Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a39e022-3d32-35c8-84fe-b0d322477975.roa
File:                     2a39e022-3d32-35c8-84fe-b0d322477975.roa (raw, json)
Hash identifier:          sk19Tg/nH+SgTnyDx+ZZ8Neg/NUl6lDc5ua/sZvKy34=
Subject key identifier:   C9:BB:A3:A5:7A:86:A9:61:9E:98:F0:D2:AC:D1:78:65:0A:80:DE:45
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D143D3C025861774F6E4A64C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a39e022-3d32-35c8-84fe-b0d322477975.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        173.26.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:3c:02:58:61:77:4f:6e:4a:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=f16badf4-6517-4298-b9cf-ba739a22ed4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:7a:d1:15:b9:5b:02:97:d2:92:94:b4:e1:
                    11:72:3a:48:e2:0d:83:4d:a2:5a:e1:09:db:3a:d4:
                    67:2d:e7:7f:2b:74:6b:b1:9a:66:1f:fd:e8:ce:55:
                    3c:3c:20:5c:f3:63:67:65:b3:f4:c1:d4:96:17:2f:
                    2f:f5:2b:4c:21:0e:60:62:ed:fc:a7:14:a2:27:78:
                    bc:48:97:5e:8c:6f:55:ac:71:7b:6b:fd:1b:63:f6:
                    38:fd:d4:8f:60:8d:bd:b8:21:85:20:8c:e8:16:8f:
                    ae:60:c0:18:c9:bd:04:fb:44:d4:9b:67:7a:3b:88:
                    07:54:11:09:18:c3:b4:16:90:7c:dc:90:15:04:dc:
                    f9:a3:bd:01:07:23:89:e6:bf:87:1c:7a:18:4a:b3:
                    c5:ee:aa:c0:b4:1d:ca:86:cb:81:47:60:b9:99:91:
                    20:07:89:7d:b7:8b:e3:d7:1b:06:3f:1e:49:f9:82:
                    ab:47:d9:22:19:36:e6:cb:a5:90:57:98:1e:58:fb:
                    be:ea:b8:b1:c7:86:1a:bf:10:f3:ae:e4:3a:78:5a:
                    1d:df:28:21:b3:04:ae:1d:b7:9b:c9:04:3a:c9:b8:
                    ea:6c:8a:de:11:8b:08:34:3c:34:1c:06:1b:5f:81:
                    4a:cb:96:7a:58:7b:3b:31:d3:bf:7e:0e:1e:5b:49:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BB:A3:A5:7A:86:A9:61:9E:98:F0:D2:AC:D1:78:65:0A:80:DE:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a39e022-3d32-35c8-84fe-b0d322477975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:dc:d7:00:b8:c4:bc:1e:71:40:9c:ca:0d:7f:1c:b5:d7:f2:
         6a:04:17:4a:a7:f0:15:b4:32:6e:94:e5:72:2b:74:08:2a:5b:
         3b:7f:ce:6d:0c:37:6d:bf:49:2b:bb:8d:86:1d:39:17:79:58:
         51:c0:25:22:cc:f3:79:0a:12:b6:cb:7c:cd:dd:bc:ba:b0:c3:
         2c:95:6b:b0:af:6a:a6:b1:63:ba:6e:f9:bb:06:f4:ee:ad:75:
         03:fd:e8:8d:e1:30:64:98:fc:7b:49:e2:b8:89:bc:4a:b9:a4:
         a2:5c:c2:a5:3e:49:06:34:df:c8:ad:d2:eb:9b:90:d1:d9:e3:
         c3:31:78:97:fc:4e:b9:51:9b:38:d5:ad:a8:3e:ac:d6:e5:94:
         82:f8:86:46:14:19:e5:4f:2b:87:31:b8:85:37:4a:31:f8:50:
         ba:86:98:bd:f3:ca:c2:c7:7c:59:a6:b5:eb:71:5f:3d:52:04:
         b4:ac:61:21:9e:83:f3:51:be:22:0e:42:38:3d:cb:e4:57:ef:
         d3:fa:bb:ee:12:2c:8f:6a:31:c9:87:05:bd:b8:52:64:74:ba:
         4a:54:a9:3a:6f:a0:63:01:11:17:19:7d:b1:f7:41:05:e0:ae:
         a3:ad:f5:ae:a0:a3:22:b1:d4:2d:9a:ca:70:54:bc:22:71:c7:
         e1:35:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:46:29 2026 by rpki-client