Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/932a3ff1-8cee-328e-9f80-c417a0463043.roa
File:                     932a3ff1-8cee-328e-9f80-c417a0463043.roa (raw, json)
Hash identifier:          LsoFQ/vIXS84S4OF8Gj/3QhIkpv/afpUlI4MXTTQOe8=
Subject key identifier:   50:AB:04:0B:83:92:B6:54:B4:9D:2D:88:B3:52:E8:43:AF:FD:46:7E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B62022462FEDB65B212B45000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/932a3ff1-8cee-328e-9f80-c417a0463043.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.26.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:24:62:fe:db:65:b2:12:b4:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=cb708b49-07f2-4eb5-aa23-8a8bbe2a7613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:66:75:cd:f2:eb:66:9f:90:ec:86:1e:55:
                    f3:f0:e6:4b:a4:d8:5f:dd:2b:bf:c2:e6:c7:77:00:
                    51:d6:91:f1:64:f7:51:f9:ab:85:61:80:f2:01:06:
                    d3:1d:12:e5:d5:58:81:0d:e6:ec:5a:d8:d3:be:56:
                    eb:60:ef:3d:ad:74:a5:e3:e3:ad:0a:8b:cc:df:db:
                    9c:ee:e0:2c:c7:64:14:67:bb:34:25:1e:b6:21:7c:
                    91:19:2a:65:81:0d:17:76:f0:7e:29:e3:6c:36:a7:
                    56:f0:4b:fb:a1:3e:30:4f:f9:39:44:1c:4e:59:43:
                    a8:3a:83:9c:2a:0d:ae:05:0d:26:9c:32:bc:cf:d5:
                    9b:20:1a:7d:0e:81:12:53:9e:dc:fd:07:9a:f3:4e:
                    b8:28:f2:d8:f9:85:56:ec:e1:d4:38:a2:12:85:e7:
                    3b:d6:ad:60:66:30:f9:32:1f:a7:0a:d9:21:5a:bb:
                    03:26:4b:0c:d6:16:d9:66:96:f4:16:39:e2:8b:78:
                    28:dc:42:ac:ce:d0:f8:ec:06:12:78:3a:95:30:ae:
                    b7:c0:91:57:d2:9b:7b:17:2b:80:9c:94:6b:6a:15:
                    44:7a:73:8f:16:13:fd:3c:75:86:a7:af:fe:33:cd:
                    16:b3:ad:49:8b:d1:a6:46:ed:66:e0:6d:ac:e1:c4:
                    98:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AB:04:0B:83:92:B6:54:B4:9D:2D:88:B3:52:E8:43:AF:FD:46:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/932a3ff1-8cee-328e-9f80-c417a0463043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b2:f5:a9:74:d6:b1:80:08:09:08:6e:49:89:62:9a:25:66:
         26:31:0c:0b:46:2f:61:26:c0:b7:b5:6d:4f:b2:b9:d2:90:c8:
         87:39:3a:a4:75:6a:16:f6:1e:0d:2f:a4:4a:98:bc:0d:91:f0:
         f6:a0:18:21:63:65:d7:3f:ce:98:e0:1b:71:67:17:a8:6e:aa:
         6a:a7:3c:6a:2d:94:3b:86:b3:0d:2f:d3:da:32:5b:3a:61:b1:
         0d:6d:89:8e:a8:7b:ec:22:0a:1f:2b:6f:98:7e:bc:94:a5:18:
         ca:28:ba:45:2c:65:9a:73:11:32:1d:a7:46:f5:0c:8f:a3:1e:
         56:9e:4a:60:c1:2f:24:b2:c4:f4:80:de:f9:98:5f:21:24:fd:
         15:ee:9b:34:08:86:9b:74:d0:80:b5:9b:6b:90:73:65:c0:3a:
         f3:a7:3f:b2:9b:4f:c8:61:4e:0a:58:cc:ce:ca:d8:1b:21:8b:
         4e:f5:07:36:c7:1c:a8:19:7e:cc:44:ad:56:6b:22:22:47:ac:
         3d:29:2f:fb:b3:fe:e7:1f:b3:c2:57:8d:6c:f8:b2:c0:1d:b3:
         6b:d9:ac:d0:17:c3:14:64:dc:63:56:ae:92:0c:b6:a8:34:cf:
         e3:94:3a:07:0e:b3:da:1f:e5:5f:c1:c3:62:15:60:80:47:27:
         91:e2:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:07 2025 by rpki-client