Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ffb9aee-f989-3d7f-97ef-1e61e02fe010.roa
File:                     6ffb9aee-f989-3d7f-97ef-1e61e02fe010.roa (raw, json)
Hash identifier:          hGnWNaSSDq8mTohDxLtYIziY+bzTPIsKGLJgRSMPpLM=
Subject key identifier:   C1:D5:76:14:81:03:D3:CB:13:FF:F3:37:90:E7:88:09:5B:75:A3:1B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49876003B53E4538F33EBC40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ffb9aee-f989-3d7f-97ef-1e61e02fe010.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.24.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:60:03:b5:3e:45:38:f3:3e:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=20f49c7b-c2d2-44a9-ab81-36e11ff61f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:ab:c5:6c:6a:51:00:eb:00:df:99:4c:d8:
                    0a:2d:14:94:6a:5f:38:f3:21:86:7e:4d:f1:ae:47:
                    aa:25:0b:13:d1:71:bb:49:c7:b2:be:3a:96:c7:42:
                    75:d8:e4:2d:cc:50:d4:3a:4e:91:78:c0:65:3c:05:
                    2f:13:cf:ed:84:9f:ab:4e:57:e0:24:ff:ed:4b:ed:
                    59:19:36:8c:8c:2f:9a:45:39:77:a2:ac:3e:02:40:
                    b0:47:9b:89:7a:53:8b:78:8f:54:54:83:0f:80:d1:
                    83:7c:b1:a6:9e:0e:1d:80:c8:bb:3a:3a:e4:a7:2d:
                    b1:7c:ad:7a:11:27:21:87:cb:1d:d8:e5:23:8a:58:
                    43:98:bf:38:11:37:1b:7c:3e:1d:5a:f5:50:f1:68:
                    5e:1c:59:47:a3:83:73:58:9e:bc:b5:cb:16:55:f4:
                    a0:f6:0b:fe:dc:6c:94:eb:6a:4e:44:d2:1b:5c:4c:
                    d6:7e:92:44:bd:c5:59:17:fc:29:7f:74:83:ef:87:
                    46:f1:cd:7d:5b:60:ac:1d:fd:a4:ab:9a:21:be:ec:
                    3a:a4:db:bf:1a:76:3d:09:bd:9c:2b:d0:47:35:8c:
                    c6:1f:d4:98:cd:23:8d:51:b8:ea:b7:2a:2f:f7:86:
                    91:a4:53:7e:0c:96:41:64:ce:6a:bb:c9:8e:28:fb:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D5:76:14:81:03:D3:CB:13:FF:F3:37:90:E7:88:09:5B:75:A3:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ffb9aee-f989-3d7f-97ef-1e61e02fe010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d2:2d:11:cd:c6:9a:05:ad:cf:b9:1e:91:c1:0c:d5:39:2f:
         30:77:6c:19:79:04:e5:08:80:40:fa:ea:7a:bd:80:47:e6:21:
         0a:c8:5d:be:d6:4d:e5:a8:8d:b2:4d:70:c5:d0:5a:7d:be:25:
         3f:bc:83:b4:8c:52:3b:e2:13:38:26:b6:bc:4d:71:53:cd:05:
         12:de:2f:2a:c3:67:63:44:ce:a2:7f:a4:fe:23:eb:76:a0:68:
         f2:87:02:c0:a3:d5:d2:08:b4:dc:fa:1f:3d:6d:b5:fa:83:43:
         84:9c:7b:c1:3f:71:56:25:12:b1:98:7d:e9:c6:37:b9:a9:0f:
         3d:fd:08:4e:bf:f2:bb:1c:2e:38:95:f7:77:2a:ed:a1:74:84:
         d0:9c:01:dc:c1:14:c4:4f:6a:0f:00:b5:49:bd:7f:74:bf:eb:
         33:39:f5:01:a1:26:5c:3d:05:c5:c1:c6:fe:b5:7c:64:b1:50:
         2f:00:2f:8a:f1:28:8e:57:9a:b7:6a:23:57:72:fe:66:9f:d1:
         87:0b:fe:1e:9e:b9:68:3c:52:44:8b:e6:15:67:20:aa:ae:7a:
         87:b0:96:d0:06:ad:64:7c:30:65:e5:0e:19:c6:41:f8:a3:f1:
         37:0b:87:ae:a5:4c:0c:33:d8:7f:b3:87:73:bc:07:53:bf:42:
         99:5e:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:52:58 2026 by rpki-client