Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa
File:                     9b005c65-376f-3814-9c4b-33d2d6b1966f.roa (raw, json)
Hash identifier:          v3vltF9pIyv+g3l0iLS3BOn4aYPZI9QNMXHA1xFtUG8=
Subject key identifier:   CC:F6:74:95:7E:BE:32:12:00:90:2A:D0:7A:8D:DA:B3:B9:A7:C1:A3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E6F3EAB07680A6A8E82F917C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        173.28.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:ab:07:68:0a:6a:8e:82:f9:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=e7c0fbdd-cc89-40b0-9548-9808ea388593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:da:8d:1c:6e:b4:42:9d:f4:72:00:d9:e2:d1:
                    bc:ea:84:0d:f6:c7:05:fb:fd:81:2e:d7:51:47:9b:
                    1a:2b:82:ee:2f:8d:e8:19:21:df:a3:1f:e0:48:af:
                    93:02:32:8a:66:19:2b:08:5d:ad:71:d2:03:65:33:
                    0e:e4:01:06:a5:e6:45:da:39:b3:f5:ec:2b:b4:79:
                    50:db:89:33:e4:ce:ff:bb:b2:f4:74:df:63:88:75:
                    84:9f:6e:fa:f0:8f:32:1e:1b:9e:74:f7:00:8a:12:
                    ac:13:f8:6e:22:56:9a:b7:0c:16:00:ed:89:4f:2c:
                    c3:1f:9d:49:77:10:6f:81:2e:8e:4e:89:66:f1:9a:
                    0f:bf:c4:50:66:49:fc:2a:e4:0c:ab:f1:a0:1f:2e:
                    2a:e2:33:b1:08:69:d9:15:a8:28:d1:e0:61:f6:e5:
                    c3:63:a0:93:37:48:57:75:95:40:3d:2b:cb:4c:7f:
                    7e:30:59:14:cd:2d:64:e2:2e:85:4d:05:8b:13:0b:
                    f9:79:0b:a7:fe:f6:f5:fc:35:cb:48:87:5a:1e:03:
                    31:97:ec:da:ef:ab:79:70:ed:d5:32:22:e7:79:c3:
                    7d:e5:a3:99:ae:b9:61:c1:7b:e0:cc:90:df:1f:75:
                    74:41:51:77:aa:28:ef:3d:a4:a5:df:d9:62:92:9e:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F6:74:95:7E:BE:32:12:00:90:2A:D0:7A:8D:DA:B3:B9:A7:C1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:99:f4:e3:cb:c1:12:d1:5f:2d:5a:7f:0c:d7:89:f4:95:83:
         97:cd:1f:49:61:25:26:6a:18:75:0f:18:8e:3c:cc:31:30:fb:
         19:45:1b:30:b7:82:6b:40:2e:1a:3d:bb:ab:cc:fb:29:f7:b5:
         ab:27:1e:8a:78:63:eb:1a:38:2b:99:20:59:2d:a2:4b:37:07:
         4c:88:c4:8d:30:80:da:1b:68:87:6d:28:de:2b:c7:3f:38:52:
         f0:ea:38:f5:d2:8d:47:68:eb:6e:6a:b0:79:e9:fb:11:ff:24:
         f3:c0:2e:96:b3:31:25:28:68:04:f4:79:6d:ba:08:cc:6e:a5:
         10:81:25:a9:a8:1f:dd:5f:ed:16:d5:f5:08:15:f8:71:7f:87:
         02:1e:35:c6:c7:43:ce:09:80:37:5d:ab:d1:7b:3a:19:dd:49:
         be:ab:c5:d8:a7:92:f8:68:d9:b6:2b:2c:05:ef:a5:56:ce:7e:
         fa:11:29:ff:5c:e2:4c:2b:9d:77:13:8e:5d:20:09:c5:1f:18:
         71:51:09:83:05:88:f3:d8:ae:bf:79:13:81:9c:44:7d:29:a8:
         5e:38:64:bc:d8:1f:03:c3:64:54:98:e1:29:05:80:03:0f:eb:
         8c:d7:d7:94:35:d3:e7:a1:6a:bd:15:86:43:03:ee:ab:cb:30:
         79:f4:a6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:08:14 2026 by rpki-client