Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/774eed30-cfd2-3fa4-81b9-2da9824eda51.roa
File:                     774eed30-cfd2-3fa4-81b9-2da9824eda51.roa (raw, json)
Hash identifier:          D4HxPVFM6d6ZXDbBT5n582dDy3rYYS5pn1fOC9M+lV8=
Subject key identifier:   69:C0:99:09:67:08:F1:6C:F6:EC:73:F5:D5:9F:C2:51:E2:80:C9:4C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49886331160744D29B2E4FC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/774eed30-cfd2-3fa4-81b9-2da9824eda51.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.29.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:63:31:16:07:44:d2:9b:2e:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=acfcda38-26fa-49a5-805f-5d5912a5b475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9b:ee:0b:30:3f:06:22:df:b3:6e:e5:25:2b:
                    ce:72:b2:12:08:7b:f8:9b:25:9a:55:2a:29:ae:5d:
                    70:74:97:03:be:9c:fe:70:82:00:10:76:d9:96:81:
                    58:77:57:f2:8c:9e:8e:29:cb:9e:a7:f2:69:24:46:
                    7e:5a:7d:01:e5:5c:69:dc:38:e6:2e:a7:55:dc:76:
                    3e:71:2f:72:5f:52:a9:ad:d1:ce:5a:7e:15:13:8d:
                    9c:98:6f:6e:dd:bc:c8:30:72:e7:20:10:3c:67:a1:
                    03:69:23:d2:4f:7d:b5:c0:15:8e:10:03:4e:50:0e:
                    06:aa:46:54:4e:3e:06:3e:28:c9:07:cd:18:b3:22:
                    e5:c7:93:49:39:6c:86:78:70:a2:b2:41:c2:64:92:
                    5d:54:54:89:2d:53:07:94:70:15:e4:e6:ff:bc:6f:
                    69:60:e3:2f:9b:09:a2:4e:4e:04:7e:f0:e5:f3:76:
                    d1:8e:96:f0:46:8e:4e:b7:24:3e:7a:31:60:81:18:
                    ee:1b:d6:db:56:c7:8d:f4:26:06:43:e5:fb:11:c3:
                    d7:6a:6b:cf:38:e1:a9:5d:20:a0:c0:e3:90:c5:cc:
                    43:f6:c4:2f:5c:06:37:4c:c5:7b:c9:97:00:14:0f:
                    17:8c:0c:55:4c:4d:db:5a:e0:28:ba:d7:b8:ee:d2:
                    e2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C0:99:09:67:08:F1:6C:F6:EC:73:F5:D5:9F:C2:51:E2:80:C9:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/774eed30-cfd2-3fa4-81b9-2da9824eda51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:d9:c0:c1:5d:4b:d8:c9:10:51:67:46:9d:da:fc:69:e3:
         18:78:6e:99:d6:b0:1c:44:2c:ec:6a:b7:e7:86:31:32:ed:be:
         64:67:e8:0d:cd:d5:b3:61:c8:d5:f3:21:88:9a:15:99:23:85:
         a3:5c:c7:22:c3:e6:9a:07:45:48:51:d1:fa:3c:7b:5f:fe:50:
         83:17:3b:b3:ea:f3:70:7e:27:9a:b9:11:f4:66:dd:b4:84:6e:
         e1:2e:66:d8:09:23:58:aa:7e:c3:18:71:89:06:c3:2c:a1:f2:
         54:0a:01:a6:53:7c:79:24:2b:f1:a5:5a:77:00:6d:8c:7a:8e:
         84:e9:02:29:47:6c:4a:da:ef:d0:ce:4a:4b:28:b3:03:30:e9:
         76:b6:d1:c0:00:46:51:88:2f:f9:33:b7:42:05:46:ec:96:53:
         02:5a:f7:2c:ef:80:19:cd:c9:39:dc:22:96:5c:e4:c0:a8:ee:
         56:6c:1b:8a:0c:b6:ee:33:3f:b9:d1:6d:20:8d:a1:a0:43:e6:
         45:09:90:23:4f:1c:83:75:a0:b8:07:b1:01:d8:6a:1f:ca:27:
         a0:ce:a1:cc:53:a1:b5:a8:d4:42:29:89:3a:5f:eb:af:e5:d7:
         84:fd:64:0d:51:22:8d:d3:2e:14:90:f0:36:97:78:c8:c8:c7:
         95:d4:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:53:37 2026 by rpki-client