Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa
File:                     e1286f83-b066-3ef9-aa8b-3557d8930371.roa (raw, json)
Hash identifier:          3EsP/l1PXD1PN2O9CZoKhtc+7oe6honaz+jsEJhEZss=
Subject key identifier:   55:AA:5D:25:F5:6D:3C:84:68:DE:AE:7F:26:6D:F1:D7:FB:FE:A5:8B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3DE8F4EE054AFC35D1A180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        173.21.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:e8:f4:ee:05:4a:fc:35:d1:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=5718ca64-72de-4e53-9247-07e23644e704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:0b:61:ff:a3:85:b8:ff:75:91:ee:88:41:
                    9a:1f:b1:94:66:5f:0a:d2:4d:4c:41:39:3e:14:a1:
                    67:c0:74:9f:fd:85:df:45:7d:e1:94:b9:d2:0e:4b:
                    76:69:37:d9:7a:e9:2c:c6:49:f4:bf:4a:1c:7b:ba:
                    cc:65:79:af:8d:40:74:4b:d4:77:83:df:2b:7c:64:
                    ac:d3:d8:eb:de:91:15:07:48:d5:36:a5:27:b6:cb:
                    c6:19:a7:d5:63:3f:a4:e7:85:62:eb:9b:c9:ca:8a:
                    61:50:fb:9c:1c:69:ff:23:66:5e:73:f2:66:0e:ae:
                    58:8f:2f:2a:04:84:23:8a:fe:06:9b:23:42:c0:25:
                    07:3a:c1:d8:ae:29:c2:8f:8e:b9:2f:1f:a5:13:9b:
                    87:d9:1e:2d:7a:b3:4d:89:0d:49:25:a5:f5:b8:2f:
                    62:3c:15:fd:f4:18:4a:ba:c6:d7:2a:92:9a:be:c2:
                    6a:49:38:ad:69:68:84:41:29:de:3d:9d:6f:d7:1a:
                    a3:7b:90:24:d8:46:c8:63:cb:76:87:66:1b:f6:a3:
                    dd:28:5b:af:eb:94:7f:e5:2d:ca:ad:e7:01:98:44:
                    ed:7a:72:53:4a:a2:5f:84:da:78:e8:1b:b3:82:eb:
                    ba:3e:60:5a:a6:43:97:89:38:5b:04:73:71:b2:81:
                    c0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AA:5D:25:F5:6D:3C:84:68:DE:AE:7F:26:6D:F1:D7:FB:FE:A5:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:11:a8:29:ca:b8:f5:30:1e:6b:2e:ce:c3:6b:3b:a2:22:
         0d:16:4d:b6:a3:a4:78:36:1f:cf:d7:e2:b5:af:43:ba:39:69:
         d0:5f:6b:8d:7e:4d:51:b2:01:e1:6b:0d:dd:9d:e0:84:03:39:
         d4:b0:79:74:1c:cb:a4:cf:a5:fc:d8:e8:fc:e8:23:10:e8:30:
         db:80:91:31:52:06:d8:8a:82:e8:9d:f5:25:6e:14:99:aa:e9:
         85:b6:ea:16:c6:12:e0:e6:c2:70:80:65:c2:c8:74:0c:8f:ea:
         12:d1:1e:50:f7:df:9f:1b:98:1a:5a:53:2a:c4:f2:ad:21:fa:
         0d:96:e8:79:70:c1:a9:63:a1:83:90:4d:49:dd:4b:c9:25:ea:
         04:59:cd:f4:4d:27:3a:3c:b0:11:db:87:60:10:9a:a2:7c:8f:
         37:82:2c:37:6d:cb:40:3a:59:a1:f6:7a:04:e7:9f:d8:21:06:
         c6:36:19:70:5d:e1:ff:a4:1f:98:b9:62:11:ec:25:80:15:f8:
         54:c7:9d:e6:ef:d8:72:0a:fd:ed:d5:ab:a3:d2:6b:11:5b:c2:
         1f:ba:b8:f0:b3:21:d5:00:ed:69:2b:0e:ac:3b:c0:aa:42:be:
         f3:49:f1:cb:7b:f9:df:ee:89:75:eb:e6:1b:08:78:2a:a3:34:
         18:88:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:53:42 2026 by rpki-client