Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5847ecbf-3cbc-3704-a206-b0a9c681923d.roa
File:                     5847ecbf-3cbc-3704-a206-b0a9c681923d.roa (raw, json)
Hash identifier:          2nvCGX1fadvQdDShUi3V/JF6s8qYOnGfvMW6eF2nhdA=
Subject key identifier:   94:14:CD:0C:AF:81:1F:AB:E1:BB:50:AF:9E:8C:1C:3B:1B:18:9A:31
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B79CA65294EA4086C675C4CE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5847ecbf-3cbc-3704-a206-b0a9c681923d.roa
Signing time:             Fri 10 Oct 2025 13:28:19 +0000
ROA not before:           Fri 10 Oct 2025 13:28:19 +0000
ROA not after:            Thu 08 Jan 2026 14:28:19 +0000
asID:                     19905
IP address blocks:        173.26.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:ca:65:29:4e:a4:08:6c:67:5c:4c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 10 13:28:19 2025 GMT
            Not After : Jan  8 14:28:19 2026 GMT
        Subject: CN=e17e2428-db50-459d-b9ac-28e8c51ea569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:7f:7c:71:14:42:3b:ba:94:39:a6:3c:48:
                    fc:55:51:b7:3c:73:e1:e4:3d:c5:50:fc:4c:47:2c:
                    a7:ce:ac:64:c1:bc:75:1c:d6:6e:9a:76:51:22:8d:
                    08:5e:6f:b3:de:4c:0c:cd:71:fb:8d:bf:96:9e:a0:
                    6f:0a:77:84:7b:37:49:60:d1:78:2f:72:34:b3:e1:
                    95:99:e7:12:f4:72:52:22:d7:c9:d6:24:4f:ab:0a:
                    25:ef:66:88:73:6f:96:cd:14:fc:66:9b:71:7f:0e:
                    d7:a2:5a:27:15:49:2f:10:0a:93:cc:c7:fd:d6:15:
                    74:bf:c4:96:64:b2:10:e2:75:ea:e6:44:d7:9e:b0:
                    09:01:53:d0:e9:ef:3a:f7:a3:86:e4:cc:d6:09:47:
                    b3:ce:d8:b7:a1:aa:62:18:b0:a1:d9:5a:ee:57:e5:
                    61:2d:1a:04:76:02:ee:d9:2f:19:d8:11:88:18:9c:
                    46:96:ea:19:98:76:0f:dc:ba:cf:8a:c7:0b:1f:dc:
                    6a:55:06:b9:42:6c:2e:57:b8:4e:b3:79:2e:dd:87:
                    01:6d:96:d3:ca:c5:15:6e:0c:7f:8d:76:9e:2b:cc:
                    67:35:28:f9:26:b4:0b:43:23:41:b9:69:df:5b:d9:
                    36:44:f9:8b:8c:13:b0:2a:19:b3:63:00:e5:2e:74:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:14:CD:0C:AF:81:1F:AB:E1:BB:50:AF:9E:8C:1C:3B:1B:18:9A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5847ecbf-3cbc-3704-a206-b0a9c681923d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:77:9a:70:0f:0f:95:25:e2:12:1c:16:7d:79:57:0a:16:
         76:8f:82:47:f8:5d:90:fc:31:3d:d2:9c:d7:66:55:1f:d2:c0:
         db:ec:84:fa:1d:47:dc:a7:fb:18:e2:99:34:0f:8c:a0:b7:59:
         7f:e9:62:37:40:5b:a2:b3:f8:46:40:71:31:e8:5e:03:c6:53:
         53:9e:87:95:db:5a:37:81:e0:e6:85:aa:3a:ba:07:bf:a4:c5:
         da:77:76:4e:b1:88:b6:6f:23:a5:1b:c2:e6:39:6b:8c:a2:c9:
         e2:b0:31:e7:5b:f1:9e:6d:8a:c7:b3:78:45:5d:5c:35:d4:56:
         03:3e:ff:55:f7:1b:ea:80:fa:9e:bf:c3:ec:52:9b:bb:4e:a4:
         85:89:33:7a:2e:ab:20:6b:62:e6:d2:6f:0f:57:27:b8:be:54:
         bb:aa:bd:6e:6d:d4:77:46:22:e0:93:44:c9:d1:28:12:4f:6a:
         02:51:eb:34:7b:e0:55:69:d4:b4:f9:bd:c7:60:ea:3e:e6:2f:
         00:55:b6:e8:77:da:bf:79:33:e4:0e:cf:5b:41:b7:92:f3:e7:
         88:00:97:da:ec:35:89:c0:64:29:5c:0a:40:f3:0d:18:fa:88:
         38:67:bc:6f:9e:6a:25:a2:a8:25:0b:23:ca:cb:0b:40:73:8e:
         79:ef:32:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:33 2025 by rpki-client