Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21c34b0-a72b-3c22-a864-16887548d10e.roa
File:                     e21c34b0-a72b-3c22-a864-16887548d10e.roa (raw, json)
Hash identifier:          L2LUJ2XlY1kA2tKOCxbdTNX8K8NtLs6qk+BJLdhgTeQ=
Subject key identifier:   CB:49:A6:3D:44:F9:71:FE:DE:56:1E:0C:D7:3B:B4:39:C9:5E:21:59
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F6828170E0D7F9AFFA258E770
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21c34b0-a72b-3c22-a864-16887548d10e.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     19905
IP address blocks:        173.23.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:17:0e:0d:7f:9a:ff:a2:58:e7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=c4bb6a2d-4ede-445e-b6ff-b7dcac9eb20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:2a:a4:70:ed:33:b9:d7:13:19:6c:3e:ea:
                    b5:68:da:5d:63:82:92:8c:ac:a7:1c:f0:be:e2:5c:
                    7a:8e:e8:0a:75:52:fb:52:98:50:cd:4e:67:0c:33:
                    7c:37:ad:65:1d:06:cb:44:08:1c:da:c5:f9:db:54:
                    8a:dc:6b:7a:ba:f7:f9:ba:95:7c:cb:a1:5e:fe:f0:
                    b2:34:78:90:40:b9:91:bc:63:f6:2e:9f:55:0f:af:
                    a8:2d:72:af:0c:4e:72:57:55:47:6d:e2:9f:ea:20:
                    06:f0:9c:78:9f:b3:88:50:20:5b:7f:2d:58:59:a1:
                    42:e4:5e:06:22:c9:db:00:5d:c9:ab:30:b2:b8:04:
                    34:20:59:58:bd:46:c7:83:00:d3:0d:8f:c8:98:61:
                    af:8d:e5:1d:cb:4a:82:5d:e4:65:11:5d:c2:02:2a:
                    0b:02:4a:2c:87:6a:6b:1c:79:4d:19:e5:13:7b:3e:
                    24:7d:8f:dd:71:af:5a:e2:24:ae:74:6f:5b:93:c7:
                    28:4b:66:83:d6:f4:10:5d:ce:2a:41:36:ad:c5:0e:
                    35:f6:59:16:c9:f3:f1:8a:4a:6e:d4:34:2e:83:20:
                    12:50:51:f1:b3:96:80:fa:c6:59:fc:af:49:98:11:
                    c4:e7:2a:62:37:63:aa:d3:fe:95:6b:87:02:a9:50:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:49:A6:3D:44:F9:71:FE:DE:56:1E:0C:D7:3B:B4:39:C9:5E:21:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21c34b0-a72b-3c22-a864-16887548d10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b3:e1:8c:91:e5:15:64:22:37:45:f2:f9:cd:21:4e:0b:4e:
         b0:8e:32:15:2c:81:b5:ba:29:73:e8:9b:be:14:6c:9b:52:6c:
         9c:c4:a7:69:39:17:f5:e8:c5:b1:3c:c3:c4:f9:0b:3e:f6:5e:
         6b:99:f2:e8:86:cf:a1:6a:02:e4:e3:d9:a7:f1:b0:58:a4:7e:
         e1:a0:5e:4e:3a:3e:00:53:63:24:ba:50:5b:1b:f4:cd:ec:b7:
         65:03:2d:b2:79:93:79:ef:04:d2:49:d7:b8:8f:a8:26:b1:0b:
         86:bd:41:aa:16:f5:be:55:f6:f2:46:15:c8:61:fe:fd:76:ad:
         8c:ce:99:41:db:64:2f:ff:ff:f6:b7:82:b7:5c:23:93:d9:34:
         7e:3b:25:6f:ab:89:14:e2:d0:bc:42:a3:8a:07:1a:e7:70:d0:
         c5:ae:6c:be:8a:d2:c7:4e:93:df:6b:7a:d9:c8:9b:5a:32:a5:
         7f:2c:b8:d1:2f:33:1d:d7:28:82:fc:5b:9b:c6:3c:5f:3b:6e:
         10:0e:5f:fd:3a:10:16:58:e7:c6:6e:a4:27:b3:05:fd:5b:f5:
         17:84:da:0d:05:22:a3:8c:19:36:66:b6:9c:60:cf:c8:f4:73:
         08:86:45:89:d4:16:9f:bb:e2:c5:2b:31:c0:6d:44:e6:7e:16:
         7e:b2:ff:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:42:12 2026 by rpki-client