Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8f10ea76-70ac-3fec-a562-87057a712c44.roa
File:                     8f10ea76-70ac-3fec-a562-87057a712c44.roa (raw, json)
Hash identifier:          xmj0STn1kRB4Djktl84ihDDRHz9LfIMlo9NupP+z9tY=
Subject key identifier:   26:CB:A2:60:93:F5:ED:40:BF:55:EA:A2:20:7D:59:9C:65:4D:74:09
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F38B26F2CFA8E92674B714640
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8f10ea76-70ac-3fec-a562-87057a712c44.roa
Signing time:             Sat 19 Sep 2026 01:00:12 +0000
ROA not before:           Sat 19 Sep 2026 01:00:12 +0000
ROA not after:            Fri 18 Dec 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        173.232.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:b2:6f:2c:fa:8e:92:67:4b:71:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 19 01:00:12 2026 GMT
            Not After : Dec 18 02:00:12 2026 GMT
        Subject: CN=7f5590b2-a8a3-4e15-a3c0-2ea4c46a51fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:f9:2c:0d:5a:eb:e2:2f:1d:d8:7d:f5:66:
                    70:8a:a4:08:f1:96:d6:09:37:cc:4c:8b:8c:1c:5c:
                    81:37:55:b7:f3:9d:9a:7a:d0:a0:c5:aa:a4:ad:63:
                    e5:53:2a:c2:b9:ad:73:94:7c:7a:16:b6:7a:b0:f4:
                    71:d5:74:b3:31:be:4a:74:71:cc:a4:3e:bb:d0:3e:
                    1b:08:33:c4:4c:ab:3c:82:56:e9:a0:22:c9:8e:68:
                    31:87:6d:56:99:6b:bb:f5:41:f5:59:d5:7c:cc:6e:
                    03:52:1e:df:ee:bd:3a:0c:33:31:ca:8f:37:e4:28:
                    42:8f:d6:98:8b:57:32:30:8a:6e:33:42:8d:30:ea:
                    67:e4:ab:15:71:89:ce:36:9f:97:5b:0d:3a:78:ef:
                    77:cd:60:6d:75:d7:f5:8c:84:03:5b:44:01:3b:91:
                    1c:3a:a2:2e:1b:7a:db:22:50:f9:96:2a:64:27:ef:
                    cc:5c:c3:49:84:e7:cb:ad:b6:61:02:2c:81:83:e6:
                    6e:b7:44:05:4f:18:ea:3c:b7:e7:ef:63:db:6c:c8:
                    0c:0d:70:4e:dd:af:fe:7a:4e:f1:a1:5d:fb:17:e0:
                    05:81:5d:37:9c:0a:0d:a9:5f:86:3d:71:67:fe:70:
                    57:80:6c:3d:04:2f:b9:bb:b5:e4:33:f3:5c:bc:01:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CB:A2:60:93:F5:ED:40:BF:55:EA:A2:20:7D:59:9C:65:4D:74:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8f10ea76-70ac-3fec-a562-87057a712c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:06:e8:fe:6a:0c:b2:63:94:c5:6d:ea:dc:9d:c6:63:58:a3:
         37:4d:98:ba:7b:85:d5:17:41:5d:1d:12:e6:97:97:44:56:61:
         61:99:84:da:04:32:d3:1e:cf:6f:b3:87:e9:54:ba:4d:ef:35:
         20:56:d3:6b:97:dc:45:75:16:e7:f7:71:e6:ef:4f:e6:fb:08:
         a2:c3:d6:98:4e:49:48:71:26:7a:33:26:34:65:8b:5f:a3:f2:
         00:29:30:60:ca:48:33:78:df:73:ec:21:df:20:91:9d:8b:1e:
         ea:4c:d2:81:e9:0b:db:73:8a:5e:4d:84:bb:24:be:28:9e:d6:
         88:22:ef:f2:05:65:48:b8:00:e4:b7:f2:62:c8:85:47:34:e8:
         a4:62:15:4f:40:1e:07:71:59:82:a4:2e:69:66:d3:23:0d:3d:
         cb:59:d3:16:ba:3c:42:ce:b1:ac:dd:f5:e0:69:40:59:65:5d:
         4f:d0:f0:e9:cf:38:b1:ae:4c:1b:9d:71:cd:c1:b1:c8:93:ca:
         2e:29:c7:ea:ab:8d:9e:3a:8d:68:d8:19:b3:86:f6:cc:a5:59:
         6b:62:1d:c5:2c:49:0b:9a:d4:0e:60:7f:42:f3:56:67:44:10:
         a2:54:79:57:83:85:86:15:e3:ff:7b:34:eb:ad:1f:4b:10:24:
         2e:5a:a0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:40:16 2026 by rpki-client