Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eecfd21c-0029-31a1-bcb3-636afdb2de19.roa
File:                     eecfd21c-0029-31a1-bcb3-636afdb2de19.roa (raw, json)
Hash identifier:          bEg49XtDx9n0esBOXr5z4uwL2m3rW/eO6TKPZV9dAZA=
Subject key identifier:   DB:0E:C5:3F:B3:EC:61:62:44:4C:E8:14:A3:1D:0E:E3:C9:79:8C:D1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49749CC5AF9053F3F160B2D0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eecfd21c-0029-31a1-bcb3-636afdb2de19.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.27.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:9c:c5:af:90:53:f3:f1:60:b2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0c2d7171-7993-49f2-8573-d37e4354e329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:3b:85:b3:57:30:45:79:36:e6:cb:94:cd:
                    69:6b:79:3a:fa:7d:b7:8f:e4:36:7c:0f:9c:44:98:
                    ff:56:08:d0:d1:d4:d2:a8:79:41:5b:6e:af:70:64:
                    9b:e9:49:d1:99:b5:b7:c5:9f:02:b5:57:77:1d:ab:
                    c7:ac:af:3f:19:86:54:da:94:38:4e:ee:24:ba:48:
                    5b:cc:a6:03:cf:5c:f1:32:55:92:ce:44:0f:df:3e:
                    9c:af:f9:15:10:16:90:76:1e:27:52:20:64:9e:c2:
                    30:98:5d:4c:a8:f2:2f:8a:0d:b2:40:21:f8:a2:da:
                    fd:23:66:2f:0f:78:48:7a:13:bd:8a:55:0b:79:9a:
                    ce:51:6b:44:2d:d8:5d:c3:fc:36:4b:30:e2:f5:31:
                    94:15:67:57:b8:13:37:38:be:10:67:04:fa:1f:f0:
                    b8:9b:eb:34:c9:e5:52:27:81:98:0c:21:ce:74:29:
                    13:e2:a5:01:0a:9c:54:9b:23:68:6a:30:24:6f:a5:
                    e4:cc:ee:2a:6f:62:d9:b5:6f:73:39:32:3c:60:bd:
                    55:5b:cc:b6:9d:56:cb:05:00:a2:e8:05:21:2a:96:
                    dd:f3:66:8b:fe:d8:8a:b3:9b:fa:3a:01:d0:54:52:
                    7f:94:77:69:f3:c6:cc:b5:34:b3:05:1d:e6:53:84:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0E:C5:3F:B3:EC:61:62:44:4C:E8:14:A3:1D:0E:E3:C9:79:8C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eecfd21c-0029-31a1-bcb3-636afdb2de19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1a:17:7b:00:24:b5:f4:e1:57:84:12:70:3d:b9:f6:23:a7:
         d8:26:7c:97:76:4b:79:8d:c4:ee:03:35:e5:d5:25:54:1b:52:
         83:66:25:91:3e:02:ad:22:78:79:1a:7b:04:df:7e:79:15:51:
         b7:a9:87:ea:e0:5f:b9:ab:db:ec:cf:54:41:32:cf:ec:ed:7d:
         ce:99:2f:46:49:32:af:e2:37:f0:cc:90:cc:5f:99:0f:45:bc:
         2f:39:ac:a9:a5:cb:f0:6e:72:e0:a6:98:50:bc:b3:61:f3:2d:
         fa:25:df:ff:6d:3e:ac:12:4c:2a:cd:5d:16:d8:8b:66:29:43:
         fc:d5:46:fc:f8:02:37:c4:bd:8c:76:b1:4f:e9:51:c2:ab:c6:
         41:ae:e2:53:42:88:a7:bd:ad:13:6e:4a:65:8c:6b:96:b7:78:
         c3:a0:4e:f7:f4:7c:3a:8c:fe:cd:88:ae:f0:05:d2:db:e9:7e:
         d0:c1:eb:93:e9:73:c5:6f:46:8a:45:8b:02:ba:cf:e0:48:dc:
         ee:f2:6b:6e:e7:7e:c3:9e:eb:f8:1c:ff:a6:75:4f:ff:e2:d5:
         53:ae:8e:42:1a:34:57:35:5c:58:89:28:53:20:e5:67:aa:38:
         01:80:eb:61:fd:d4:5d:c4:59:97:a2:01:2b:aa:c6:2e:3e:1f:
         77:a6:83:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:52:28 2026 by rpki-client