Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/250aa80d-f64e-3799-b3fc-121af819a450.roa
File:                     250aa80d-f64e-3799-b3fc-121af819a450.roa (raw, json)
Hash identifier:          EVLB4J2mfV4o5GXbaj11ONclj0lih4li5gpj2NxVeng=
Subject key identifier:   07:25:A6:39:A5:62:B4:17:C6:54:12:B3:39:81:E0:54:29:88:08:6E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AA24D3E7918402EDCFCC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/250aa80d-f64e-3799-b3fc-121af819a450.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.18.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:24:d3:e7:91:84:02:ed:cf:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=dc72209a-a1c2-420d-826b-5fc43a84ffde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:b7:f1:a8:0c:71:79:f8:94:cd:8a:28:dd:
                    d9:6a:da:26:90:0a:a3:95:a9:d5:5e:81:5f:8b:6e:
                    1d:08:04:b1:47:99:96:28:ea:fe:c5:82:02:18:11:
                    ed:a4:9d:e1:17:dc:c5:e4:ff:8d:92:eb:b2:9d:b5:
                    f1:56:73:3d:0e:1a:83:3c:b7:7a:6b:5e:9e:a8:00:
                    36:94:03:31:d6:25:86:74:2c:f6:d7:62:bc:f6:03:
                    78:a4:68:5a:6f:40:c2:2b:5a:03:d8:61:ba:0f:92:
                    7f:41:b1:02:cf:d2:ae:1b:95:3f:2c:b8:40:84:15:
                    e4:c0:1b:9e:41:2d:89:c3:03:bb:ff:dc:0c:78:61:
                    71:c8:de:0c:32:e0:48:44:0b:36:eb:61:e5:dd:dc:
                    34:49:40:84:40:6c:a4:b0:a2:fd:06:7e:19:e0:d8:
                    c1:3b:2f:38:e3:5b:b4:2e:26:67:d7:57:db:4a:d0:
                    a1:03:cc:fd:37:29:f7:48:c0:f6:3d:30:c5:1a:11:
                    d6:11:ad:63:31:be:3f:96:3f:df:ce:6a:64:91:5f:
                    88:bc:fe:a6:ab:f0:03:3c:24:eb:ef:67:89:ff:76:
                    e9:69:e8:a7:35:8b:ab:6d:a4:5e:10:ba:b8:f0:1d:
                    9b:39:4f:a3:2a:7b:9e:8d:38:7c:bc:a3:bf:f7:cd:
                    86:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:25:A6:39:A5:62:B4:17:C6:54:12:B3:39:81:E0:54:29:88:08:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/250aa80d-f64e-3799-b3fc-121af819a450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:dc:f2:a9:ea:fe:26:81:90:0e:41:a7:1b:30:68:57:e6:
         21:8b:3f:2a:21:a4:a0:ae:43:b6:6d:80:43:25:4f:7a:39:d9:
         6a:f2:c1:b4:89:4f:f8:19:57:a3:bf:3f:5b:b3:ca:b0:a1:1a:
         87:19:8d:33:80:3e:25:4d:04:9b:dd:6c:5d:8b:78:57:e5:26:
         fa:8f:b7:13:f6:59:d6:8b:99:2b:1d:ac:04:f3:51:50:b1:80:
         58:29:9d:02:de:64:b2:e0:d6:19:59:20:0b:19:6f:0e:93:20:
         53:29:05:ee:2b:3c:46:b9:81:b3:ec:db:ee:8a:83:9a:0b:c6:
         9f:cf:7d:a8:51:51:05:b9:a8:aa:00:3c:ca:2d:4f:73:30:83:
         5b:8c:83:b5:07:57:f6:20:e0:74:5c:e2:ed:de:20:cd:7b:15:
         fe:9a:81:be:2c:e8:6e:50:90:eb:43:70:5d:59:ce:54:e5:89:
         40:6e:3b:6a:2c:20:56:e9:29:c4:41:78:bc:36:0e:f0:77:aa:
         b2:f2:80:69:84:49:0c:7d:58:a3:cd:39:51:80:55:ed:ae:6f:
         14:18:b4:de:a9:7a:29:3e:d6:3b:a3:8c:29:25:a4:f4:ec:d0:
         43:f8:55:aa:95:06:b8:0d:38:79:a1:a0:4a:42:48:9a:73:31:
         39:d6:e3:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqiTT55GEAu3PzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
ZGM3MjIwOWEtYTFjMi00MjBkLTgyNmItNWZjNDNhODRmZmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsK38agMcXn4lM2KKN3ZatomkAqjlanVXoFf
i24dCASxR5mWKOr+xYICGBHtpJ3hF9zF5P+NkuuynbXxVnM9DhqDPLd6a16eqAA2
lAMx1iWGdCz212K89gN4pGhab0DCK1oD2GG6D5J/QbECz9KuG5U/LLhAhBXkwBue
QS2JwwO7/9wMeGFxyN4MMuBIRAs262Hl3dw0SUCEQGyksKL9Bn4Z4NjBOy8441u0
LiZn11fbStChA8z9Nyn3SMD2PTDFGhHWEa1jMb4/lj/fzmpkkV+IvP6mq/ADPCTr
72eJ/3bpaeinNYurbaReELq48B2bOU+jKnuejTh8vKO/982GbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAclpjmlYrQXxlQSszmB4FQpiAhuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjUwYWE4MGQtZjY0ZS0z
Nzk5LWIzZmMtMTIxYWY4MTlhNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRLiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpT3PKp6v4mgZAOQacbMGhX5iGLPyohpKCuQ7ZtgEMlT3o52WrywbSJ
T/gZV6O/P1uzyrChGocZjTOAPiVNBJvdbF2LeFflJvqPtxP2WdaLmSsdrATzUVCx
gFgpnQLeZLLg1hlZIAsZbw6TIFMpBe4rPEa5gbPs2+6Kg5oLxp/PfahRUQW5qKoA
PMotT3Mwg1uMg7UHV/Yg4HRc4u3eIM17Ff6agb4s6G5QkOtDcF1ZzlTliUBuO2os
IFbpKcRBeLw2DvB3qrLygGmESQx9WKPNOVGAVe2ubxQYtN6peik+1jujjCklpPTs
0EP4VaqVBrgNOHmhoEpCSJpzMTnW47c=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:34 2026 by rpki-client