Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed5dd44d-def3-3333-9865-b16d90dea1ac.roa
File:                     ed5dd44d-def3-3333-9865-b16d90dea1ac.roa (raw, json)
Hash identifier:          uYhXK83CN5lfA3WHBPL0+hDb1Z9zGDLRDUvXfREdRow=
Subject key identifier:   2B:55:04:CC:61:D8:CF:51:32:26:40:A1:8B:C0:A5:93:BD:E3:CB:D2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49737F4EB44EBE8550B16F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed5dd44d-def3-3333-9865-b16d90dea1ac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.17.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:7f:4e:b4:4e:be:85:50:b1:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=91606bc5-2d09-476c-baea-0687faf8844c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:85:fa:e1:be:15:01:e9:16:4e:1b:7e:30:09:
                    53:09:5a:5d:ad:00:19:6c:3a:33:62:b2:a4:94:cb:
                    f1:9e:0d:d9:83:63:80:94:94:cc:8c:79:eb:70:45:
                    19:16:68:9a:dd:f7:d2:25:7f:cc:ac:74:c4:65:fc:
                    e1:4b:66:0a:23:10:2b:14:55:52:70:a7:ac:5b:88:
                    4f:c2:d5:d2:4e:91:aa:be:a8:7f:1f:78:2e:2c:19:
                    2a:f5:6b:78:43:7d:52:9f:04:70:88:7b:fe:00:b0:
                    c0:88:94:5d:23:a2:3c:d6:3a:93:0d:df:df:50:34:
                    a6:fb:37:13:c0:26:12:cd:9c:a3:2f:37:d6:e4:1f:
                    9f:52:e9:ab:0d:62:d5:75:93:80:a3:83:7a:82:8e:
                    e1:48:fb:61:1d:50:c9:ba:4b:dd:7d:df:1e:65:9c:
                    b4:d2:99:38:a4:c9:79:58:48:4d:a3:e2:51:cf:fc:
                    16:a3:0e:f8:bc:a7:cb:c7:ea:5e:b2:d8:83:d2:ae:
                    7b:31:e5:62:4d:3f:69:af:b9:2d:de:d0:b7:bc:83:
                    f8:8d:cc:a3:68:59:37:55:41:79:33:e4:e5:dc:ef:
                    37:22:21:06:e6:b0:6b:1a:94:b1:00:dd:c9:18:25:
                    28:fe:cb:c1:cc:40:a4:42:fa:ed:08:ff:71:dd:db:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:55:04:CC:61:D8:CF:51:32:26:40:A1:8B:C0:A5:93:BD:E3:CB:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed5dd44d-def3-3333-9865-b16d90dea1ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:11:cc:e9:b6:6b:8c:0b:f0:36:07:e6:b8:82:45:f8:8b:83:
         4f:56:ea:19:f5:6b:0e:62:55:41:57:ea:d7:b5:48:35:ac:67:
         e1:29:6e:6a:6a:49:b2:26:b8:94:08:b2:50:c8:cd:74:00:43:
         31:e1:2e:2b:6f:f8:e1:cc:cb:d0:b9:00:77:34:f2:ab:cf:79:
         17:9b:15:76:21:e6:8c:36:7b:a0:d4:44:16:44:fc:aa:3f:76:
         e2:3c:8b:2d:b7:03:2b:ce:30:49:6c:0e:e6:ae:6f:e1:1e:ae:
         f6:05:9b:b1:a8:00:53:0f:c1:38:9a:5f:4b:69:1a:2d:38:06:
         42:7f:16:6c:6f:4c:ff:6d:dd:04:ba:a4:7f:59:6e:87:59:f6:
         ed:32:85:c9:25:83:55:37:24:48:b2:d3:bd:22:c0:dc:4d:04:
         75:0e:c6:82:a0:37:73:0e:6f:33:1b:a8:27:bd:7e:8d:85:50:
         24:fe:c0:3a:67:98:4f:f5:ab:12:a7:00:72:eb:c4:dc:ea:46:
         63:b0:8e:bf:72:1a:c0:49:7f:22:75:15:21:f3:f3:a0:72:fa:
         0f:dc:75:82:b2:32:be:dc:8a:5a:5d:33:94:4b:c7:b1:40:ef:
         53:f3:1f:6c:c7:d3:a0:25:69:74:d1:39:87:41:c4:23:0c:a6:
         b2:c2:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:28:28 2026 by rpki-client