Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6988daf6-bd52-35a1-aca9-b1e180404249.roa
File:                     6988daf6-bd52-35a1-aca9-b1e180404249.roa (raw, json)
Hash identifier:          2+SXY2OfynetfF/G/6e3y6jFDq3tF+FkDtNULpTyVyk=
Subject key identifier:   78:55:A5:BE:60:DF:5D:32:FF:7B:E6:BC:82:54:75:79:60:84:FA:F5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4974BFDBC923643011BABE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6988daf6-bd52-35a1-aca9-b1e180404249.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.27.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:bf:db:c9:23:64:30:11:ba:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6200b19b-b40d-415e-9667-552cb450a8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:72:81:63:69:34:49:67:cf:c9:69:ff:6e:
                    72:df:71:e4:b3:c1:83:ca:f9:a2:ca:9b:67:db:4c:
                    d4:f7:29:fc:bb:62:f8:4c:e0:75:d6:0a:ff:27:fe:
                    71:8b:a5:10:31:df:c2:1d:08:10:60:75:7b:63:7d:
                    25:47:9b:ab:ea:00:46:64:f0:75:ee:8e:f6:b7:c5:
                    e6:30:ad:67:1e:5b:36:a9:bb:b5:bd:8d:d9:71:15:
                    41:32:98:7e:de:b0:e2:de:5e:02:32:78:8a:ee:1e:
                    73:37:65:59:1b:d6:a0:a7:84:64:8c:02:f7:0a:eb:
                    9b:48:91:ce:eb:ec:65:91:4a:6a:ea:34:80:ee:45:
                    37:2f:0b:08:8b:5f:5f:4b:5c:34:b2:99:fd:6b:b2:
                    88:08:95:5a:9d:34:c3:70:bc:55:e5:22:66:c9:b3:
                    6c:65:45:e2:23:6e:6b:d1:ea:1c:d9:aa:97:7b:13:
                    1c:d0:3c:c4:b0:eb:55:f0:d4:4b:f2:9a:b9:53:d7:
                    a9:f6:b9:9e:e2:65:fd:d6:11:3d:2f:49:5d:08:01:
                    21:35:91:37:a2:87:4f:87:79:3c:d1:1d:29:41:f8:
                    68:8e:20:e3:a9:18:c9:e5:0c:75:53:61:b1:7b:3e:
                    e3:e7:aa:2f:9a:9d:8e:64:8d:0a:d1:df:24:9b:db:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:A5:BE:60:DF:5D:32:FF:7B:E6:BC:82:54:75:79:60:84:FA:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6988daf6-bd52-35a1-aca9-b1e180404249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:eb:c1:0b:8e:26:ff:f1:bd:ea:f3:78:c8:bd:f0:09:88:c3:
         cd:30:51:83:f8:b0:5e:45:75:bb:a3:8c:a6:0d:5e:6d:ea:27:
         0d:cf:72:fe:39:a6:cf:1a:69:a3:81:19:ee:64:ad:e5:fe:0e:
         54:c3:cf:ed:8f:0f:77:ac:f4:b6:46:35:53:e0:4f:38:0c:63:
         0b:94:39:c7:a5:30:81:2d:da:e7:ae:f1:cc:b4:b9:e3:e5:b0:
         8c:77:5e:3b:f4:5f:03:aa:65:49:ff:32:b7:49:a6:b3:98:19:
         e7:ca:d8:f7:05:72:81:79:69:5e:b4:82:56:2d:48:85:c8:c0:
         71:a4:99:52:53:b9:b7:9e:01:ae:f6:d3:78:00:a8:bc:7e:46:
         11:8f:bb:13:6b:4b:03:79:2e:3f:47:7a:b6:7a:d0:0b:b4:40:
         0e:b7:f3:d0:09:bf:d4:b8:20:23:72:b0:cf:6a:1c:d6:05:a1:
         0b:0e:cf:69:af:b1:e8:b4:c1:a7:84:51:04:57:9d:68:c2:a1:
         04:87:7d:fe:67:d6:e9:eb:e6:b5:0d:4c:3e:26:71:e3:54:82:
         a5:3f:42:db:46:72:44:8d:dd:73:c7:b2:7b:aa:77:db:77:52:
         ac:81:25:74:0c:87:fb:8d:b6:7f:61:a8:7f:b4:d5:38:89:e0:
         41:21:25:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:57:04 2026 by rpki-client