Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/53c4756d-6c09-3b0a-be02-3fde341f690e.roa
File:                     53c4756d-6c09-3b0a-be02-3fde341f690e.roa (raw, json)
Hash identifier:          B6bkAZOkW9OcvFcmXKRPR0vAEva0Sc0mzIjH6QhvlPs=
Subject key identifier:   05:F8:B7:BA:23:F5:63:3D:66:C6:24:DE:1A:64:E8:1D:4E:6F:4A:98
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F7D25F3D2E0E9B2DAE2962AC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/53c4756d-6c09-3b0a-be02-3fde341f690e.roa
Signing time:             Tue 13 Oct 2026 13:27:58 +0000
ROA not before:           Tue 13 Oct 2026 13:27:58 +0000
ROA not after:            Mon 11 Jan 2027 14:27:58 +0000
asID:                     62904
IP address blocks:        173.44.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7d:25:f3:d2:e0:e9:b2:da:e2:96:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct 13 13:27:58 2026 GMT
            Not After : Jan 11 14:27:58 2027 GMT
        Subject: CN=d28f9c03-f58e-47b2-b19e-0ee264049c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:91:01:93:93:e0:6e:ef:98:ec:43:f3:bb:
                    fa:65:6e:6b:89:64:19:29:48:79:91:b4:16:36:e5:
                    39:70:6e:05:1b:40:16:07:68:f6:ee:bd:9b:65:e7:
                    af:d3:97:22:ff:9a:10:0f:70:dd:fa:27:5e:55:cb:
                    50:fc:51:ca:ca:6e:66:a3:b9:b7:0d:dd:f7:a5:aa:
                    63:c1:cd:8b:45:67:b7:ac:59:b5:51:16:d7:a8:de:
                    a1:b1:d2:11:d5:29:4d:de:3c:79:ea:13:7c:21:dc:
                    61:06:97:df:e5:96:54:24:98:6e:95:8f:ed:46:b0:
                    46:f3:40:bd:5a:84:78:c2:83:aa:50:ca:12:b1:24:
                    32:94:9d:99:35:e7:a7:80:92:62:08:08:b3:1d:ec:
                    42:69:2e:78:d9:ad:68:54:17:18:91:ac:c3:91:b8:
                    e4:19:10:41:76:de:6a:6f:8a:91:6f:f1:2d:3d:17:
                    ce:c3:26:57:09:62:6d:1c:32:02:aa:91:9e:b4:32:
                    13:16:f1:27:44:9e:19:27:a6:a8:e1:93:3c:fc:db:
                    c0:a7:31:62:be:0a:75:dd:1b:19:6d:b1:bf:4d:07:
                    2d:c3:88:8f:4c:24:48:d4:f4:70:24:fb:7f:07:50:
                    25:8a:b8:e8:9b:8d:f0:11:ce:32:85:50:72:ab:4e:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F8:B7:BA:23:F5:63:3D:66:C6:24:DE:1A:64:E8:1D:4E:6F:4A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/53c4756d-6c09-3b0a-be02-3fde341f690e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:dc:40:fa:bc:a2:a4:0f:df:b8:23:7a:2b:08:d3:71:68:d9:
         33:23:11:18:7a:46:92:f4:93:b2:48:54:f1:5c:ca:e0:11:aa:
         93:70:aa:4e:41:6c:2b:e0:0e:f7:54:70:37:e0:b6:ff:8a:20:
         ba:5a:42:ec:de:ad:81:3a:b2:f0:36:8d:34:76:c5:a0:03:e7:
         d9:16:03:38:37:6d:10:92:1d:7f:3d:d3:60:2f:62:5e:7f:f5:
         c0:3f:35:f5:d0:1a:b7:b6:d3:ac:5e:b6:ff:62:9b:12:83:60:
         db:0d:fa:68:5e:d4:dc:a9:2a:1b:54:ea:b1:68:14:29:1e:47:
         40:92:4a:98:df:b5:5d:35:e1:d5:04:d8:7a:0c:ff:b8:53:5a:
         af:c6:18:3f:b4:2f:0e:57:38:d3:d1:f4:d9:97:b5:56:44:d2:
         09:94:65:f0:af:a0:64:1c:5d:eb:78:f2:d1:63:d1:21:e5:e4:
         5f:9a:80:1d:0f:6b:3e:26:b2:26:49:52:ee:44:84:ec:82:08:
         6b:cf:6f:bc:e9:0a:71:ad:88:29:f2:2f:83:47:87:18:03:83:
         d2:72:22:bf:f1:3c:75:58:ec:70:7f:9e:85:59:de:73:20:a1:
         85:fa:68:33:cb:3f:79:7c:a9:9c:26:be:41:77:c5:eb:2d:94:
         f3:72:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:06:27 2026 by rpki-client