Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b251d4ac-b786-3f82-afd6-3921663fe46b.roa
File:                     b251d4ac-b786-3f82-afd6-3921663fe46b.roa (raw, json)
Hash identifier:          VS8DflDl+3/zNXgJKqKyJcnvpoGBa08xDBO2QBZqXOI=
Subject key identifier:   DD:94:7F:58:9C:60:62:5A:74:2A:54:27:36:F3:4E:02:CD:66:8F:C1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49748C13C4A3C5F5C4CBB100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b251d4ac-b786-3f82-afd6-3921663fe46b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.22.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:8c:13:c4:a3:c5:f5:c4:cb:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c2b7bd64-45fc-4175-9d8f-a77e112438a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:38:ce:0e:6b:cd:ec:d0:5e:a2:00:53:94:
                    7d:90:76:a8:c9:55:d9:85:94:3b:a5:36:a4:65:58:
                    cb:37:e6:4c:e8:31:dd:8e:3d:f1:3e:22:a4:9a:cb:
                    cf:02:68:92:5d:da:1c:b3:e8:4b:df:99:7f:42:37:
                    52:2d:69:c6:ec:b4:f4:2f:19:38:0c:f2:07:4d:73:
                    d7:99:bd:c5:73:4b:79:0b:5b:ea:6f:af:33:7d:25:
                    0d:76:b6:7a:82:43:d5:ee:75:6a:e5:77:3c:60:53:
                    b0:84:a2:1b:41:2b:67:49:dc:f0:bb:25:a6:af:b3:
                    8b:6f:93:2c:f8:bb:09:43:c5:ff:81:0e:7b:20:03:
                    3e:09:f4:99:fe:4d:d1:6a:37:61:c8:2e:83:b7:8e:
                    94:65:a2:82:1c:59:ed:f0:74:c1:81:88:9b:8a:6d:
                    06:9f:31:c6:36:f7:ea:69:e3:76:06:1a:de:2b:14:
                    87:d2:41:02:ce:20:c1:4c:54:b0:0d:de:54:40:75:
                    a6:e7:55:1a:21:d5:2d:5f:38:60:f1:64:27:b9:ab:
                    6f:74:a5:02:a4:bc:fc:d9:95:b2:c4:3c:c6:ba:34:
                    d8:1f:be:ea:3f:e7:1d:03:b6:39:12:13:09:55:88:
                    37:32:1a:30:a9:74:10:d0:aa:78:d8:c9:1f:76:1f:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:94:7F:58:9C:60:62:5A:74:2A:54:27:36:F3:4E:02:CD:66:8F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b251d4ac-b786-3f82-afd6-3921663fe46b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:78:11:83:b4:6f:13:8b:d7:06:22:22:32:28:c7:b1:43:30:
         34:0a:ae:ef:79:c9:ec:dd:b2:7b:9e:48:f4:a8:2b:bf:5d:3e:
         3f:29:6a:56:c0:8d:28:55:86:31:fc:36:e0:a8:12:67:28:09:
         d5:30:f8:c5:45:c5:a8:6e:36:e0:68:f0:52:25:f6:27:7d:4c:
         be:f7:4e:33:0c:10:ce:9b:dd:a9:30:b9:ad:c9:cf:26:3f:88:
         ec:a3:d1:85:48:e9:e6:b3:bd:dd:cb:f0:b8:2b:70:32:a2:df:
         cb:df:64:1c:f6:d5:88:24:b5:13:6d:21:6d:ab:9f:7c:53:c5:
         be:94:0f:05:e2:26:47:9f:03:7d:83:a7:b6:6f:6a:45:5f:f6:
         46:88:8a:b1:15:32:f4:ee:4a:29:32:89:36:89:03:7d:6f:78:
         76:f5:48:ce:6d:97:be:fc:1a:f2:25:ea:ef:cd:71:23:68:78:
         4f:01:9c:27:2e:08:12:15:a8:ac:8c:34:0f:5e:6d:23:09:96:
         59:3f:37:b3:2f:ee:32:69:03:60:7c:9b:f4:24:a8:46:a5:18:
         55:0b:54:a6:bd:98:15:9f:e6:ca:2f:c3:cc:34:e0:20:4c:1b:
         86:a3:28:44:81:c3:8e:15:71:95:fa:fb:bc:64:dd:df:e7:b3:
         1e:f1:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:17:32 2026 by rpki-client