Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26262f22-543b-3382-b8e7-a4afc6e6b97f.roa
File:                     26262f22-543b-3382-b8e7-a4afc6e6b97f.roa (raw, json)
Hash identifier:          aliXvAmXei9RTeEHMth0WD8MuoPT1GdRdO+UyYMvS+Q=
Subject key identifier:   80:B8:3B:9E:F7:E9:56:F0:85:DC:9F:C7:70:FA:2F:77:25:9C:A4:72
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC8B13E3ABADD9D98FDE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26262f22-543b-3382-b8e7-a4afc6e6b97f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.22.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:8b:13:e3:ab:ad:d9:d9:8f:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=bd33d26d-5821-4e77-9166-e8e5f3b97563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:94:a2:6f:b7:11:3f:d4:0f:93:33:6c:6a:b0:
                    d0:21:98:b9:e1:57:ef:24:3b:6d:05:a4:b4:2a:f8:
                    1e:03:8e:04:73:bf:d1:7d:f2:8a:09:24:3b:82:6e:
                    d5:a7:e9:d5:6a:b7:be:7e:b6:b9:c5:a9:6b:c9:58:
                    64:31:6a:2f:c6:aa:e9:d8:a1:1e:13:6f:6f:4f:5e:
                    21:d1:eb:62:a6:a8:ef:8c:0c:0c:eb:dc:ea:7e:1b:
                    bf:b9:27:5b:94:a1:83:21:41:38:1f:12:aa:d9:35:
                    41:96:04:fa:9a:1f:14:17:45:bb:d6:92:17:56:3e:
                    66:a7:6a:f0:21:ae:71:51:bb:7b:cf:a9:db:34:f3:
                    45:a9:2f:13:20:bb:ad:65:b1:dd:5d:bd:42:f0:41:
                    49:2d:14:68:c0:3f:9b:55:a5:25:c7:40:b8:c6:c4:
                    62:e1:73:c9:69:be:1b:f7:ba:78:cc:ca:bf:fb:1f:
                    35:8a:a8:e9:2f:99:26:2f:43:b4:ec:5d:e7:a6:38:
                    27:be:0f:b7:4b:92:37:5c:52:60:d0:43:10:0a:0c:
                    2b:ab:d4:08:7c:a5:c3:a7:fd:d6:f9:ae:7f:82:8b:
                    19:2a:2d:ac:96:db:c6:12:df:e0:90:29:6b:3f:fa:
                    fd:44:37:cf:69:5c:ff:76:f7:95:89:50:a5:d0:ea:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B8:3B:9E:F7:E9:56:F0:85:DC:9F:C7:70:FA:2F:77:25:9C:A4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/26262f22-543b-3382-b8e7-a4afc6e6b97f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:81:64:dc:8b:86:64:67:a3:c5:6b:c9:67:ce:9c:1d:4d:
         3b:8c:b4:d5:13:54:3c:da:0a:65:cf:f0:48:92:ba:2c:77:e2:
         b9:c5:11:f8:7d:8d:b8:30:07:8f:80:fe:d3:6b:0f:28:d3:f3:
         62:80:5a:a2:7b:81:f2:52:fd:98:3f:df:21:e8:a2:9a:f0:f1:
         c1:66:5f:f2:4c:c9:72:d9:cf:04:0a:91:74:c3:71:60:16:f6:
         fd:c1:1e:c1:ca:2f:5d:9b:3c:f2:82:df:79:99:7a:45:98:b2:
         42:5b:40:fb:c9:a5:91:f7:f4:c7:ee:41:8c:b4:66:b5:ac:3f:
         9a:31:d9:29:14:c5:95:75:27:c3:40:82:7a:5e:9e:b7:93:80:
         7b:0d:71:f9:a1:e5:7d:87:dc:56:ba:c1:78:a9:f3:59:11:d8:
         56:69:f1:b2:7e:9d:b0:e6:1b:bb:ce:e2:98:04:31:6a:08:cc:
         15:3a:6e:d9:78:1f:b8:f6:15:85:30:09:5f:7a:fd:a6:c2:bc:
         09:aa:d5:7b:eb:80:51:7f:3a:f5:44:56:d1:ad:ed:f7:64:39:
         2a:17:e4:eb:92:ba:43:2b:bc:2f:54:e3:38:12:8f:49:e6:84:
         b1:a9:14:30:d9:86:c7:26:7f:4d:ec:6e:f0:5b:49:7d:df:64:
         00:6f:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:58 2025 by rpki-client