Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7263f64c-6c05-3c16-bf8a-8bc15d875344.roa
File:                     7263f64c-6c05-3c16-bf8a-8bc15d875344.roa (raw, json)
Hash identifier:          aOSBh9FqT/pDos9Y72WAzFQmthMaVNxqV4+Y5Y8lgC8=
Subject key identifier:   A7:3A:4E:1B:9A:39:D7:EB:7C:30:4F:DE:F8:D2:36:FF:83:98:C1:72
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D932568AC77C9C708F2E9D440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7263f64c-6c05-3c16-bf8a-8bc15d875344.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        173.29.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:68:ac:77:c9:c7:08:f2:e9:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=3f40044f-1800-45c9-9212-49fac09d4067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:43:0e:fd:68:02:28:56:8f:a0:16:1a:4f:d4:
                    da:ef:51:52:e2:7c:a0:2b:5b:1d:f0:1d:0f:19:d8:
                    15:d6:fa:b5:9d:ee:3e:45:30:e1:12:39:b3:27:8a:
                    77:c4:ff:71:6f:95:0c:f0:da:b3:7a:92:26:ee:44:
                    8e:4b:b5:63:11:9e:98:47:d2:64:96:7e:d4:2b:3e:
                    61:29:b5:65:46:d7:46:39:e5:d3:98:a0:7e:fe:d9:
                    68:e7:b2:4a:38:3e:03:9d:a8:be:e8:3b:c0:5e:db:
                    ac:36:05:56:a9:16:f8:cb:c6:26:ab:e4:cb:21:73:
                    7b:f1:93:d3:49:44:07:14:0f:88:34:66:b8:90:73:
                    0f:6e:63:90:d8:e7:8e:d1:70:ea:87:40:42:8d:6f:
                    ee:32:94:36:32:4a:c9:b9:fb:47:6d:19:55:8c:c3:
                    a3:24:f9:f0:13:24:38:56:0c:2f:0a:29:4b:21:9d:
                    ba:1b:6d:89:1e:09:a3:c2:df:fb:48:81:e3:d1:41:
                    56:54:ea:a1:06:01:06:04:05:f9:3d:bd:64:ae:80:
                    6b:f2:f0:49:9d:91:f9:b4:b2:99:eb:78:12:2a:c5:
                    0f:84:09:da:df:bf:eb:17:37:8c:2b:4f:91:a3:25:
                    4b:cf:a2:da:2a:22:aa:df:75:de:03:be:1f:13:fd:
                    55:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3A:4E:1B:9A:39:D7:EB:7C:30:4F:DE:F8:D2:36:FF:83:98:C1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7263f64c-6c05-3c16-bf8a-8bc15d875344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:17:b1:27:97:69:6b:34:27:cb:11:c3:c1:01:23:ff:e0:ad:
         26:c3:7a:81:6f:4c:38:ad:18:2e:31:bd:fe:6c:ad:e3:91:34:
         cf:28:f2:78:8b:52:e4:ab:97:ff:a9:21:6d:c9:ce:02:a1:de:
         1e:a2:f9:9e:ed:dd:2f:e1:91:0e:53:22:32:cc:a9:d4:85:a1:
         fa:c0:39:b5:bc:86:2b:eb:70:0d:04:43:92:30:ef:15:31:ca:
         1a:92:e5:21:85:d1:f7:fd:6b:33:09:be:4f:fa:5e:8a:d1:07:
         8e:e3:ed:88:d6:ca:81:66:ab:af:c7:dc:4a:34:65:c6:17:35:
         6b:f3:37:98:d3:f3:4e:61:7c:d7:6a:d0:e0:23:9a:10:d0:17:
         ed:48:49:d0:c8:05:03:d5:e2:e4:d4:6b:01:df:b5:e3:0f:70:
         44:b3:8f:4b:94:06:b2:94:56:5b:19:d2:40:8c:44:1c:88:f1:
         4d:f2:6d:fa:f0:6c:2f:00:26:9a:89:59:0b:54:74:c2:30:74:
         15:53:aa:94:8b:82:85:74:65:71:2a:d9:54:e9:3a:90:ca:ea:
         af:36:49:41:50:c6:93:69:56:c8:cf:5e:e7:b4:2f:d4:89:e5:
         5f:2c:3e:7f:94:e3:7d:e4:a4:0c:ea:39:86:e9:5d:83:99:79:
         01:c7:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:27:59 2026 by rpki-client