Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f5ea996-58c8-35a7-9fbf-a448b84e27fb.roa
File:                     0f5ea996-58c8-35a7-9fbf-a448b84e27fb.roa (raw, json)
Hash identifier:          GfbjLxe/oZAbQ3ce5vp80/vkEH4etvvwXnKXipS3I6s=
Subject key identifier:   4C:8D:3F:3B:AC:58:9C:F2:12:BD:16:6E:CE:6D:D9:E7:AD:16:AA:B8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E11FF596FE098846BEFCC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f5ea996-58c8-35a7-9fbf-a448b84e27fb.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.26.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:1f:f5:96:fe:09:88:46:be:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=545f5d14-c754-425c-b682-48ff97bc53d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:74:88:41:75:16:50:eb:a7:e6:a0:44:34:
                    5b:3a:a0:a7:13:22:1c:8f:a3:17:44:63:14:5a:57:
                    10:41:34:a8:84:64:a6:07:17:f2:e0:f1:fe:13:0b:
                    d4:26:82:94:1a:0d:02:bc:1b:c1:bc:df:26:ef:53:
                    7e:5d:f7:26:4e:66:eb:3b:f4:52:00:e4:d6:72:42:
                    e5:85:ea:b4:92:b9:c2:1a:e3:23:42:eb:69:d8:8f:
                    f0:cc:ad:78:e5:a3:95:62:69:c2:28:0a:15:06:67:
                    d9:37:9a:b9:92:b4:e6:50:04:64:df:8a:20:62:ac:
                    a4:3d:a8:b1:5e:80:72:46:a1:fb:94:34:a9:a6:69:
                    bc:a7:a5:74:c0:f8:28:46:d0:78:59:cc:07:87:bd:
                    25:3e:fb:98:a6:b7:96:1e:bd:84:9e:20:34:d2:94:
                    91:6e:e7:91:58:ab:22:72:fc:d4:52:7c:42:93:22:
                    b1:94:cb:b1:0c:a4:0e:88:03:7b:01:eb:41:f2:64:
                    4b:9a:7b:d3:ac:f5:0a:7f:fd:12:84:9a:23:10:79:
                    3b:6c:13:e2:31:fa:a4:31:19:67:0a:5e:36:20:55:
                    44:21:44:1d:b5:63:b1:fd:b2:29:c1:b4:f8:63:f1:
                    4e:69:6b:b4:d3:5d:a3:27:a7:4e:60:65:4d:82:c0:
                    1c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8D:3F:3B:AC:58:9C:F2:12:BD:16:6E:CE:6D:D9:E7:AD:16:AA:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f5ea996-58c8-35a7-9fbf-a448b84e27fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5e:aa:b3:e1:fe:3d:87:b0:d3:fc:72:75:c3:da:53:4a:4b:
         89:dc:3e:44:0e:d2:5d:c2:6a:c7:26:75:86:a8:27:a6:7c:45:
         55:fa:ad:48:c4:85:06:6a:1e:02:a9:e7:f4:c3:57:cc:f7:48:
         37:4e:fa:a9:62:95:ce:8f:21:f4:8d:0c:37:05:1e:fa:c9:9d:
         42:55:47:4c:d8:80:1c:92:a0:4b:4d:43:a0:c1:f5:34:61:a9:
         1f:02:2d:e6:08:ff:84:60:d8:25:b2:da:5f:8e:46:47:c5:13:
         9d:70:e8:97:d0:b3:62:ef:62:2f:0a:7e:9b:ba:0c:b8:50:8d:
         2f:f4:01:20:15:50:19:35:6b:9f:eb:2c:f2:c5:6d:ad:1e:40:
         9d:a5:99:3d:1e:95:7b:9e:34:3b:76:fb:ad:77:5f:fb:4a:75:
         ce:26:20:c1:8c:6d:20:ec:9d:bb:44:72:b6:98:f6:f2:09:7c:
         8d:92:d6:23:38:30:79:37:50:da:08:df:84:57:69:24:e4:de:
         b1:12:d8:fe:e6:67:38:51:79:d2:2e:64:3d:df:e1:af:6a:e1:
         c2:42:91:b4:3f:3c:b1:35:f2:bb:b3:94:d0:57:84:68:fe:da:
         84:3d:c4:1e:42:b4:d1:1a:bb:b9:52:b6:46:55:a1:99:cf:4d:
         f6:c7:4e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:28:27 2026 by rpki-client