Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee5f559d-1280-386f-8e65-733105b181e5.roa
File:                     ee5f559d-1280-386f-8e65-733105b181e5.roa (raw, json)
Hash identifier:          Dnfi3GxqyS5pFlmwkxGAsDGqaGaAe3muINBDr9WZjaM=
Subject key identifier:   4B:ED:3F:71:3F:C8:A8:90:39:5A:AD:FA:89:67:49:05:4B:B7:2A:35
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49879FEBCC1F3EB547C6EF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee5f559d-1280-386f-8e65-733105b181e5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.28.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:9f:eb:cc:1f:3e:b5:47:c6:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7e9a8bde-4fd6-436e-ae6f-71fa310a2ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:ed:51:6a:01:bf:25:28:7d:b2:6b:10:e5:
                    f1:90:85:88:3c:91:4d:2b:90:27:05:61:82:05:9d:
                    10:73:58:d1:40:41:10:02:c7:b7:a4:97:ed:e7:07:
                    26:9c:5f:16:26:e3:d7:79:a6:74:8c:a3:b2:bc:43:
                    45:32:4f:c5:8a:30:c0:b6:04:ad:c1:08:21:eb:ed:
                    aa:d4:76:e5:20:d1:6c:31:d9:dc:b3:0e:70:b8:33:
                    8e:38:f9:00:41:9b:6a:7b:4a:15:88:cf:8b:de:f4:
                    7b:f4:67:57:74:b6:67:01:79:43:08:53:1a:1f:a3:
                    26:2c:31:bd:e1:86:cf:60:58:a0:6e:47:50:a6:b8:
                    07:51:ed:86:27:ac:9a:ab:47:11:26:bd:f2:a6:92:
                    7e:45:4a:e0:18:0a:f6:00:c2:d3:3f:b4:b5:a5:d6:
                    9a:a7:03:69:09:1c:5e:ee:41:a8:ce:b1:40:bc:33:
                    a2:f0:95:d9:f4:c1:09:28:d6:7b:39:d5:f1:a2:72:
                    38:3d:3b:35:eb:5d:60:02:f3:d6:b8:f1:79:30:81:
                    40:a4:19:32:8f:dd:92:5d:8e:37:73:02:44:de:7a:
                    9e:de:57:1c:d4:89:22:27:e2:11:7c:08:39:23:81:
                    02:b1:55:ca:87:a8:6d:c2:90:93:85:52:af:3d:09:
                    49:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:ED:3F:71:3F:C8:A8:90:39:5A:AD:FA:89:67:49:05:4B:B7:2A:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee5f559d-1280-386f-8e65-733105b181e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f5:7b:5e:9f:65:73:18:7b:2f:40:cf:6d:24:a8:ad:fc:84:
         8c:6c:37:8d:db:57:67:d0:81:15:b0:65:34:1b:17:19:16:91:
         38:35:a5:5a:53:fc:38:c0:73:11:80:14:c8:0b:cd:7f:45:45:
         32:1b:b7:0a:70:41:51:d5:26:81:cd:11:c4:76:8a:b5:94:49:
         b5:a1:94:ea:7e:a7:4a:9c:1f:a7:61:f6:e7:5d:38:47:94:b0:
         94:dd:fb:b0:56:fd:49:97:d0:a7:2f:bc:a2:25:07:6d:4c:97:
         f9:b7:c1:09:1a:fc:66:08:89:9b:3e:61:a8:1f:d6:ba:56:fd:
         bd:dd:df:fe:95:96:f5:53:c7:fd:fb:96:30:53:62:54:f2:df:
         a0:39:b9:6b:f8:06:17:2d:29:2e:9e:3e:ac:a8:b7:67:3c:4e:
         e7:9b:fc:39:1d:00:b0:d0:b5:6e:74:1a:42:e2:f6:12:7b:52:
         5f:33:19:ea:ca:2f:40:48:c9:e2:47:3f:3e:21:08:37:83:df:
         f8:b1:61:73:c4:80:94:cd:9f:37:24:0c:2f:eb:09:5d:ec:89:
         ad:f7:39:1e:1b:16:2b:f3:88:0a:35:32:e1:49:51:59:0e:69:
         a0:3a:69:41:fd:fc:ce:51:71:4b:fe:db:b6:36:f0:fb:b5:f3:
         dc:99:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:36:43 2026 by rpki-client