Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/adc2f3ec-e0db-3369-9648-c202b41884fc.roa
File:                     adc2f3ec-e0db-3369-9648-c202b41884fc.roa (raw, json)
Hash identifier:          11TgesrvsyJeKxsvNquT1jOagDPsfNbDlUnEn4IrVZs=
Subject key identifier:   E1:DD:AC:F2:E7:3C:30:B1:12:69:EA:4F:5E:D2:76:1F:30:21:08:6B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49730A4CDEDF754B46101EA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/adc2f3ec-e0db-3369-9648-c202b41884fc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.16.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:0a:4c:de:df:75:4b:46:10:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dd3ccc1f-4a47-4eb0-a3fe-15e67a8c5cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:e3:c9:c3:57:bd:02:b5:d1:f5:d0:54:29:
                    70:75:85:f8:25:c7:22:61:1b:20:d3:45:3b:cc:3e:
                    d3:7e:35:d2:37:6b:cb:4d:c0:16:48:b7:df:2d:d8:
                    8d:18:00:71:7d:00:c0:42:80:7b:3b:37:d0:3d:f0:
                    19:21:7f:aa:7e:82:b8:ae:b6:7c:ff:e9:20:93:97:
                    d6:69:01:5b:22:1e:8d:74:37:85:91:bd:2d:10:73:
                    3a:94:ee:60:08:fc:23:91:64:fe:d8:d8:ce:96:61:
                    c1:d4:c4:3d:62:c3:3d:77:bf:9e:9f:1c:63:10:b0:
                    df:86:48:9e:3a:8a:90:52:c1:6d:61:ef:44:aa:0d:
                    75:35:49:96:80:b8:f3:eb:ea:bd:89:b8:1f:cf:97:
                    e0:cd:ab:bc:ad:c2:78:41:07:f3:d3:84:00:9e:d3:
                    c3:fe:b4:b7:1b:c4:30:54:3f:70:b2:8f:f9:dc:b8:
                    08:ea:e4:ac:2e:6a:56:06:94:ff:e4:1b:a4:ee:56:
                    8a:11:92:98:79:f1:cc:a6:25:f3:d9:38:70:8a:20:
                    9b:32:c8:10:fd:6e:d6:7b:b8:53:4a:33:79:7c:f3:
                    2b:69:d4:12:ce:69:0f:8d:41:8a:1a:b9:0d:cf:e9:
                    fc:f2:3a:ae:9c:6a:80:a7:08:63:3e:78:37:2a:f1:
                    61:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DD:AC:F2:E7:3C:30:B1:12:69:EA:4F:5E:D2:76:1F:30:21:08:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/adc2f3ec-e0db-3369-9648-c202b41884fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:1b:95:ec:2c:18:43:d8:d2:b1:3a:2a:e2:9e:68:fe:36:93:
         02:9c:b5:69:f2:71:31:e9:83:99:98:89:a0:cc:b9:3d:aa:20:
         a0:d9:3a:17:6a:16:7d:34:f6:c9:d2:60:c7:9d:b4:3a:d3:39:
         6e:4b:0a:ad:ee:68:14:10:3b:a0:da:19:ed:30:20:e6:81:0b:
         05:99:99:8c:54:e9:3f:b7:11:75:24:a7:5b:2c:a7:09:d3:f0:
         3f:fb:57:35:1c:ab:2c:bf:c1:d1:1c:6c:4e:7a:fa:e4:fe:7e:
         3f:35:43:22:78:99:f3:bb:1c:43:e6:cc:98:d6:3f:57:f0:41:
         c7:28:4e:dd:71:b8:ac:d0:8c:f9:a8:06:72:67:0d:54:a2:87:
         69:74:a7:38:7c:92:52:ee:a9:87:43:f6:12:60:ff:86:6e:4d:
         77:3f:b2:91:95:b3:53:bc:1e:72:40:e2:5f:1e:ad:55:2c:55:
         d2:77:f0:e8:82:e5:32:9b:6b:b8:fa:93:24:6b:e4:b1:2b:ee:
         a2:39:b0:fe:f7:b7:9a:fd:a3:dc:b7:37:35:cb:cf:94:ef:1d:
         32:03:ac:28:41:71:a7:1a:59:56:0b:d6:6d:58:10:4f:4e:19:
         d6:1a:22:38:ac:ad:45:81:0f:e3:0b:46:bf:15:20:47:af:05:
         17:a6:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:53:03 2026 by rpki-client