Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ded530dc-de02-316c-a3a3-70c7d346fe7f.roa
File:                     ded530dc-de02-316c-a3a3-70c7d346fe7f.roa (raw, json)
Hash identifier:          aEkqy4Fej7oJ4dr2EGpmGx92v3Sjx3Z3jr/4sDUZC1w=
Subject key identifier:   0E:BD:0D:3F:0B:12:8A:C2:71:45:11:7E:E6:75:31:14:6E:82:09:C3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4972F96C596295C6D4D7AE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ded530dc-de02-316c-a3a3-70c7d346fe7f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.19.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:f9:6c:59:62:95:c6:d4:d7:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=81aceef1-15dc-4f64-afce-68f8b3221550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:f3:1d:51:4c:66:59:2b:49:40:23:7f:f9:
                    6b:b4:5d:48:73:7d:69:bf:38:82:0e:f3:08:07:db:
                    55:62:59:36:e4:b0:ca:80:c7:13:b1:f8:86:f4:59:
                    42:6e:66:51:62:2f:06:66:44:f8:12:5b:2a:13:97:
                    b5:7e:04:70:82:d8:b1:1e:6b:43:01:7a:cf:f7:56:
                    66:45:c6:8b:ab:36:1a:32:45:86:ab:e4:9a:e6:e8:
                    fb:99:23:c7:2e:dd:7e:c3:36:b0:cf:9f:58:ea:34:
                    eb:0f:5a:0d:ff:7d:82:80:7e:78:ba:8f:1c:54:11:
                    f5:85:64:34:85:26:60:a1:8e:28:b1:91:1d:d3:57:
                    cd:f8:df:3c:e7:9a:cc:ee:fa:58:b7:f9:98:07:e5:
                    5d:00:35:d9:65:52:f3:2c:d6:13:a7:2d:23:b3:e7:
                    1e:2a:13:03:08:96:79:8e:85:de:93:b9:4c:cf:72:
                    3d:3e:e0:3e:1b:65:89:ee:3b:48:f3:ae:0d:0d:b6:
                    01:b5:bc:86:64:10:44:0c:ed:d1:23:76:0d:1c:af:
                    ac:91:b0:87:7a:e7:32:d8:4d:23:7b:79:63:c7:35:
                    ce:e2:6c:7d:57:f7:45:3b:3b:83:e2:98:01:bb:99:
                    e3:13:ce:65:26:81:59:e7:11:86:f0:d5:15:75:5b:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BD:0D:3F:0B:12:8A:C2:71:45:11:7E:E6:75:31:14:6E:82:09:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ded530dc-de02-316c-a3a3-70c7d346fe7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f0:6d:fb:57:df:d0:36:56:31:a3:2c:15:c4:21:ee:2f:2b:
         84:ed:1e:80:43:00:bf:b7:05:d0:d4:1b:aa:13:ee:c1:37:d6:
         73:1c:1c:3b:c5:fa:18:a1:af:a6:dd:e7:e8:dc:41:1e:3c:82:
         58:c9:aa:b2:2b:86:3f:63:d6:d2:ad:77:f1:cb:e9:ed:d7:5b:
         a5:01:ab:ef:c6:e2:b9:bf:fb:02:e1:03:67:c2:7f:66:a6:c9:
         d8:d0:4e:09:06:e5:d1:81:77:80:26:ca:9d:32:cf:68:86:7c:
         20:2b:d8:7c:14:ce:e1:c9:33:17:2f:fc:ac:65:39:ca:64:7a:
         91:78:55:8e:df:33:b3:91:06:23:66:85:b1:9c:52:e2:bc:b6:
         1a:4a:d2:b7:b2:5a:1f:79:0a:7e:19:d3:25:90:dd:f4:75:4b:
         5e:f6:ee:3e:05:bb:a2:1a:74:eb:62:20:79:e8:e4:a3:ad:0f:
         9b:22:04:49:09:73:62:d7:8d:c5:2c:2c:64:63:9a:a9:43:9d:
         f1:1a:2a:ea:b3:a4:22:a2:43:5a:99:94:e7:f8:3c:74:66:82:
         8c:b7:f5:ae:6d:bb:93:2e:c6:73:95:4a:72:2b:b2:9e:04:a5:
         33:70:c8:75:9c:fd:43:7e:bb:21:bd:de:11:7d:87:a0:61:ca:
         98:c7:59:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:07:27 2026 by rpki-client