Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa
File:                     f60ea378-24c2-345c-a499-9160b004d9e9.roa (raw, json)
Hash identifier:          w3MhWlq2s5g1p0jmvvF+VnrY0xDb1C51Ma5lz/lly2s=
Subject key identifier:   FD:A2:7F:0F:9B:68:21:CE:5B:D4:57:7A:BA:24:C3:A9:75:3B:B6:FA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA8EC431277584BD05EF57C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     30036
IP address blocks:        173.22.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:43:12:77:58:4b:d0:5e:f5:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=5b819521-4fff-4530-b45d-595c50a1e1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:c0:21:cc:ce:37:27:fa:57:80:0b:1a:1b:
                    f3:a8:e4:9d:27:ad:30:ba:50:58:29:17:fa:ce:b5:
                    ed:d7:3d:89:95:bb:c6:b4:0c:cf:c0:b9:5a:3b:2c:
                    33:c6:89:6d:50:22:70:89:0f:d6:68:8c:b9:36:cb:
                    b7:32:7b:02:61:b6:97:b8:62:e3:32:a8:ff:a1:7d:
                    c4:7b:53:65:bb:55:59:aa:70:76:c7:3f:96:32:70:
                    df:f1:55:6a:98:56:87:9e:29:b5:c9:76:2f:9d:55:
                    57:6f:c3:81:7a:97:30:38:74:b5:d3:78:e3:6e:33:
                    1a:0a:c8:28:95:75:90:df:82:4d:36:11:9b:21:ec:
                    b4:21:00:f4:55:d6:01:67:d4:ca:9d:16:b1:85:11:
                    11:88:19:0a:ba:d1:de:a5:96:c9:36:3c:4f:52:a3:
                    25:db:87:aa:38:91:bb:8f:2e:5f:e0:84:98:71:ab:
                    9e:9d:fb:36:c7:3f:86:7d:58:04:34:31:fc:49:32:
                    1c:ee:ab:ba:32:d5:12:ed:ed:ae:66:f0:01:88:c1:
                    dc:c4:7f:21:15:43:07:81:67:ba:a0:fa:46:b1:3b:
                    ff:1f:5d:9e:31:d2:7f:c3:a7:c7:8f:e2:52:39:20:
                    eb:df:a8:cd:56:93:43:d1:c0:7d:6d:38:b6:41:78:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A2:7F:0F:9B:68:21:CE:5B:D4:57:7A:BA:24:C3:A9:75:3B:B6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:13:5e:98:54:7e:2c:64:cd:3a:5e:7b:35:9c:39:3f:0c:
         1a:92:f6:e1:38:4a:fe:f7:06:5a:5e:0e:7e:59:17:de:80:02:
         93:3f:04:30:00:28:d5:0a:6c:a0:c1:5d:91:b5:7f:45:12:dc:
         55:9e:a1:20:1f:7a:3d:bb:d5:09:b6:23:9b:7f:69:ef:a2:81:
         66:39:41:e7:55:a6:7f:72:e9:1e:c4:05:0e:8a:39:85:27:0a:
         d9:62:f4:f9:fe:e1:70:30:ab:b3:62:61:23:71:26:cf:c1:2c:
         96:8e:3f:44:c8:fe:15:c7:10:1f:34:1e:24:46:c3:ca:69:2a:
         1b:b2:a5:80:29:eb:2c:44:03:34:b5:c0:af:c9:ef:4f:bd:d4:
         65:f8:32:4c:73:a1:20:d8:d8:93:70:96:89:01:3d:6c:53:2e:
         2c:74:58:9d:36:01:87:01:bc:05:b9:d3:f1:9a:05:3e:e6:36:
         de:84:83:f2:32:86:4a:62:03:76:87:c8:5c:e6:22:b8:0d:8d:
         52:36:2e:50:45:29:c5:e6:2d:2a:8c:9c:fa:4b:f8:c6:16:12:
         f3:b0:da:23:9b:bb:48:37:c2:18:7d:b0:bf:e8:59:63:d0:27:
         c2:7d:eb:a8:42:82:94:6a:4b:48:e7:bc:c4:dd:fd:a8:e1:ab:
         13:65:df:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:57 2026 by rpki-client