Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6825ab34-b0ba-3ac7-bec5-9a2ad55759a1.roa
File:                     6825ab34-b0ba-3ac7-bec5-9a2ad55759a1.roa (raw, json)
Hash identifier:          zdzHmu4uzW3YPlFjtFTSZ5i3f3zieuLwndEBK+HR2RM=
Subject key identifier:   C3:F8:28:E8:4E:1D:03:79:8D:46:62:AC:7A:4B:F7:77:72:90:E0:3A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4972FB4A7D083B5E6D613400
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6825ab34-b0ba-3ac7-bec5-9a2ad55759a1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401783
IP address blocks:        173.44.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:fb:4a:7d:08:3b:5e:6d:61:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e7674f2b-3f62-4158-992b-25e981953c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:ac:f7:b2:da:26:b3:fd:71:1c:6f:07:e7:
                    07:fb:f4:1c:61:93:c6:6f:26:21:e9:fd:fb:eb:21:
                    65:bb:e2:1c:0d:31:a9:14:69:7f:3a:f3:f5:6b:a3:
                    1a:0a:e0:f3:62:b5:4a:38:64:63:fa:ce:a5:8c:d4:
                    c1:7b:39:71:0b:5d:ba:36:19:a2:e3:b8:0d:c3:05:
                    ec:c1:7d:b6:b2:1f:47:4a:41:94:c1:b0:e0:55:47:
                    fa:9b:8f:9a:c8:36:d7:2c:b9:07:5a:8f:dc:bc:b6:
                    13:56:ce:96:a8:87:d9:c4:e8:2f:c9:1e:1c:70:15:
                    fa:39:4a:0c:f7:6e:28:06:c2:dd:23:f3:3d:55:94:
                    30:33:4e:3e:18:6b:09:d4:c3:c2:e3:5b:b5:6b:cf:
                    71:fb:5b:29:2f:09:ed:7d:d8:a3:5b:58:af:f4:0a:
                    88:f5:b0:b7:63:04:c9:e5:dc:d9:ee:34:59:76:e3:
                    cf:c5:1d:9a:f8:d5:be:98:f9:06:27:6f:62:d7:2d:
                    ec:43:26:ad:4c:6f:0c:a4:ec:a4:c7:f2:52:5d:43:
                    42:b9:4e:bb:4f:24:a4:0c:59:e5:d1:0a:d0:af:cd:
                    0c:13:b4:c7:11:1d:15:a4:09:a4:a5:74:73:23:32:
                    28:e4:37:b6:5f:bc:12:1f:c5:28:4c:d3:ff:c9:06:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F8:28:E8:4E:1D:03:79:8D:46:62:AC:7A:4B:F7:77:72:90:E0:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6825ab34-b0ba-3ac7-bec5-9a2ad55759a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:90:0f:85:fa:1f:e6:f2:ef:fa:a8:9a:f3:f7:2f:d1:03:9c:
         5c:6f:a4:10:77:1c:8b:94:7f:1f:ae:33:88:32:d1:3e:94:a9:
         eb:17:28:f3:f9:d0:a2:d5:fa:a8:51:56:87:cd:be:f6:d5:1a:
         6b:f2:4b:dc:75:4f:ad:11:f8:5d:c1:a3:fd:0a:b6:d9:79:cc:
         b1:b6:d9:a8:be:7b:3d:c6:9e:e5:ea:21:c4:dd:fa:93:4b:32:
         15:29:b0:7e:e3:c8:7e:c5:71:06:c0:7f:71:56:36:bf:cc:1a:
         10:92:1d:48:0d:c5:c8:c2:43:3b:27:15:e8:78:0e:1f:53:46:
         46:63:53:4d:9b:ed:a9:06:79:2d:59:49:10:56:bc:46:e2:ef:
         b0:f4:aa:6d:e7:00:87:12:29:a5:c4:78:65:6d:99:2f:8f:69:
         f4:0f:93:e2:ac:9b:1b:c9:2e:a2:19:d8:cb:fe:d5:ee:65:de:
         59:eb:73:74:3a:d4:66:7f:bd:75:31:07:65:b9:60:67:7b:92:
         ef:4d:aa:24:98:ec:fb:97:45:57:ff:23:00:e9:d4:2d:e0:2f:
         99:5c:0f:05:41:5e:d6:a4:dc:3b:b3:c6:e8:2b:55:12:ed:89:
         a4:77:05:51:f3:e2:f9:11:2a:b7:0e:ec:27:1a:09:27:a4:6c:
         f3:86:e3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:42:27 2026 by rpki-client