Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/019bff81-effd-3aef-a1af-5da17e337d3d.roa
File:                     019bff81-effd-3aef-a1af-5da17e337d3d.roa (raw, json)
Hash identifier:          FILO6g+WbZlWUOci6C1JS46HTU9JF4J3HsBQEzaf0hk=
Subject key identifier:   CA:D2:4C:31:2A:08:3F:B9:C9:4C:31:F0:15:1F:D3:D3:F7:E2:EA:2D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE3CC6866D3E9CEF7A79C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/019bff81-effd-3aef-a1af-5da17e337d3d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.26.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:3c:c6:86:6d:3e:9c:ef:7a:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e707709f-d2b1-4f94-9f35-0c15f6a8ac6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:d5:3f:5e:ef:bd:8f:78:e3:0e:e3:9a:d6:
                    ce:74:dd:e7:d0:e3:23:85:6f:7f:5d:62:d0:b1:57:
                    8e:ee:f9:d7:d0:18:51:d1:c6:04:1d:c6:d2:5d:a0:
                    af:f2:e8:49:4e:1e:ca:ee:47:47:bb:6c:31:93:17:
                    61:4e:ba:b1:3d:ba:a8:4f:7b:32:1a:de:40:63:c5:
                    68:ab:0c:0d:0a:ca:a0:05:98:6b:52:34:f5:3b:bd:
                    4a:a7:53:5c:a2:f3:3d:71:19:e1:c5:36:ef:f1:f8:
                    3f:eb:df:a3:b3:2b:ef:b5:07:c9:4f:12:58:77:9f:
                    86:9e:a1:2c:f3:b4:97:c2:74:1d:8a:c7:59:79:8f:
                    b5:2d:75:73:55:3e:7d:ac:3f:a8:23:f4:c4:ed:4f:
                    e6:c4:cb:19:60:f7:d1:e9:16:04:ff:ba:fa:a2:fa:
                    aa:95:a5:69:ed:fd:eb:23:54:d5:93:fd:41:cf:58:
                    80:0b:93:d8:4f:3b:bb:57:15:a1:73:56:4b:55:26:
                    16:2b:5c:17:fb:c8:ba:b6:64:8c:94:93:04:cd:a3:
                    fe:13:b8:7c:59:14:b9:87:67:96:97:80:c1:43:30:
                    5f:0d:a9:37:2b:0a:f8:d4:9a:36:4d:1d:79:7b:7a:
                    6c:6c:33:34:05:76:40:52:45:d1:f7:50:1d:f1:2e:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D2:4C:31:2A:08:3F:B9:C9:4C:31:F0:15:1F:D3:D3:F7:E2:EA:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/019bff81-effd-3aef-a1af-5da17e337d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:d0:b6:b5:d0:16:8f:f6:88:71:56:45:b6:be:e1:58:a7:
         79:3d:20:68:f8:d5:b3:a0:e2:81:48:f3:a3:b4:e5:df:73:70:
         52:38:bf:15:ca:ae:a7:1d:98:88:5b:e2:60:7c:98:b3:e7:72:
         c6:86:18:1a:55:a5:69:36:f2:90:c5:41:7a:db:79:74:76:8a:
         0f:ff:81:20:93:b1:e5:48:bf:4e:c1:f8:8c:0f:78:ea:1f:78:
         83:ca:6d:d9:99:65:f9:1b:6f:a5:fd:f2:3a:94:4f:2c:50:77:
         36:74:58:b6:bb:8b:4b:dc:8f:b5:c8:78:e2:21:dd:8a:00:1a:
         a6:1a:02:db:f3:14:b1:0d:78:67:f1:ab:67:df:c4:87:3f:21:
         0f:92:0a:40:4b:15:d3:d6:e0:e0:54:c9:c5:6a:5d:67:06:45:
         b1:e0:27:57:49:2f:f1:22:e7:33:3a:24:a4:02:f4:e6:79:48:
         71:3a:e0:d4:12:63:9f:58:bb:d5:8c:55:2b:25:0c:39:6b:40:
         af:8d:9b:07:ee:d0:0a:bc:b0:25:8b:3d:99:e0:1f:a1:92:ef:
         9c:22:08:b1:b8:be:6c:d9:c4:ee:0b:c6:5f:b2:18:31:78:2c:
         b3:fc:54:b3:25:93:46:98:17:b0:83:41:d6:68:c1:5a:b2:10:
         76:f7:ca:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:51 2025 by rpki-client