Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8d50755-7191-3520-9fce-80e97267bd5c.roa
File:                     e8d50755-7191-3520-9fce-80e97267bd5c.roa (raw, json)
Hash identifier:          sWAij/lByRCcYpFb1u5NBVq+z+l8vHn7Qir+AO1yK8c=
Subject key identifier:   38:9C:59:B9:EF:0E:A7:FB:73:0B:32:27:91:E7:84:EC:5C:C6:A9:03
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49737226992774900D3581A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8d50755-7191-3520-9fce-80e97267bd5c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.29.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:72:26:99:27:74:90:0d:35:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f05137a5-d454-4981-9ee0-e34ab500b802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:9d:a5:3a:da:1a:ca:bb:0d:c5:66:dc:7f:
                    31:0a:21:71:dd:17:76:ba:36:16:06:83:3e:ab:b5:
                    63:3f:87:ee:56:bd:a1:ad:9f:ee:ea:25:6a:20:dd:
                    9e:77:cc:de:1c:f9:57:ae:8b:78:57:53:c3:6e:c9:
                    8a:1b:b5:00:76:6b:d9:97:4a:63:41:1c:5b:51:45:
                    a5:95:35:eb:f9:86:64:d4:91:87:15:77:40:f4:d4:
                    57:fe:a0:98:b6:79:cd:9d:bd:23:26:80:a7:20:96:
                    c0:91:bf:0f:fb:23:cc:19:65:54:8c:a7:85:4b:83:
                    80:71:f1:2d:9f:9b:61:44:dd:0e:14:8a:fb:8e:63:
                    5c:12:30:9c:d1:84:51:33:99:8e:14:b2:8f:c5:52:
                    49:dc:ae:05:ef:d5:bf:74:7d:21:0f:7c:fc:f3:ec:
                    b3:f3:fb:c2:2c:9d:bf:e8:2d:9e:b5:0b:20:e8:82:
                    cc:45:08:6c:65:e1:18:16:c7:9c:0b:2b:36:a8:00:
                    21:68:8c:7c:59:5f:1e:d9:e0:93:33:14:b0:23:c5:
                    88:73:20:28:6e:0f:1d:3b:ce:57:fc:6a:1b:78:ff:
                    84:c5:4c:79:5b:35:08:eb:41:16:94:d1:8e:3f:ad:
                    f6:0a:c9:22:d9:df:70:ca:19:2d:53:9b:35:8a:41:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9C:59:B9:EF:0E:A7:FB:73:0B:32:27:91:E7:84:EC:5C:C6:A9:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8d50755-7191-3520-9fce-80e97267bd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:4b:44:c2:83:30:1e:9e:c1:6f:be:fe:f0:c1:3f:35:01:
         93:b5:84:23:29:8e:9c:5f:c3:e9:64:89:75:59:1a:05:8a:cf:
         6a:7e:2c:43:5d:c4:33:4e:38:9c:48:ac:da:ed:d3:81:31:a9:
         30:d5:06:22:1a:77:23:64:93:60:2c:7b:e2:87:d9:bd:03:4a:
         41:f8:39:d2:f0:fd:ba:e3:a5:3a:fb:23:04:93:55:9f:d9:c9:
         7a:b5:5e:b3:a5:a6:97:41:43:1d:90:4d:6a:78:49:3d:a7:89:
         99:45:85:43:e1:7f:31:f6:d5:d9:7d:8f:8b:f2:e0:cd:67:36:
         e4:bd:54:f8:e7:f1:9e:75:72:3b:54:0b:ac:1e:b1:e3:2e:b1:
         93:27:af:28:9e:a4:fe:11:0e:11:64:d4:56:24:7d:16:20:7f:
         d7:3a:a5:54:65:a8:91:30:2f:3e:0f:8e:85:5f:24:89:ae:69:
         ec:fe:df:d8:0a:68:a6:c4:c5:19:9a:f1:ce:dc:86:b7:a3:f9:
         62:01:bd:db:00:00:19:13:31:b3:6d:fb:40:fb:d2:34:b9:e6:
         52:c4:bb:0c:49:84:c1:e4:f7:a3:27:cf:a7:69:73:c8:0f:8c:
         cc:30:09:24:48:ba:23:ca:40:18:20:b6:e2:d3:46:35:e8:12:
         4e:20:67:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:29:58 2026 by rpki-client