Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a4b7336-5a5b-384e-9b03-a20e33b10df1.roa
File:                     7a4b7336-5a5b-384e-9b03-a20e33b10df1.roa (raw, json)
Hash identifier:          sX64O5as9Gw+W8DONxxCOU1ghQu+GGyGyY7vn92VUFE=
Subject key identifier:   28:57:A1:87:F2:60:64:4F:5B:5D:68:C1:50:6F:FA:AB:B1:28:DF:8C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EEA878C87E66221B5C2840360
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a4b7336-5a5b-384e-9b03-a20e33b10df1.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.27.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:8c:87:e6:62:21:b5:c2:84:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=9fd9cbb5-8ed9-4e9c-a1dc-7c8b27c07886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:5c:02:08:b8:e1:a6:23:47:b9:f5:e6:47:74:
                    ed:fd:b4:a8:0b:22:2e:af:b1:01:fb:f2:93:54:fe:
                    2b:18:ac:c9:49:73:c6:e1:10:a0:b9:65:ab:56:b5:
                    44:3b:3b:6d:ff:a6:77:dd:f1:49:bc:1c:af:df:44:
                    28:15:f3:66:04:9c:a3:66:fa:c4:d8:86:31:58:24:
                    bd:f2:bc:61:4b:b4:a6:7f:12:de:46:4e:36:9a:d5:
                    dc:18:5b:c1:7f:eb:d2:23:c2:6f:6f:b4:ce:93:c3:
                    c4:48:31:90:23:54:f1:8c:b8:fe:93:5d:6a:ef:b5:
                    86:aa:96:79:8f:37:d5:00:4b:2d:26:18:60:40:b9:
                    53:14:37:9d:71:18:97:b7:e0:d5:0f:b9:db:ec:73:
                    5d:27:94:89:b6:31:6b:92:06:d1:dc:33:ce:a5:42:
                    ac:d7:ad:83:4b:23:cf:b5:08:15:f9:f4:2a:55:a2:
                    43:87:a8:d4:96:f0:0f:ab:11:3e:dd:f5:da:f3:89:
                    1e:c7:00:cc:0b:52:58:75:c3:a1:5a:9c:34:2f:2d:
                    d5:9b:2b:93:0d:ae:31:46:a1:27:6d:a5:fc:57:33:
                    d0:a7:4d:d7:58:e3:72:cc:37:71:8e:f5:5b:c7:0a:
                    40:7e:e3:20:b2:79:f4:89:e8:97:a8:dc:f6:0a:01:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:57:A1:87:F2:60:64:4F:5B:5D:68:C1:50:6F:FA:AB:B1:28:DF:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a4b7336-5a5b-384e-9b03-a20e33b10df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b7:04:2f:67:e6:93:7f:cb:68:38:60:5b:22:5a:62:20:a8:
         64:41:00:16:ac:12:46:84:64:4c:34:de:a9:79:67:88:6f:64:
         3e:72:b3:3b:e6:32:b1:7a:e6:6e:00:f0:51:4e:e5:a2:3f:3b:
         be:c8:48:8d:2c:13:4e:6f:41:b9:db:19:35:83:7d:63:b8:fe:
         a0:3e:b7:d9:88:69:95:d8:12:13:f1:73:a4:d2:28:c3:af:80:
         65:23:53:47:4b:e9:16:99:2a:36:a0:39:99:e6:75:d2:78:3e:
         34:f4:38:74:58:db:86:f1:4f:8d:a2:1e:00:16:18:55:c6:7c:
         06:1b:27:d3:0d:c6:7b:80:25:06:42:78:94:3c:40:55:42:cb:
         6c:ce:25:0c:c8:36:41:14:02:12:e9:16:2c:e1:1a:57:9b:8e:
         20:4f:d6:e5:70:a7:8b:c6:3c:30:d8:68:1c:be:89:59:c9:95:
         05:c2:e7:a4:e9:3d:c4:e1:6e:e4:a4:78:ab:c3:90:4b:eb:29:
         77:21:ad:da:87:bf:9e:5d:c3:b4:9b:19:5a:37:19:c8:af:6b:
         22:80:1c:84:d7:24:20:1c:62:36:b9:df:f3:26:4b:bb:af:6e:
         ea:ac:ce:cc:4a:88:cf:7b:79:40:ce:0d:be:af:60:b3:75:ef:
         35:1e:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:24:10 2026 by rpki-client