Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e2a9686-ca7d-30ac-a964-39e4424e7c21.roa
File:                     9e2a9686-ca7d-30ac-a964-39e4424e7c21.roa (raw, json)
Hash identifier:          R2m18sTQzuGdsx+uDaJN9fpnC0B9x74aKt26MKZZiRc=
Subject key identifier:   13:C1:A4:86:92:56:C7:CF:E7:F1:8F:66:BA:55:30:07:A7:52:7F:67
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E11452C5A15DFC81746080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e2a9686-ca7d-30ac-a964-39e4424e7c21.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.26.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:14:52:c5:a1:5d:fc:81:74:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=cc11e6ea-20ce-46de-a78d-ad4bf44b3a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:17:b6:b6:e7:f8:ff:28:78:3f:0b:81:15:
                    6c:a3:a3:ae:eb:d7:0b:a1:f0:55:fd:63:42:88:e4:
                    9b:29:cd:38:6f:11:5a:6b:ba:1d:49:b3:0b:61:1f:
                    b6:eb:21:90:f9:5f:36:30:8f:5c:38:f0:ef:9a:a6:
                    7a:e9:c1:96:21:3d:4a:e0:77:a5:50:af:fd:37:e1:
                    53:c5:3d:9b:d4:bb:5e:4b:e9:ca:4f:09:83:c8:92:
                    6b:ae:37:d4:30:4d:c1:e2:45:c9:45:da:46:2a:f2:
                    45:3c:f5:8d:47:8b:18:05:8b:12:dd:95:a1:bd:c1:
                    66:6a:21:27:31:14:2c:e6:ed:14:57:fc:43:9b:95:
                    6b:43:29:67:75:55:82:bd:46:63:f8:3a:dc:de:19:
                    0b:62:57:f9:b5:4c:c6:df:54:ac:d8:d9:87:89:43:
                    f2:2e:28:14:5b:31:ee:16:d7:80:a7:c5:c3:54:d8:
                    83:23:24:fb:05:87:5b:d6:14:35:39:7e:ef:ab:d0:
                    22:7e:23:89:dc:b3:1d:85:f6:7d:c8:59:12:2f:bc:
                    14:89:37:f9:e6:81:21:2b:70:2d:3c:26:44:62:4a:
                    15:81:18:b7:7f:a4:09:38:b0:38:7b:13:df:8d:f6:
                    4e:2e:cc:4a:64:4c:94:bf:13:2b:80:ba:d8:cb:0d:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C1:A4:86:92:56:C7:CF:E7:F1:8F:66:BA:55:30:07:A7:52:7F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e2a9686-ca7d-30ac-a964-39e4424e7c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:fa:22:f1:e2:3a:6a:b4:7d:8b:3f:bd:dc:7e:c5:be:8d:19:
         48:95:a3:a0:75:ea:9c:ae:43:72:b7:1a:b7:cc:e3:2f:a5:71:
         de:3f:59:eb:e9:42:6e:fd:97:37:9b:0f:c0:38:2e:1f:20:32:
         92:6b:41:f2:14:54:08:1e:44:77:89:31:83:24:71:ed:4b:61:
         cb:12:27:cc:5a:94:aa:16:1b:e7:a1:7b:eb:8b:c3:8e:09:b7:
         fd:45:bc:6f:0f:73:f0:a7:24:80:e2:f7:b6:e6:19:ab:a0:de:
         0e:3f:3f:9b:4e:3c:6f:ec:45:c1:28:5d:b0:28:0e:2f:34:4a:
         33:cd:34:4f:78:94:06:bb:a0:c3:71:a8:05:2f:a0:bf:f1:cf:
         21:b3:62:f7:54:ec:32:56:a8:18:9d:69:e7:fb:32:89:8c:50:
         12:45:0b:ac:62:b8:1d:53:72:33:7e:79:85:f9:22:00:4d:b7:
         ea:83:14:55:5d:3d:0e:d3:0e:52:69:29:db:96:75:5e:4d:63:
         9a:ec:a3:41:33:4a:9c:42:42:76:19:41:aa:5e:50:c3:47:94:
         df:d2:ef:17:16:a2:d1:07:d3:30:07:1a:25:41:23:97:ab:28:
         fb:d9:db:0a:a3:3e:c5:97:dc:fa:65:e1:79:58:a5:4e:0e:06:
         fe:c9:02:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RRSxaFd/IF0YIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
Y2MxMWU2ZWEtMjBjZS00NmRlLWE3OGQtYWQ0YmY0NGIzYTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLwXtrbn+P8oeD8LgRVso6Ou69cLofBV/WNC
iOSbKc04bxFaa7odSbMLYR+26yGQ+V82MI9cOPDvmqZ66cGWIT1K4HelUK/9N+FT
xT2b1LteS+nKTwmDyJJrrjfUME3B4kXJRdpGKvJFPPWNR4sYBYsS3ZWhvcFmaiEn
MRQs5u0UV/xDm5VrQylndVWCvUZj+Drc3hkLYlf5tUzG31Ss2NmHiUPyLigUWzHu
FteAp8XDVNiDIyT7BYdb1hQ1OX7vq9AifiOJ3LMdhfZ9yFkSL7wUiTf55oEhK3At
PCZEYkoVgRi3f6QJOLA4exPfjfZOLsxKZEyUvxMrgLrYyw2kEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPBpIaSVsfP5/GPZrpVMAenUn9nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWUyYTk2ODYtY2E3ZC0z
MGFjLWE5NjQtMzllNDQyNGU3YzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRqiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGT6IvHiOmq0fYs/vdx+xb6NGUiVo6B16pyuQ3K3GrfM4y+lcd4/Wevp
Qm79lzebD8A4Lh8gMpJrQfIUVAgeRHeJMYMkce1LYcsSJ8xalKoWG+ehe+uLw44J
t/1FvG8Pc/CnJIDi97bmGaug3g4/P5tOPG/sRcEoXbAoDi80SjPNNE94lAa7oMNx
qAUvoL/xzyGzYvdU7DJWqBidaef7MomMUBJFC6xiuB1TcjN+eYX5IgBNt+qDFFVd
PQ7TDlJpKduWdV5NY5rso0EzSpxCQnYZQapeUMNHlN/S7xcWotEH0zAHGiVBI5er
KPvZ2wqjPsWX3Ppl4XlYpU4OBv7JAqs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:31 2026 by rpki-client