Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/606e4855-f466-3748-8a02-5840556ea57e.roa
File:                     606e4855-f466-3748-8a02-5840556ea57e.roa (raw, json)
Hash identifier:          WTr575onmWkpHcqx3Qu91xWoPJWrdYwXH2T7XMXLuoY=
Subject key identifier:   CB:50:A8:5C:65:60:5A:6B:8E:ED:7A:1C:EE:37:09:95:65:19:86:52
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584ED9C73C2EA8AA91A8790B3630
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/606e4855-f466-3748-8a02-5840556ea57e.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     25655
IP address blocks:        173.241.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:3c:2e:a8:aa:91:a8:79:0b:36:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=e5b8cc47-3177-4c0d-b4b6-2970d526d4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:8e:85:e8:c1:dd:cf:19:59:4f:6e:fb:3c:
                    71:fd:0c:6a:28:d2:ed:a3:b4:52:c5:f8:21:1e:1f:
                    ed:e5:1c:79:3e:b5:03:4b:fc:20:c2:06:e4:1b:00:
                    18:2d:ff:54:02:46:7e:53:ff:1a:d3:e3:e0:0f:6c:
                    ef:2a:b1:d3:49:25:37:f7:7b:cc:e2:4f:1a:7e:a9:
                    9f:4f:e6:aa:50:3d:ac:59:1e:de:f9:66:0a:ed:ac:
                    82:5d:52:7c:5e:80:76:bb:3a:2d:0c:62:41:7c:e8:
                    cd:2d:88:5b:f3:00:cc:7f:bd:89:59:0e:b5:fa:6a:
                    07:54:05:0f:7f:34:31:dc:ed:ac:5b:5b:59:ee:be:
                    38:ac:d0:4a:79:48:3c:59:d4:38:b8:05:1b:eb:4c:
                    b0:ed:f5:3d:76:79:44:2e:95:cc:79:ff:a7:15:ca:
                    cc:fa:14:c0:d5:93:35:8f:0e:cb:5a:f3:20:41:2a:
                    41:df:7d:d3:d8:bd:f9:d2:ce:39:08:90:84:02:c4:
                    2e:e1:38:83:72:dd:14:7f:70:c2:ef:e3:43:4a:41:
                    a4:19:f4:1d:7d:9a:f7:c2:e6:77:5e:54:5b:f2:1b:
                    1e:cc:dc:5d:96:58:3c:61:5c:6d:eb:d7:02:af:01:
                    09:82:9f:88:c0:b5:2f:3e:67:1e:08:8b:fc:46:4e:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:50:A8:5C:65:60:5A:6B:8E:ED:7A:1C:EE:37:09:95:65:19:86:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/606e4855-f466-3748-8a02-5840556ea57e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:11:c3:9b:28:a0:f5:02:51:da:1d:40:7b:fc:ef:0b:68:a6:
         46:38:de:b9:4c:0a:f6:85:9a:9c:a2:3d:24:8e:6c:93:9c:de:
         66:16:6b:6a:9d:1b:07:2f:61:63:3d:2b:8a:ac:f9:da:f1:ad:
         97:f8:3a:43:ad:b0:bd:ce:f7:0b:7e:aa:d9:0c:81:1b:49:5e:
         11:77:a7:7a:d6:c4:78:5f:c5:59:0e:23:6f:06:5e:16:0b:db:
         aa:df:1d:86:2d:fb:2d:1a:98:99:98:30:94:39:be:28:8c:18:
         a6:32:25:d4:61:2a:29:ee:c3:90:9a:a7:ea:44:84:09:c7:31:
         ee:b1:ed:50:0b:49:af:2d:7e:b8:20:e8:74:ae:d5:1c:82:4b:
         f3:4b:1d:58:91:89:7b:98:fd:7f:ea:9b:81:4c:a4:85:00:35:
         4c:74:7d:40:ae:d0:cd:b7:c9:83:30:78:f3:65:54:75:a3:f1:
         06:15:ff:30:a8:17:c6:00:03:74:89:6b:6f:33:d2:dd:8c:4e:
         ab:82:02:2f:c5:43:60:a7:37:fe:49:34:73:04:a2:5d:44:be:
         ff:53:fc:65:b3:82:4b:86:33:ac:ad:f0:34:73:1d:f5:64:8b:
         e1:ad:aa:e5:55:61:4c:2a:a3:5d:48:c6:c6:a6:8b:45:7b:09:
         ce:2b:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:29:20 2026 by rpki-client