Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa
File:                     31592171-b7c5-351e-9e88-b38ea9311cea.roa (raw, json)
Hash identifier:          AmI3Y4ArguT/UeHL3JpJOZm742TL/KHCdq1omdmo1NQ=
Subject key identifier:   9A:B9:62:FB:52:AF:FE:86:F2:C2:E3:02:B6:E6:3E:70:DE:09:07:4A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3D429496DBEBFD7D3F1F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        173.21.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:42:94:96:db:eb:fd:7d:3f:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=a52b2cde-605c-4846-9cff-36e549826ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:41:b5:68:0a:5e:96:9b:a0:14:5f:f5:66:
                    eb:18:1c:89:d2:a0:0d:74:9a:37:76:f3:fe:8c:69:
                    b7:0e:c0:5c:4d:43:15:48:12:df:89:8f:ac:20:79:
                    54:1c:b1:e2:e1:c4:16:db:70:29:02:06:06:3d:b0:
                    61:59:a0:7d:24:51:b9:59:9a:85:2a:ae:bc:1a:0d:
                    6c:fb:06:1a:f9:34:63:0f:89:49:80:39:2e:3d:7b:
                    10:e6:3d:88:fc:6f:c3:74:8b:3d:fe:f4:6f:d1:03:
                    7e:d4:df:b3:67:b5:88:31:30:93:68:9f:74:8b:55:
                    b5:79:0e:a6:02:9a:12:0b:c7:17:6e:c3:46:15:88:
                    3e:6c:7d:24:a5:58:4a:9e:b9:22:8a:c1:2a:6f:86:
                    a5:98:c8:f9:7a:b2:23:15:55:d5:17:3d:dd:d8:2d:
                    dc:e5:dd:64:37:59:f7:fa:f7:c3:b9:0e:a6:8e:9a:
                    bb:bd:0c:be:44:75:eb:ee:06:07:2e:91:2b:61:83:
                    44:6e:bd:7d:ae:bb:be:1e:bb:ab:98:8e:5d:22:99:
                    08:53:2e:02:f9:94:26:73:7c:ef:78:f5:ae:6c:f0:
                    0f:55:67:a9:83:d1:dd:14:7e:fe:3a:e5:07:f3:bf:
                    91:af:cb:77:63:df:61:26:da:9b:57:11:fe:6b:81:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B9:62:FB:52:AF:FE:86:F2:C2:E3:02:B6:E6:3E:70:DE:09:07:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5c:ca:d5:91:f0:3d:30:59:ac:57:fb:a5:88:a8:c1:dc:b6:
         e7:71:97:a9:09:d0:19:99:03:02:a0:87:2d:7d:cd:0d:47:15:
         d6:5d:53:45:bb:db:97:6e:03:ad:43:d3:a9:4e:43:bd:90:9c:
         81:aa:39:32:23:2e:fb:ca:db:28:18:11:f0:6f:59:0a:f0:21:
         5a:4f:2a:f0:ed:c9:08:00:95:eb:e3:80:a2:15:3e:c4:65:73:
         96:1d:47:33:b3:30:67:6b:92:a3:64:46:2d:dc:53:cb:9a:47:
         b0:07:3a:7a:b3:a1:88:cd:c3:87:6e:de:78:34:9d:8f:95:82:
         b2:85:ed:69:af:de:32:1f:19:ef:3e:74:95:8b:b8:06:fe:32:
         3c:18:53:43:2f:bd:88:d9:3e:14:ad:f8:48:47:26:2d:14:ec:
         e2:68:e2:72:82:25:6a:24:72:8b:93:73:b8:4e:56:93:cc:e1:
         b6:c9:71:11:02:33:39:16:e9:83:4a:f8:17:30:15:54:97:9c:
         fe:69:34:63:f2:8b:df:a5:bc:4a:30:bf:7f:7c:ef:9d:45:5e:
         15:04:7a:33:77:d7:4b:4c:d9:ea:83:65:bd:d9:dc:7e:3f:12:
         b7:73:f2:da:46:e4:42:e5:c2:ae:1f:fb:ba:5f:07:47:ec:18:
         b9:c7:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:58:19 2026 by rpki-client