Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88821259-86eb-3f8e-9596-d8278bba51aa.roa
File:                     88821259-86eb-3f8e-9596-d8278bba51aa.roa (raw, json)
Hash identifier:          otqCeyS39637hdLX5194qcQg6+jFsEACoGPYx0kDeSs=
Subject key identifier:   BD:3C:28:EE:1F:9A:4D:D8:AD:CE:CB:02:63:F5:E4:CA:70:F1:ED:D8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49872BCE36BBCFD46D206F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88821259-86eb-3f8e-9596-d8278bba51aa.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.20.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:2b:ce:36:bb:cf:d4:6d:20:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f6725177-17fc-4eda-aeff-8dd915d53640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:d7:e1:38:ba:57:65:7a:36:6a:0b:df:6f:
                    54:fc:20:a9:ce:1b:a6:80:0c:80:25:c6:e5:3b:4e:
                    33:fb:f2:d7:0c:d4:c6:31:c3:9a:73:ce:5c:6b:be:
                    8a:56:2b:8f:28:5b:7d:53:38:4e:61:88:bd:bf:46:
                    be:f1:27:d8:78:7b:df:4e:a0:c1:e2:60:34:7e:bd:
                    d2:a6:0f:32:e8:d2:7d:b9:5a:ee:5e:dc:7a:a5:72:
                    75:67:86:f0:c5:96:99:60:12:b3:1e:c0:35:26:96:
                    4f:7c:d0:e1:01:e8:eb:8b:fb:e7:84:3a:19:5b:9e:
                    48:6d:f0:31:94:ea:7b:0b:85:b4:1b:95:cc:3f:a8:
                    b2:0a:28:44:b1:6b:6d:de:f5:fa:ef:5a:e5:59:b7:
                    bb:6f:9e:a1:a7:f6:97:0b:3a:2d:d4:fa:7f:ae:a0:
                    70:9a:0b:74:97:07:bd:5f:57:50:a4:b3:1b:c5:26:
                    a5:3b:d7:fe:6c:c1:0c:85:f4:d8:52:c2:21:41:38:
                    f2:2d:3b:78:73:29:db:0c:db:d5:05:4b:dd:81:69:
                    66:40:16:8c:77:01:76:fa:d5:3f:cc:1e:3a:e9:84:
                    cd:eb:e7:00:2f:e7:ab:66:81:1e:65:35:65:a8:7e:
                    40:e1:02:21:3a:8c:ee:48:e2:04:43:95:82:ec:f4:
                    e0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3C:28:EE:1F:9A:4D:D8:AD:CE:CB:02:63:F5:E4:CA:70:F1:ED:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88821259-86eb-3f8e-9596-d8278bba51aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:43:41:96:19:7f:27:43:61:c9:d0:11:5e:d3:04:28:35:f6:
         bc:88:89:10:71:1f:67:98:42:e5:ec:2b:5e:90:ed:0d:2e:21:
         35:b5:3f:eb:db:9e:cb:8d:3a:7c:93:19:a4:72:a4:6b:20:8c:
         80:70:12:b2:5a:01:13:3b:fc:02:92:10:24:fc:5f:47:b8:4a:
         34:c2:d6:17:d5:60:df:c6:a1:60:76:fb:40:02:6e:58:c5:14:
         43:51:87:0b:f5:26:9e:36:82:f4:83:0c:93:81:b0:ed:cc:08:
         23:57:c3:5c:d6:09:66:94:19:3e:5c:25:0b:39:e8:e3:6e:ff:
         7a:d1:e5:53:f9:24:1a:8c:82:88:77:05:a0:f6:59:32:c2:c9:
         0a:7f:40:73:48:68:4d:c2:db:89:61:66:ec:15:6d:66:e6:59:
         fd:80:26:8d:94:c9:1d:c3:b5:d5:b5:e0:40:f9:a7:f9:8e:51:
         80:b5:fc:2f:d4:77:4a:ca:ac:a4:a1:dd:80:8d:4c:e4:ca:10:
         94:90:55:f8:4b:52:b2:b6:e1:1e:f8:df:86:6a:43:8c:74:d0:
         2e:06:56:91:73:5c:06:7b:4d:82:86:81:f4:9c:53:b4:51:36:
         29:12:90:43:b1:13:dd:8a:f0:a5:a1:16:7e:7a:20:56:a9:51:
         31:80:8d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:33:49 2026 by rpki-client