Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f4599d-f96a-34b4-963d-0cd3d90e1ec4.roa
File:                     84f4599d-f96a-34b4-963d-0cd3d90e1ec4.roa (raw, json)
Hash identifier:          FHAkBfRMb0NbEc6EiPj5qOyD3n+epVv4EdPndOAPoNQ=
Subject key identifier:   50:FA:7C:6A:0B:59:93:96:E5:5E:30:41:D6:83:BD:40:32:FE:92:59
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7974E32E343F090B1140700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f4599d-f96a-34b4-963d-0cd3d90e1ec4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        173.28.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:4e:32:e3:43:f0:90:b1:14:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=753cba92-e7f4-425f-accf-1b221036bcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:b2:a9:49:cd:42:ac:ab:91:5f:d5:c2:56:
                    e8:36:73:b9:cc:92:55:f5:6b:59:3b:62:f6:77:ab:
                    ff:40:88:77:da:98:63:9a:4e:d5:1c:29:e5:10:4e:
                    63:6f:dd:11:a3:db:ba:db:71:a0:00:57:a3:b1:9e:
                    7b:83:e9:a4:28:c1:2f:99:44:45:66:37:b5:ac:be:
                    af:3b:90:c5:c9:cc:03:a8:28:8b:42:bf:7f:6f:9f:
                    32:e2:4a:24:ee:f2:c2:1f:a2:da:45:04:aa:20:b5:
                    f2:04:e3:3b:22:cf:3a:40:54:24:7c:07:10:b4:99:
                    9b:be:27:70:38:83:48:a3:82:f3:c8:42:4d:24:82:
                    87:30:dd:fd:a4:2e:c3:81:5b:9a:b8:00:ef:7b:ae:
                    bf:2a:8a:e8:3c:99:67:7c:10:52:e3:98:89:ec:82:
                    48:48:d8:0b:39:c1:c9:4f:45:9d:e9:ae:fc:8b:be:
                    6b:66:05:9d:5a:c9:b5:ce:fc:16:a9:d1:e5:e6:fe:
                    3c:57:cf:8a:c5:84:61:90:af:72:4c:31:47:94:46:
                    5a:ea:eb:be:ca:b9:bb:87:9c:8d:bb:3d:e4:9a:73:
                    7f:4e:18:f5:f7:3a:91:6f:17:b0:99:78:71:a7:87:
                    9e:cc:4c:32:f1:dc:83:cd:d5:c4:63:4c:3f:d2:93:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FA:7C:6A:0B:59:93:96:E5:5E:30:41:D6:83:BD:40:32:FE:92:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f4599d-f96a-34b4-963d-0cd3d90e1ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f3:9d:2b:bd:73:bd:a8:cc:06:29:f8:87:2a:52:1f:b9:c6:
         d1:da:00:a8:c9:36:59:4f:1b:a8:37:73:29:51:4d:1d:88:dc:
         f3:0e:27:b9:12:1a:7e:ba:05:4c:9c:f0:f8:98:a7:81:58:81:
         a7:a6:ea:cb:21:46:59:48:60:e9:2e:5a:36:76:1f:82:33:f0:
         d1:d5:36:99:6d:06:63:7a:66:a1:91:3a:bf:9a:bc:78:31:3a:
         4e:bd:ec:9a:ce:13:7d:4b:cc:14:cc:64:c2:9d:9e:ef:64:7a:
         55:bd:91:f8:dc:fa:54:a5:09:d8:cc:d4:c3:7c:52:1e:03:a9:
         72:6b:10:e8:df:f4:28:cd:4e:56:4c:07:e1:b7:5b:3f:30:47:
         89:d8:bb:68:6e:a7:0b:5b:2c:31:29:dc:30:87:3a:d4:f8:d4:
         ff:b9:ed:cc:54:c2:bd:c8:f4:49:49:d3:a0:57:53:4a:98:08:
         f5:aa:f4:88:84:4a:e4:12:f3:92:e2:3c:19:5c:94:52:cb:b4:
         d8:ce:9b:75:49:c2:f0:69:7d:04:07:68:07:7d:42:bf:bd:86:
         a8:e7:2f:2e:b9:32:d7:f5:fb:de:d5:52:19:a8:ea:a1:81:3a:
         06:dc:fe:d4:67:12:6d:65:fd:44:ba:8d:97:dc:80:53:e8:d9:
         f1:c5:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:53:35 2026 by rpki-client