Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/4a317f88-f112-3daa-add1-74c51043df1d.roa
File:                     4a317f88-f112-3daa-add1-74c51043df1d.roa (raw, json)
Hash identifier:          tkU3+hf29txL/AL2tWq1K8s+oivFZ0j+tNdF/bbCX10=
Subject key identifier:   11:90:5E:19:83:35:9E:81:DA:9E:C9:7C:BE:4F:89:E7:27:B0:47:52
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584ED9C7662692D1FE5A07CFF820
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/4a317f88-f112-3daa-add1-74c51043df1d.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     25655
IP address blocks:        173.241.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:66:26:92:d1:fe:5a:07:cf:f8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=980e0124-b6be-4e50-bca7-d36bbbf73e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:b5:04:2f:49:3e:5c:a9:ee:9d:c9:87:e7:
                    a3:fe:98:2e:b8:0a:aa:0d:0c:b5:58:45:0b:2f:bd:
                    e4:06:ce:71:65:26:d6:aa:c7:fc:c4:72:8b:a5:b2:
                    e8:8f:fe:ba:d1:24:dc:66:7e:b3:fb:7c:4a:0b:ca:
                    22:55:21:95:97:90:3c:69:0c:91:a6:15:af:4e:e1:
                    5a:71:5e:c3:cc:58:f1:0c:93:80:b3:64:89:b7:e5:
                    cf:ca:8c:eb:a7:41:d6:f8:df:15:36:78:86:1f:7b:
                    96:e2:f0:72:fb:c4:3d:85:0f:12:c1:32:91:28:86:
                    c8:b6:27:9b:f4:1b:84:3e:4d:28:aa:e6:97:fe:9b:
                    3d:7f:77:da:20:68:d1:06:0f:6d:a9:f3:59:6c:48:
                    27:85:02:a9:c9:92:e8:f2:05:2f:17:98:5b:21:db:
                    d9:ea:bb:58:34:76:47:d7:6a:e5:3b:2a:59:33:f8:
                    0e:df:a0:ca:ca:89:4a:66:93:02:d5:d9:fa:12:24:
                    d4:01:d8:d4:58:82:05:59:0b:72:b9:f5:b3:2f:b6:
                    b5:d6:eb:17:f5:2c:bd:d1:1b:27:c5:27:e8:68:1d:
                    ff:60:a3:48:9b:bf:16:6d:e8:68:cf:4e:b8:97:19:
                    97:0a:da:cc:0b:70:44:27:d7:83:ad:77:03:01:e9:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:90:5E:19:83:35:9E:81:DA:9E:C9:7C:BE:4F:89:E7:27:B0:47:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/4a317f88-f112-3daa-add1-74c51043df1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:46:86:7e:5e:94:3d:c8:76:3a:ea:9d:c2:29:f7:cc:cc:03:
         5f:7a:c2:2c:62:a4:7a:92:b5:08:7e:f4:01:5c:b3:78:71:f0:
         65:05:66:a7:b2:d3:e5:42:31:ce:b6:f1:d4:57:ec:7f:a2:3b:
         26:f8:af:43:d3:fe:08:cd:75:b3:7a:e3:2d:ea:17:f6:97:71:
         0a:ed:d8:0b:58:c3:60:4d:10:48:9e:59:36:b9:d2:34:10:3c:
         27:db:05:2d:bc:d7:8b:29:80:75:26:dd:0b:c1:4d:e3:50:9b:
         e4:37:43:e6:ab:bc:63:db:57:16:40:b1:72:c9:74:3a:84:25:
         c0:58:33:23:77:c2:fd:6f:98:95:f2:8a:25:3e:68:4e:90:73:
         6b:00:ef:23:fa:5a:07:68:08:37:92:db:70:bc:aa:64:8b:31:
         32:f9:3a:5e:71:93:d0:15:56:10:e7:b9:db:f9:64:96:d2:41:
         46:3e:cc:d0:bb:30:70:46:f3:04:6c:17:61:95:1f:1b:1f:de:
         50:7c:99:a1:bc:07:5d:b4:77:8e:31:71:63:77:e8:94:83:ed:
         d6:3d:ec:68:08:bf:fe:6d:1f:c3:8b:d1:ef:4f:2f:14:76:ac:
         11:91:3a:db:83:de:ee:de:7e:20:cf:14:ec:5e:16:2f:ea:01:
         bd:29:e2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 09:07:20 2026 by rpki-client