Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26ef3e91-276d-3e4a-8f79-518c9cb122ec.roa
File:                     26ef3e91-276d-3e4a-8f79-518c9cb122ec.roa (raw, json)
Hash identifier:          XyYE/AXZWc+wtqqYCsG/nzJ3b2rI4L19RrdzRqygO9w=
Subject key identifier:   19:8A:8D:08:C3:40:28:3A:2A:D6:2E:89:CF:89:C2:98:8B:BA:9B:A5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4974BAF331DFCD4248B0DA80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26ef3e91-276d-3e4a-8f79-518c9cb122ec.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.25.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ba:f3:31:df:cd:42:48:b0:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bc2ac1ec-76d5-4319-ad02-f70a8e3f667c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8a:f1:4d:a9:c1:44:16:a5:b7:e1:1d:da:96:
                    db:ac:2a:1b:be:b8:fe:e5:00:d8:9d:62:68:3c:ed:
                    53:a6:21:a8:d5:7b:48:95:e7:f3:ee:a9:56:11:62:
                    63:37:bc:0f:59:c7:06:b0:98:88:98:83:ec:54:82:
                    53:0e:31:00:5c:e8:f2:2a:c8:c2:ec:95:38:9a:62:
                    3b:93:a1:91:5d:2a:30:0a:cd:9b:17:b5:a1:d5:2b:
                    ed:32:b9:4b:56:de:ee:e3:8d:e9:c0:a0:04:47:24:
                    c4:d9:ee:2f:36:4b:80:bd:19:00:78:27:55:32:a5:
                    ec:18:ab:a0:ab:c9:de:45:de:b5:22:86:27:ff:06:
                    fe:4d:c2:35:20:b5:cb:2b:8e:09:53:b4:f7:03:2a:
                    00:02:fa:95:94:71:de:3f:00:81:29:c7:12:5f:6d:
                    cd:98:c1:98:26:48:b7:b3:dc:1f:46:b5:ba:67:6b:
                    d9:b8:5b:fc:ba:2e:b4:ab:76:bb:05:a3:be:64:d1:
                    21:f8:14:6b:98:1e:bf:dd:cd:bc:90:a2:31:1e:ff:
                    35:f4:1e:7f:fc:c6:4b:6c:f3:1f:8e:5b:24:65:a7:
                    7d:9f:d3:b5:7e:0c:be:af:93:42:32:a7:8e:0f:76:
                    e5:ed:32:e6:1b:df:b7:76:01:c1:30:15:6c:b0:90:
                    82:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8A:8D:08:C3:40:28:3A:2A:D6:2E:89:CF:89:C2:98:8B:BA:9B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26ef3e91-276d-3e4a-8f79-518c9cb122ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:df:2a:4d:be:3c:0d:17:ab:5b:fa:dd:ea:12:35:aa:3a:42:
         c4:10:ec:72:69:c4:7b:75:6f:61:04:b9:6c:85:70:be:37:af:
         c7:73:57:b2:bf:a9:d4:98:70:1c:d4:c8:68:ae:38:bc:11:85:
         b3:a9:3e:5b:3f:35:f7:dd:3a:bc:8d:4c:60:66:08:b0:6e:5f:
         ef:a5:a4:d2:bb:f8:22:4c:56:59:28:89:08:22:79:7d:82:fe:
         4b:1a:0c:bf:0f:74:91:52:4e:57:4f:55:67:26:78:5c:0f:fa:
         23:60:3d:fd:5f:6b:b2:ce:97:f7:ee:a1:fe:7c:a2:a0:2b:03:
         3f:6e:f0:59:9c:7e:cf:86:a3:96:26:56:9d:28:59:d6:7d:b9:
         cf:d2:ca:77:22:55:e3:ce:9e:bf:c6:26:ac:7e:6d:9b:65:b3:
         61:e6:d4:3a:8b:1d:35:07:08:a2:52:3a:14:d1:97:62:a3:5a:
         ce:29:5f:e5:e3:c4:f8:25:50:5f:cf:5d:85:b0:30:fe:01:05:
         05:86:50:cc:7b:60:bf:3b:9d:45:f2:66:10:54:21:de:93:64:
         11:b7:ef:bc:3e:df:d0:68:97:54:c3:93:ae:8a:85:12:c5:3a:
         fb:74:52:29:41:cf:d4:be:c3:9c:b0:e3:a6:46:c2:6e:18:9f:
         4e:79:f8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:48:29 2026 by rpki-client