Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d92ba3df-f699-3156-8a5f-da4cd15ec796.roa
File:                     d92ba3df-f699-3156-8a5f-da4cd15ec796.roa (raw, json)
Hash identifier:          A/bn82CU/cEJpJZbqfATnYV1ZntD6z+fDdZk37JWjII=
Subject key identifier:   B9:A4:6D:28:F7:D9:E3:16:21:9F:43:1E:5F:C1:E4:63:5A:BC:9F:C3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498BCA96689ABE12921AD000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d92ba3df-f699-3156-8a5f-da4cd15ec796.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.17.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:ca:96:68:9a:be:12:92:1a:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3d48e204-d48c-4cbb-bbd8-33c9d8d0240e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:45:72:7d:8d:99:72:12:b4:c0:22:41:e2:
                    f8:1f:24:92:60:23:02:52:6b:38:ac:59:fd:cc:4b:
                    94:e6:5b:bd:0c:4a:1e:38:70:62:27:67:7b:00:9d:
                    99:0c:39:e4:c4:2d:15:28:bc:f2:0c:32:d1:99:66:
                    23:06:53:d0:09:07:7e:37:8b:88:cd:40:c4:cd:b8:
                    6b:34:23:dc:bf:11:56:47:2f:02:09:32:d1:74:54:
                    37:87:8e:79:a1:11:3f:5b:94:55:8d:96:18:61:c7:
                    e0:f7:30:d0:24:c2:68:d6:99:f6:ca:12:44:f2:f6:
                    2a:37:aa:a4:01:49:f3:39:62:99:66:05:c3:e4:aa:
                    69:b4:b2:01:ab:71:9c:9b:40:f8:a9:55:4a:f1:bc:
                    1e:c0:f7:55:28:cd:af:cd:7c:5e:ae:b4:5d:03:75:
                    b9:57:41:58:6b:98:aa:23:67:de:4f:18:23:88:0e:
                    af:37:ca:fd:0b:01:14:09:6e:1a:33:c9:79:70:da:
                    5b:f3:39:35:cb:0b:40:14:02:d4:fd:d7:09:bd:55:
                    66:0f:7d:91:c2:20:d2:fd:2a:57:a8:fb:58:a1:64:
                    a6:49:1f:d7:b0:a0:ab:32:13:10:c2:82:14:51:ac:
                    76:b8:63:02:f8:bb:13:8c:72:cc:fb:33:09:a5:2b:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A4:6D:28:F7:D9:E3:16:21:9F:43:1E:5F:C1:E4:63:5A:BC:9F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d92ba3df-f699-3156-8a5f-da4cd15ec796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:74:7d:7b:a2:43:18:6e:1d:73:3b:86:e4:65:bb:4f:50:f0:
         8c:8c:54:ce:b2:b6:2c:34:ef:10:61:00:14:93:8a:3e:d2:3a:
         7c:dc:cb:f3:20:c8:ef:d4:63:f6:64:d1:7f:29:21:0d:13:a2:
         26:21:71:73:fc:a3:06:00:31:98:c4:c6:92:ca:08:d6:bb:39:
         87:a9:2a:50:c9:18:c5:bb:c3:28:76:7e:90:a1:85:43:b3:ca:
         30:19:f9:e3:b8:cd:8d:e6:ac:36:a2:5a:49:0b:a6:ec:9f:4f:
         ef:c7:3f:ad:7f:83:3a:f1:cd:98:f0:05:bc:f5:c8:62:6e:c2:
         1c:e1:ce:cd:8f:d6:80:39:fe:1a:28:6b:30:b4:ea:6b:b9:ae:
         d0:88:7c:5c:3e:80:a2:40:73:20:76:d9:79:04:55:41:c0:35:
         7d:ff:58:05:0b:52:bd:4c:41:a9:59:03:e0:00:59:fe:7d:5a:
         28:47:a8:d4:2f:88:88:2f:09:53:da:f1:6b:c4:ba:77:5a:fc:
         ee:fc:f7:c7:3b:5c:90:d3:bc:2a:4c:32:0a:6f:f3:66:aa:06:
         f8:74:5d:66:fb:8c:ed:45:5d:f5:35:4c:58:a0:e1:f7:0b:56:
         1d:fb:4e:97:66:8d:0c:3f:a8:9c:3d:a6:84:54:8b:ec:ed:97:
         f1:61:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:30:04 2026 by rpki-client