Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa
File:                     c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa (raw, json)
Hash identifier:          2MxYcS3sTeJSGIPEOPmOfpHgNJ062P4vfdKLqv1Ffb0=
Subject key identifier:   B2:4D:5B:A1:12:FC:5D:75:85:81:3D:2E:25:A0:75:4B:5F:FE:80:5D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4987B220C87897B1D4433680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.20.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:b2:20:c8:78:97:b1:d4:43:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=74492ff1-35d4-49f5-bec5-19ac75d7ed19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:f8:69:fe:14:19:6c:cf:5c:18:2e:d7:15:
                    92:f5:a7:26:51:9f:05:8e:af:83:de:65:a0:5d:60:
                    91:5f:d8:b3:3c:5c:0e:15:88:79:90:b8:06:d3:6d:
                    63:da:20:49:13:4f:82:b8:dc:90:a2:7a:69:fe:8c:
                    03:7a:7f:a7:67:36:b4:39:fb:a2:72:16:bf:01:a4:
                    9e:52:08:79:9b:2f:ae:4d:62:38:cd:2b:81:a0:da:
                    70:f0:9f:41:e9:bf:6f:5f:9f:62:70:6b:e2:99:2e:
                    0a:18:95:ef:b8:c4:d0:28:18:05:4e:bf:17:a1:d6:
                    69:24:db:a2:13:a3:e3:37:1f:f4:11:14:bf:7f:57:
                    78:47:f7:94:9f:87:e8:fe:42:6f:67:c1:b1:14:21:
                    30:0f:30:61:0f:72:a3:a8:d7:22:5a:37:4f:66:f4:
                    8a:49:3a:e2:8f:6d:73:41:99:53:9f:05:ba:4b:e9:
                    2a:95:bb:f5:63:65:3a:0c:8b:12:0f:34:24:f3:dc:
                    7f:b6:e2:35:f6:01:ed:ff:29:be:bc:4a:c3:0f:5c:
                    e4:80:ae:32:4e:0f:f6:05:e2:26:9e:d2:f0:af:fb:
                    b2:c1:98:fd:e1:9f:9d:6b:d5:22:3c:c1:a9:7a:40:
                    62:f3:55:a4:98:19:08:86:94:10:1a:72:e5:5f:8e:
                    32:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4D:5B:A1:12:FC:5D:75:85:81:3D:2E:25:A0:75:4B:5F:FE:80:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:aa:fe:b4:6e:96:a6:da:55:bb:a8:2b:38:65:96:fb:65:f0:
         8b:18:f4:1b:ab:9b:63:9f:1a:64:d6:7c:80:6f:f9:ec:48:6e:
         c9:fe:d7:f6:3b:f9:12:f2:24:7f:7e:b9:67:2b:7b:ef:9f:23:
         02:05:ee:55:8e:5e:c1:e0:b4:bb:f3:1a:b2:8e:cc:37:4f:16:
         80:9d:f3:c3:6e:51:f9:bb:cd:6d:1d:91:db:d3:00:e2:49:ce:
         d3:dd:94:fa:1c:23:3c:61:58:0b:3e:da:ac:4f:6a:a2:b2:28:
         45:26:f2:80:da:b7:7b:c2:11:25:36:7d:be:c2:e8:1c:4a:d9:
         de:48:7d:34:86:03:db:ab:19:d2:e7:7e:e3:88:13:7d:12:f9:
         f0:9e:74:d9:c4:3d:f4:a9:35:d4:de:cd:7f:b4:21:b9:88:07:
         c6:5d:10:3a:de:2b:13:08:ea:b5:ce:37:ac:a3:df:eb:e4:a6:
         ec:f4:52:76:a9:80:60:03:85:44:fb:0e:a9:d0:84:2d:2a:de:
         bd:d0:d2:fd:96:17:0a:e0:eb:43:84:8b:ae:06:ea:e2:cc:e7:
         a9:f0:4b:cd:57:93:e6:48:60:6c:bd:9b:2d:fb:f0:92:9b:aa:
         6f:35:bb:47:ce:70:48:16:47:a4:3a:61:9b:da:50:3e:9d:19:
         d7:3a:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:43:05 2026 by rpki-client