Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/693a8dfd-ef04-35be-9e12-62119c2d8d4c.roa
File:                     693a8dfd-ef04-35be-9e12-62119c2d8d4c.roa (raw, json)
Hash identifier:          5vD17QZNHMLq47cbgt+SqRFcoEpZV+7luPxMSV528lw=
Subject key identifier:   E8:12:A7:BC:4F:50:5F:9D:0E:4D:35:75:C6:A0:37:F5:0E:D2:8B:89
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F3E480A01FEE0106C639D4F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/693a8dfd-ef04-35be-9e12-62119c2d8d4c.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     19905
IP address blocks:        173.17.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:0a:01:fe:e0:10:6c:63:9d:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=91f0d20b-41ef-40bc-8305-340dd7966450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:a0:26:90:ed:36:1e:4b:02:11:b5:d8:91:
                    7e:fe:f3:17:db:e1:ab:e4:d6:f6:23:3f:23:c6:84:
                    7c:28:34:f2:4f:ec:23:fa:83:be:46:a2:85:65:95:
                    fe:cb:e2:b9:5b:23:71:c8:15:64:9f:2c:dc:d1:af:
                    a8:08:7a:e6:da:64:79:36:7b:26:5e:7d:8a:32:9f:
                    46:25:23:0d:ff:fc:f3:7e:82:25:fd:6b:a0:28:bf:
                    ce:98:fd:40:1e:b0:46:21:29:34:16:32:2c:67:db:
                    ff:c0:02:fd:18:de:b2:73:e2:86:32:d9:01:05:c7:
                    cc:cb:66:95:c9:7b:22:e5:9a:be:9d:a5:a5:9d:7f:
                    a7:f1:dc:f5:4e:20:20:8a:12:9f:46:5b:b2:ba:63:
                    ec:de:09:f6:89:8f:cb:fc:bf:94:71:3f:f8:9c:66:
                    f1:b8:63:0d:62:f4:11:4c:6c:96:87:94:3d:82:ec:
                    d9:1b:5b:de:25:88:5f:dd:6b:d5:83:19:ba:b8:c0:
                    a7:95:5b:46:c0:4f:68:36:b4:7b:9c:88:ee:6d:ee:
                    df:90:36:4d:15:3b:18:da:4b:78:e7:88:5e:35:ee:
                    aa:57:05:a1:f6:93:84:fd:96:b5:7e:cb:73:bd:89:
                    e4:ba:b3:00:33:23:16:99:42:28:3e:6f:33:bb:54:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:12:A7:BC:4F:50:5F:9D:0E:4D:35:75:C6:A0:37:F5:0E:D2:8B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/693a8dfd-ef04-35be-9e12-62119c2d8d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:d6:1e:d0:60:9e:d1:3c:ec:f8:ee:c6:e4:07:83:08:b5:
         fd:bd:ac:87:84:b9:30:2d:a1:60:51:e0:14:7f:36:80:f8:3f:
         8c:6d:0d:73:5c:c0:e3:a9:79:58:67:6a:4f:7a:1f:7b:e4:39:
         d7:de:f2:22:5b:3c:38:82:b1:43:96:ea:6d:ed:ca:58:fa:c4:
         28:23:75:ba:ee:cf:ce:37:70:ba:f8:31:65:84:c4:e8:e1:43:
         a5:cd:16:1f:7a:26:db:18:1d:6b:e8:e9:68:2e:20:3e:21:0b:
         a0:14:36:cc:3f:a7:af:fe:fa:4a:e0:29:37:b8:4c:da:c0:d9:
         4f:2c:c2:ab:6e:13:0d:ba:9b:f9:e7:13:01:da:55:5b:5b:49:
         12:e4:9b:9d:74:56:3d:26:b6:42:2f:c1:14:12:87:4f:ca:4a:
         bd:c1:4f:03:1c:4a:4d:c4:be:38:c2:eb:79:1d:7c:e1:c2:aa:
         7e:6b:4c:ba:a4:9b:75:75:fb:8d:50:9a:d8:d5:1f:ce:e8:2b:
         80:45:b4:6e:39:1f:b8:e3:2a:9c:17:d4:25:b0:e1:66:89:42:
         58:ec:98:08:bc:7c:4c:ab:ea:8b:a8:56:2a:77:da:83:44:03:
         80:5c:a5:b1:e1:ac:ad:4f:d8:91:4a:71:9d:eb:c4:b1:5b:19:
         aa:98:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:30:18 2026 by rpki-client