Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/217e8355-5cfa-332d-9144-06757c85c957.roa
File:                     217e8355-5cfa-332d-9144-06757c85c957.roa (raw, json)
Hash identifier:          O5aW/7OAIDpzFaUArOQjSdIuLm0mTsvbypaxEq7EwGQ=
Subject key identifier:   E1:22:74:67:28:9A:AE:0E:12:12:28:1E:74:95:90:94:9F:03:06:D4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B51120112FFC863911600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/217e8355-5cfa-332d-9144-06757c85c957.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.26.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:51:12:01:12:ff:c8:63:91:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=59e798b7-e8f7-4da2-8ebf-719650db0cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:8f:8e:d4:c9:19:5c:17:50:4f:c6:f3:fe:
                    32:fe:ac:7d:84:c2:34:4e:e5:f1:3d:ef:b1:8a:06:
                    5a:9a:76:9d:08:b1:f2:d5:d0:b3:13:57:ad:86:00:
                    dd:69:af:6c:e6:3e:78:93:73:46:1a:5e:5e:49:04:
                    25:d9:dd:1e:6f:78:3c:65:80:29:c0:01:29:e2:eb:
                    b4:93:64:96:48:82:82:8e:4a:e2:51:e3:52:d0:b2:
                    b0:e9:90:20:f4:f1:ec:e1:7e:cf:82:03:ee:10:e1:
                    33:f0:6b:c7:3b:3b:22:f9:c7:ea:9e:e9:f7:4f:37:
                    18:70:4d:c9:dc:87:ca:47:32:5d:a4:05:d9:72:97:
                    7d:03:d6:bb:d3:d6:ef:96:d3:22:70:40:38:32:77:
                    d6:39:20:09:49:29:50:18:a7:4c:36:a1:ec:ba:a7:
                    fd:43:a7:c8:75:6a:30:0f:65:cc:18:a0:cc:60:64:
                    92:c4:77:f5:48:dc:98:09:4f:a3:8c:35:a7:e3:39:
                    45:1d:a6:76:69:af:a1:03:32:7c:30:76:63:50:f2:
                    71:87:c4:a6:54:e9:6f:8d:92:fe:35:ee:96:a7:12:
                    ed:fa:78:b4:e4:6c:8f:f7:b0:ab:20:a3:85:45:98:
                    87:41:a4:33:28:e4:a1:6f:ba:31:28:2e:a3:18:10:
                    54:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:22:74:67:28:9A:AE:0E:12:12:28:1E:74:95:90:94:9F:03:06:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/217e8355-5cfa-332d-9144-06757c85c957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ac:a7:e2:ab:97:91:fc:54:77:a2:f2:be:22:14:99:39:89:
         5e:a0:1c:4a:07:50:a2:ed:a6:72:2e:bb:37:ff:44:ab:fb:9e:
         0a:4e:6c:71:65:78:49:9e:41:0b:4c:a1:a4:d6:03:8c:94:d4:
         76:0c:e0:19:e2:44:67:51:ef:15:7b:2b:51:27:55:8b:8a:4a:
         0b:8c:6d:64:0f:a2:fc:54:08:aa:02:20:42:4c:80:8a:6c:5d:
         d5:2a:f3:22:e3:11:78:88:27:f8:46:01:44:7c:0b:f6:91:02:
         df:8d:46:c6:30:fe:20:35:6c:03:0b:a4:1e:30:6a:c9:16:2f:
         16:8e:f1:e6:66:8a:a0:a5:36:0d:7e:b1:0f:8d:22:62:56:7c:
         77:0f:28:5d:b9:b2:a9:dc:2e:fa:d7:9a:7b:e6:7d:25:ad:23:
         ce:98:37:c8:53:53:c6:2e:93:bb:72:0c:5a:54:00:10:d0:90:
         97:19:c9:f4:2f:d5:1b:e3:0e:86:93:3b:e6:05:61:b8:c2:69:
         e0:c4:1b:63:b7:83:c8:a1:b5:a0:4f:2f:e4:8c:f2:74:69:38:
         a9:ae:34:09:3f:50:36:04:ee:9f:02:f8:88:3c:1a:dd:17:ac:
         9c:17:8c:41:86:9e:8b:4b:d1:b0:02:ad:b8:88:1c:4b:4d:7d:
         76:f8:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:46:31 2025 by rpki-client