77:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:09:34 2026 by rpki-client