Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6807a644-6aa1-350c-acd8-bdbb82589cf1.roa
File:                     6807a644-6aa1-350c-acd8-bdbb82589cf1.roa (raw, json)
Hash identifier:          sHVfKPo+O3ZTWmv1xX2PQTxlw0I0Sb1VY2SZo+xeLMU=
Subject key identifier:   31:30:95:E3:1C:8F:8F:C7:73:65:27:FE:90:C7:26:A0:91:21:B9:C2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49739D58EC02725D3DF9C6C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6807a644-6aa1-350c-acd8-bdbb82589cf1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.23.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:9d:58:ec:02:72:5d:3d:f9:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=41e4fd73-552c-451a-883b-14005c47a3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:0c:cd:c4:3a:f8:ce:69:e1:4c:6f:aa:10:
                    48:fc:3b:42:47:2c:59:bd:30:42:54:b7:f6:8f:45:
                    1f:7f:e2:f2:f0:0a:d7:8b:6b:25:88:e5:91:c9:30:
                    7a:76:ad:45:0e:3e:6e:a9:e2:cb:4a:9b:e1:1c:11:
                    d9:a1:e4:16:a1:22:62:28:d6:4a:dc:3c:c8:7c:b6:
                    91:4b:f7:2e:3f:9b:e5:26:0f:86:6c:b7:ca:73:a7:
                    c2:cb:e5:80:62:bd:15:20:0d:8f:6b:e8:43:9e:42:
                    d2:ad:55:44:86:70:a3:bf:0c:9e:d6:76:4c:12:af:
                    35:0f:04:eb:c6:fe:2b:aa:2d:60:de:6e:25:50:bd:
                    e2:9f:40:dc:d0:8d:7a:56:e3:e4:46:3b:ea:e7:4f:
                    e0:67:5e:f2:98:97:08:b2:b8:96:28:8a:35:59:55:
                    e7:d7:5e:56:f4:47:34:00:82:10:f7:6b:7a:f2:9b:
                    fd:9b:05:26:c1:d6:45:38:56:65:ba:90:81:b4:b2:
                    6b:cc:30:0e:71:ac:3c:f9:32:16:2e:73:14:a2:51:
                    3a:2b:12:8e:90:6e:7c:1a:38:cb:90:09:55:c0:7a:
                    11:b8:63:42:4e:9b:80:4e:e7:51:2d:fc:c4:fa:51:
                    81:d1:c3:00:0b:5c:44:8c:0f:86:9f:ed:96:f1:63:
                    86:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:30:95:E3:1C:8F:8F:C7:73:65:27:FE:90:C7:26:A0:91:21:B9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6807a644-6aa1-350c-acd8-bdbb82589cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:bd:cc:06:06:78:4e:c3:bc:3b:57:2c:2e:14:8c:9c:6c:
         d6:fe:4a:63:f3:9a:5f:a9:24:6f:0e:50:c5:fa:e5:83:ca:3e:
         45:3a:a7:d4:a4:25:92:d1:9c:5a:d7:8b:e4:f2:18:a5:e1:38:
         76:b9:4d:ba:8c:8f:fe:84:89:d2:f4:12:4c:b1:e4:06:7c:6f:
         f1:1d:b3:c5:03:d0:85:83:ee:17:28:c7:66:60:2c:6c:69:88:
         f1:f0:3f:a7:6d:36:05:ef:4e:31:77:a7:9c:2a:22:51:02:37:
         81:46:c2:2b:da:e0:d7:c8:01:23:97:f8:5d:51:a9:fc:46:08:
         2d:0d:63:b8:72:5c:2e:1f:e1:96:e9:9c:35:53:49:02:0b:50:
         f2:c5:f7:c2:56:77:98:f3:8f:51:5d:09:d5:18:3b:c5:09:28:
         67:b3:6a:75:04:74:0b:08:08:59:29:85:c4:75:ce:d5:de:15:
         1f:43:65:6e:f9:16:f1:77:6c:6a:21:e0:ef:4d:03:fb:db:a7:
         88:be:42:31:04:e3:8e:26:2f:80:f0:5b:ae:73:2d:8c:34:ad:
         91:0d:50:ce:24:fb:00:6d:27:db:ba:da:51:44:01:1b:85:58:
         45:3c:6d:27:c6:c8:0e:6b:71:60:ec:53:81:31:6b:d6:12:1a:
         00:cf:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:24:51 2026 by rpki-client