Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cc7dbab-1b5c-3cd3-a04a-3676392030d9.roa
File:                     6cc7dbab-1b5c-3cd3-a04a-3676392030d9.roa (raw, json)
Hash identifier:          D6m8UmtacglGR2dgOSRbomljxNonFvMB2KgPTtF06Fc=
Subject key identifier:   EF:15:AB:B0:4A:89:56:F4:84:F8:D4:5B:2E:2B:8D:53:9B:4C:FF:E4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498B1E1A9C44C0565AA94620
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cc7dbab-1b5c-3cd3-a04a-3676392030d9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.29.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:1e:1a:9c:44:c0:56:5a:a9:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3f4718b0-6c52-4f45-8d26-31bcbe273eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:f7:aa:37:cb:ec:39:a7:38:6f:8f:b6:ca:
                    de:49:f5:31:40:0b:9b:de:ef:a7:86:0b:c4:45:1d:
                    cb:cd:86:c5:73:99:f5:bd:ca:de:f8:29:dc:a7:77:
                    07:cf:75:ed:2e:23:d0:cc:41:ba:b5:57:fd:ed:07:
                    40:3f:1f:8e:25:9c:26:43:0b:2f:81:30:b5:93:9b:
                    67:19:9a:ce:56:46:86:38:02:57:eb:96:17:d4:17:
                    56:00:a1:59:62:13:2c:10:75:d0:b2:a4:73:4e:30:
                    8f:37:aa:5c:6f:27:b5:6a:ef:69:b8:17:6c:69:bb:
                    1c:9e:fc:c6:73:e6:f2:7d:f7:32:b8:5f:69:36:48:
                    1d:33:0f:ad:dc:27:c9:81:33:bc:83:b9:05:fd:80:
                    78:0c:dd:5c:94:82:37:31:69:ca:d2:46:30:dc:f1:
                    ad:fd:af:26:6f:62:3f:a6:74:eb:31:90:cb:e5:52:
                    11:8a:cd:ef:96:6d:2e:ce:f8:ce:b9:84:88:a5:6d:
                    e7:3b:7b:8d:eb:5e:63:d3:f2:c7:0e:06:0c:ba:cf:
                    5c:7c:93:b2:49:ea:74:6d:89:1e:24:54:b3:d6:00:
                    5a:b1:d6:33:5b:bd:29:d9:e8:1d:0f:07:de:01:5d:
                    c1:61:42:16:10:07:71:ba:41:38:19:cf:a7:6d:39:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:15:AB:B0:4A:89:56:F4:84:F8:D4:5B:2E:2B:8D:53:9B:4C:FF:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cc7dbab-1b5c-3cd3-a04a-3676392030d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ee:a9:76:b2:c3:7f:04:8b:89:5b:d7:76:92:ee:41:fc:12:
         b1:f4:41:ad:63:36:d5:c5:e5:31:db:1e:9f:2d:33:c3:81:35:
         f7:5b:be:58:e4:9e:4d:03:27:a3:8c:23:c8:2a:ef:d8:4c:49:
         9d:be:52:8b:01:2b:36:3f:eb:d9:18:5a:2e:5c:f4:c3:60:b0:
         04:61:7f:22:c0:3b:4b:de:00:c0:4d:cc:43:b2:6a:8c:c6:b9:
         15:69:12:9a:5a:e9:9b:a3:eb:d3:29:e3:14:01:28:d9:06:2a:
         ac:31:ab:ff:7c:ae:89:8c:58:12:33:9b:5b:f1:e7:06:84:2b:
         86:50:01:16:8d:d9:0b:e7:f0:b1:15:c7:30:53:e3:aa:df:00:
         43:d4:08:10:6b:dd:46:b9:d0:20:27:c3:5e:7a:4c:67:76:2d:
         d3:b3:b7:3f:b4:5a:05:b5:23:ba:83:8b:1d:96:32:45:80:9e:
         a1:29:5e:9e:38:9b:52:c8:db:9e:3f:e6:8b:57:c9:f0:44:22:
         a5:cf:63:2a:59:90:dd:bf:3c:c4:52:99:8f:3b:72:a9:4d:bb:
         85:51:73:6b:12:6c:37:f8:30:92:8a:9c:cb:f3:3e:9a:fa:86:
         3d:f5:94:0e:ea:f9:6f:82:56:a1:db:cc:bc:bf:95:d4:60:61:
         e3:09:cf:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jix4anETAVlqpRiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
M2Y0NzE4YjAtNmM1Mi00ZjQ1LThkMjYtMzFiY2JlMjczZWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3r3qjfL7DmnOG+PtsreSfUxQAub3u+nhgvE
RR3LzYbFc5n1vcre+Cncp3cHz3XtLiPQzEG6tVf97QdAPx+OJZwmQwsvgTC1k5tn
GZrOVkaGOAJX65YX1BdWAKFZYhMsEHXQsqRzTjCPN6pcbye1au9puBdsabscnvzG
c+byffcyuF9pNkgdMw+t3CfJgTO8g7kF/YB4DN1clII3MWnK0kYw3PGt/a8mb2I/
pnTrMZDL5VIRis3vlm0uzvjOuYSIpW3nO3uN615j0/LHDgYMus9cfJOySep0bYke
JFSz1gBasdYzW70p2egdDwfeAV3BYUIWEAdxukE4Gc+nbTmYTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8Vq7BKiVb0hPjUWy4rjVObTP/kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmNjN2RiYWItMWI1Yy0z
Y2QzLWEwNGEtMzY3NjM5MjAzMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELuqXayw38Ei4lb13aS7kH8ErH0Qa1jNtXF5THbHp8tM8OBNfdbvljk
nk0DJ6OMI8gq79hMSZ2+UosBKzY/69kYWi5c9MNgsARhfyLAO0veAMBNzEOyaozG
uRVpEppa6Zuj69Mp4xQBKNkGKqwxq/98romMWBIzm1vx5waEK4ZQARaN2Qvn8LEV
xzBT46rfAEPUCBBr3Ua50CAnw156TGd2LdOztz+0WgW1I7qDix2WMkWAnqEpXp44
m1LI254/5otXyfBEIqXPYypZkN2/PMRSmY87cqlNu4VRc2sSbDf4MJKKnMvzPpr6
hj31lA7q+W+CVqHbzLy/ldRgYeMJz3M=
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:50:44 2026 by rpki-client