Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9867c856-a723-3454-8c6e-a69c217045b7.roa
File:                     9867c856-a723-3454-8c6e-a69c217045b7.roa (raw, json)
Hash identifier:          yeFWX1Q1t7PNUJOTvLlAeVTmNe5XRALpYOlNIT2i1lM=
Subject key identifier:   34:AC:30:F2:13:DF:55:02:E2:52:1F:AC:CD:41:F7:8F:07:64:DB:3C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC858CFE291DA9C089C160
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9867c856-a723-3454-8c6e-a69c217045b7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.26.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:85:8c:fe:29:1d:a9:c0:89:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=3a6a227a-98f9-4bd9-92eb-cccdac68337e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:7a:25:f4:f2:d1:8e:5e:d4:ad:dc:e2:ce:
                    5f:b8:0b:27:5a:d0:e1:b3:6c:91:35:35:56:6a:b0:
                    29:c0:64:f1:e8:fa:9b:6b:4c:4c:75:ec:25:99:c9:
                    82:25:88:d8:73:4a:48:e0:a6:6b:c2:4e:a7:3a:08:
                    30:c6:9d:45:b1:82:8c:e8:82:86:0c:7f:7f:69:d9:
                    74:db:f8:76:41:95:1b:e0:50:b6:e0:08:48:62:41:
                    e8:6c:c4:9f:2d:7e:24:8e:35:82:2f:bf:e6:34:b6:
                    e4:dc:9b:2e:a6:80:9c:d0:51:21:18:dd:4e:94:51:
                    2a:22:11:36:a2:99:49:32:0d:a2:74:8a:69:91:08:
                    f5:de:64:2e:cf:7d:21:4e:35:f5:3d:ee:de:fd:07:
                    d0:88:a2:00:06:3c:64:74:ab:59:06:ff:a1:bd:ca:
                    a0:ff:cc:16:1a:d8:4e:41:7a:0f:67:29:f4:c9:81:
                    b3:d5:cb:e1:cf:9c:84:d4:04:dc:87:99:34:0b:eb:
                    c1:37:ee:5e:8f:5c:ab:fb:7b:fd:e3:e0:c8:e0:79:
                    8a:f1:d8:76:d1:d5:0b:23:6f:b8:f8:94:19:1f:a3:
                    3b:f2:63:01:ce:cf:fd:e7:7d:65:a3:7a:0c:94:5f:
                    47:e7:ae:d0:a1:f3:9f:a0:33:52:84:48:32:3d:fc:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AC:30:F2:13:DF:55:02:E2:52:1F:AC:CD:41:F7:8F:07:64:DB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9867c856-a723-3454-8c6e-a69c217045b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:91:b9:b7:0b:f0:d0:7b:f5:5a:0d:94:2a:47:0f:7d:0a:d1:
         b9:37:a5:18:4f:bb:d3:35:92:08:d0:c6:f3:f7:69:21:5b:96:
         ff:56:4c:36:bb:22:00:52:37:f0:83:a6:dd:e7:63:62:99:69:
         32:4a:59:2e:21:07:42:a5:8b:fc:5c:1f:b4:cd:4e:90:6a:82:
         9f:5e:25:5f:96:4b:ee:82:0c:70:f9:a2:68:ae:ae:7a:6a:01:
         9e:d3:7e:23:fb:09:f3:a2:e1:42:3c:25:98:c2:7a:5a:c9:a0:
         6e:7d:7d:fc:a7:39:fd:4c:d2:22:02:ad:fb:e6:f3:90:87:b4:
         6a:c4:c5:82:bc:8d:37:b3:f3:28:0b:5b:81:d6:bc:55:b3:13:
         65:80:af:db:0b:9d:3b:8c:d6:62:53:a0:7f:b7:46:ec:03:e6:
         7b:6a:97:b1:37:ff:b1:08:db:f7:e6:95:59:94:08:39:47:89:
         8d:35:85:29:d4:74:f0:6e:20:81:8d:9e:2d:d6:62:e4:0b:ed:
         c5:96:f7:46:fe:25:02:e5:7d:b2:83:06:a1:89:92:c2:62:13:
         fa:07:6e:52:32:2d:8e:35:0e:93:09:79:f0:bb:60:ef:fc:ba:
         1e:05:e1:57:bd:ef:66:a9:6e:30:96:94:00:9c:e9:03:fd:90:
         d8:97:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:28 2025 by rpki-client