Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6815f728-6fc7-3cd8-8dcc-21298fcad9d1.roa
File:                     6815f728-6fc7-3cd8-8dcc-21298fcad9d1.roa (raw, json)
Hash identifier:          PPhy+Th2P4LOI0oMIvrZbuQ78Ll60xATy38zmXBM7GQ=
Subject key identifier:   07:04:B8:C1:3B:2B:38:F7:F9:AF:DE:51:F3:9F:2D:F4:B7:E3:2F:62
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4989407CCFC25CEC4CDD1F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6815f728-6fc7-3cd8-8dcc-21298fcad9d1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        150.195.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:40:7c:cf:c2:5c:ec:4c:dd:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=56e71209-fde1-4984-9af9-372adf341f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:c7:6f:9c:b9:fa:d2:d6:2c:f8:41:91:80:
                    ae:38:23:77:a4:f1:74:dc:e3:19:3f:16:d8:7c:e4:
                    21:33:60:c1:b5:7c:89:d3:c2:5f:5f:a5:0f:40:2f:
                    cc:28:58:92:73:b6:09:fb:77:dd:5a:fc:43:da:93:
                    2e:1d:40:cb:66:b4:12:3e:f4:79:1b:f3:fe:56:a8:
                    2e:71:18:67:2f:60:45:a8:be:6c:3a:89:4c:17:45:
                    31:4a:3a:31:94:8f:e7:67:4e:db:af:99:b7:1d:84:
                    4a:31:4b:7f:2a:b6:d2:f1:2f:d3:b7:35:83:af:8f:
                    90:c9:05:2f:e8:5f:0f:f0:aa:36:1b:1f:ed:03:0a:
                    21:21:14:2a:b8:7b:fb:8e:91:6c:6e:30:ec:20:de:
                    07:f8:f9:e7:a7:64:20:c7:90:f7:04:6c:a3:6b:b7:
                    df:e5:41:43:aa:02:c9:b8:da:0c:8a:dd:c6:f6:95:
                    0e:15:a8:06:bd:bf:d5:8c:41:25:18:53:91:a1:53:
                    4c:ab:95:08:9c:2b:2a:91:82:ba:aa:31:f4:f7:0b:
                    6b:0d:95:e4:b6:40:66:d7:8a:97:7c:d7:e4:e1:e9:
                    9f:a9:bc:94:70:73:27:50:bb:fe:e6:81:66:b8:27:
                    ac:18:61:f2:98:11:0a:ac:f8:4c:f2:d3:1d:8e:1a:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:04:B8:C1:3B:2B:38:F7:F9:AF:DE:51:F3:9F:2D:F4:B7:E3:2F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6815f728-6fc7-3cd8-8dcc-21298fcad9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1d:7e:79:34:6f:c4:04:9e:f7:04:b5:30:a5:bc:50:d0:10:
         bc:53:ae:42:48:d3:ec:6c:05:df:bd:1e:88:70:98:f9:82:8b:
         4d:12:bc:80:19:55:7d:89:f1:7f:1c:c5:31:90:00:f4:15:85:
         57:a0:f2:98:55:29:32:5d:7e:09:97:ca:a1:37:94:7f:53:9e:
         3d:02:5d:74:20:5c:e0:a3:0e:06:c9:53:60:bf:fc:61:3f:35:
         eb:fb:4a:18:92:8c:c9:18:b3:c1:d9:12:a3:d6:f4:f0:62:03:
         d4:3c:f6:c6:95:f7:27:28:68:03:31:7a:19:15:86:36:c1:8f:
         cc:2d:76:35:05:e5:1e:d5:5b:8d:0d:0f:f2:0a:21:4b:49:23:
         f6:c5:90:c1:a8:23:0c:b7:40:37:87:5d:3b:42:5b:b2:df:10:
         2d:24:ec:bd:ae:1c:20:32:44:54:b2:e8:6a:27:49:6a:67:c8:
         55:75:82:60:0d:ce:6e:65:3f:31:a6:d8:81:b2:fa:ad:00:87:
         72:91:19:8c:e8:fa:51:34:77:4e:82:71:be:21:9a:3c:62:ba:
         a3:9f:2c:54:81:5e:da:c6:07:73:b4:54:05:a0:b2:3e:f3:96:
         4c:ca:63:a9:05:c0:ab:ab:a2:f7:27:c5:4e:37:b8:54:05:01:
         e4:1a:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:32:59 2026 by rpki-client