Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1735d93-5fed-326c-9ab5-49d8a431d29e.roa
File:                     a1735d93-5fed-326c-9ab5-49d8a431d29e.roa (raw, json)
Hash identifier:          XEzU6Nx2qM1WCqodtSNvAZa6VyJCOjijIJmJuVUUXe4=
Subject key identifier:   B5:8D:43:9E:DA:BD:19:AC:27:2E:22:7B:E6:CA:EE:59:BA:D9:91:F5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE4D23EAFA1781438E1D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1735d93-5fed-326c-9ab5-49d8a431d29e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.26.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:4d:23:ea:fa:17:81:43:8e:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=fdefbf86-7acc-43d7-ba86-0a5f5e4eb5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cf:2d:2f:9e:da:0e:8c:08:57:b7:62:2a:92:
                    1b:79:31:94:62:09:cb:b3:a8:2f:1d:67:ba:88:64:
                    26:52:f2:8b:b2:65:16:05:81:5b:26:db:a4:a8:22:
                    bd:89:66:b2:80:f0:03:2f:93:74:7e:4d:eb:da:23:
                    dd:d8:b4:6e:8e:26:31:d0:60:5d:d4:c7:b7:c4:e8:
                    57:2d:ca:fb:a1:6e:01:ad:3c:5f:ef:e4:6e:a3:3a:
                    53:a8:f0:ac:e4:ac:40:af:41:03:14:77:07:0c:d9:
                    7a:ee:3b:f7:25:af:1d:eb:5e:fc:c3:e3:88:9e:12:
                    62:d9:c8:b3:55:29:4a:5a:80:8d:9e:c6:45:17:e6:
                    0e:87:2d:77:e3:90:0a:d8:a4:02:6f:4b:4b:1c:89:
                    38:a5:9e:13:40:be:c5:08:ce:3b:5e:31:dd:4d:09:
                    be:3f:10:9f:91:9b:b0:69:95:ce:44:8b:9f:49:7e:
                    aa:59:e3:80:1f:a6:08:49:2b:70:8e:f9:85:5a:88:
                    d8:09:b6:a1:8e:3e:31:c7:41:44:e6:ee:9b:7e:b0:
                    1d:80:3a:c2:a2:c7:f0:10:de:f3:59:f1:58:82:6d:
                    0c:ff:dc:a4:2a:b2:23:e3:8b:b2:1e:f6:7f:b1:75:
                    8c:cd:da:b4:32:8c:4c:00:28:1e:2a:1a:32:0a:b9:
                    bb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8D:43:9E:DA:BD:19:AC:27:2E:22:7B:E6:CA:EE:59:BA:D9:91:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1735d93-5fed-326c-9ab5-49d8a431d29e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:71:ed:f1:6b:9b:3b:97:4b:ba:25:02:fd:00:6e:b0:de:
         f1:80:aa:18:47:14:c7:a3:c8:46:7b:3f:10:45:0d:64:d4:1b:
         b2:3e:ae:0c:83:3f:2c:8e:93:7e:32:f5:06:3e:4e:2c:cb:bf:
         6f:f6:df:f5:7a:d6:71:e7:8f:9b:be:37:75:ec:bc:61:7b:3d:
         0c:54:f0:09:6d:bb:c7:8f:0f:46:17:61:4e:ec:03:44:31:d3:
         80:84:e4:ff:31:86:6d:92:42:50:ec:54:56:58:32:18:fd:90:
         36:a9:70:8c:d1:c4:cb:ce:ba:b6:56:87:c5:f8:26:31:a7:a9:
         8f:6e:80:37:54:7b:99:55:e0:5a:ef:3c:1a:80:7a:36:51:42:
         80:82:81:00:42:89:96:4a:b4:82:57:4a:af:3e:ce:b6:d6:58:
         d9:3c:7f:c6:8a:d4:10:93:e1:4d:ca:f7:98:ac:74:03:93:b7:
         06:28:df:20:94:8e:fc:89:11:50:ad:49:c6:28:a9:7f:53:23:
         d7:f6:2f:63:46:66:a8:51:cc:93:40:ad:88:6b:cd:04:1c:92:
         33:fb:7c:8c:07:a6:1f:62:c4:f5:3d:70:2e:c7:95:1b:23:53:
         25:1e:ea:cf:51:ca:27:17:27:1f:44:81:52:0d:b1:e8:6b:1d:
         f6:08:1b:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzk0j6voXgUOOHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZmRlZmJmODYtN2FjYy00M2Q3LWJhODYtMGE1ZjVlNGViNWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM8tL57aDowIV7diKpIbeTGUYgnLs6gvHWe6
iGQmUvKLsmUWBYFbJtukqCK9iWaygPADL5N0fk3r2iPd2LRujiYx0GBd1Me3xOhX
Lcr7oW4BrTxf7+RuozpTqPCs5KxAr0EDFHcHDNl67jv3Ja8d6178w+OInhJi2ciz
VSlKWoCNnsZFF+YOhy1345AK2KQCb0tLHIk4pZ4TQL7FCM47XjHdTQm+PxCfkZuw
aZXORIufSX6qWeOAH6YISStwjvmFWojYCbahjj4xx0FE5u6bfrAdgDrCosfwEN7z
WfFYgm0M/9ykKrIj44uyHvZ/sXWMzdq0MoxMACgeKhoyCrm7kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWNQ57avRmsJy4ie+bK7lm62ZH1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTE3MzVkOTMtNWZlZC0z
MjZjLTlhYjUtNDlkOGE0MzFkMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRqqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGcce3xa5s7l0u6JQL9AG6w3vGAqhhHFMejyEZ7PxBFDWTUG7I+rgyD
PyyOk34y9QY+TizLv2/23/V61nHnj5u+N3XsvGF7PQxU8Altu8ePD0YXYU7sA0Qx
04CE5P8xhm2SQlDsVFZYMhj9kDapcIzRxMvOurZWh8X4JjGnqY9ugDdUe5lV4Frv
PBqAejZRQoCCgQBCiZZKtIJXSq8+zrbWWNk8f8aK1BCT4U3K95isdAOTtwYo3yCU
jvyJEVCtScYoqX9TI9f2L2NGZqhRzJNArYhrzQQckjP7fIwHph9ixPU9cC7HlRsj
UyUe6s9RyicXJx9EgVINsehrHfYIG34=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:42 2025 by rpki-client