Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0bcde74-9c0f-3290-971f-4c21fdbcb47e.roa
File:                     b0bcde74-9c0f-3290-971f-4c21fdbcb47e.roa (raw, json)
Hash identifier:          VcR+w+4my7Z+7dvcfJyy8OO7Z8hM7Te6i1BVvPvDu20=
Subject key identifier:   A2:D4:EF:3A:7E:D6:02:0A:B0:A3:F6:58:25:78:20:D7:6D:2B:86:89
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4974E4A3852748EDB2D186E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0bcde74-9c0f-3290-971f-4c21fdbcb47e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.26.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:e4:a3:85:27:48:ed:b2:d1:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=60524162-b727-49f6-befa-2a661ad01cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:c9:b2:30:95:99:aa:b8:45:81:96:d7:23:
                    9a:83:37:cf:08:d0:69:5b:5a:b3:e9:a9:bd:00:30:
                    a1:3d:87:55:4a:09:dd:f8:25:5e:40:95:66:d5:5c:
                    e0:ff:c4:2c:38:5c:a4:a7:bb:c0:e0:da:a8:21:e3:
                    84:f4:d7:2f:80:cb:60:a4:7a:26:72:b5:c6:b3:56:
                    ce:cc:f8:28:2c:9f:df:8e:3b:78:63:85:9a:ec:7b:
                    6e:d2:2a:22:a0:dd:79:17:0c:07:98:67:e8:1f:2a:
                    86:e5:10:41:fe:a9:26:21:15:84:fc:e5:24:d4:25:
                    25:c6:a6:f6:67:82:67:20:ee:08:1f:51:ae:03:12:
                    de:33:9c:b0:34:53:90:64:8b:e4:d1:33:a9:89:1e:
                    ee:b3:fa:a2:b7:d4:b4:b8:c9:15:da:57:1b:66:e8:
                    f2:0e:5f:6f:20:17:ab:09:89:cd:e4:f5:7d:ca:cc:
                    b1:4b:f5:2c:be:b7:a7:42:e8:66:ec:60:e2:d5:69:
                    bc:01:69:e8:dd:78:78:20:e9:75:87:53:13:4e:81:
                    9c:bb:ad:cb:96:09:60:99:6f:80:58:6f:ce:f9:63:
                    ed:1a:81:b1:f4:5f:a2:3a:cf:19:1e:5f:8f:f1:97:
                    70:a9:04:21:aa:8c:2c:00:22:3c:b0:83:db:9c:fe:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D4:EF:3A:7E:D6:02:0A:B0:A3:F6:58:25:78:20:D7:6D:2B:86:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0bcde74-9c0f-3290-971f-4c21fdbcb47e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ed:5f:4a:e2:59:75:3f:35:02:2c:ee:c4:52:0c:93:7d:5c:
         e7:81:1b:2f:e4:61:38:04:a3:ab:95:3d:e8:83:68:a7:1c:17:
         20:83:d2:08:c1:f0:0e:16:e9:ca:38:72:af:a4:82:3a:94:bf:
         06:0f:9a:82:4b:80:41:3b:8c:8b:99:f8:46:28:25:dd:6a:f5:
         c2:0e:74:da:ff:66:e0:aa:9b:32:69:5d:e6:9d:3d:25:c6:99:
         37:f1:df:b6:ef:77:d9:31:ba:28:1b:10:33:27:bd:7d:9b:e5:
         63:0b:4b:f4:19:8f:38:ed:e3:67:2a:b4:f4:57:f2:95:98:9b:
         5a:e5:22:6f:19:36:47:58:eb:14:ef:14:ad:ca:5e:42:2d:65:
         0d:23:36:ff:2d:64:84:ca:04:9b:40:f7:b6:3a:94:12:50:be:
         3e:8c:ba:82:fc:7d:d2:c8:ea:b4:93:46:c4:b7:d4:35:57:8f:
         1f:98:b0:59:97:8e:88:d3:82:f2:a5:90:4f:14:c6:55:7f:0b:
         0e:81:01:6f:34:d7:ce:bf:51:30:93:aa:9e:e0:2e:4c:fc:bc:
         b8:8e:21:db:c6:ce:05:37:15:18:a3:54:56:69:5e:8c:77:04:
         88:a1:43:64:fd:fc:b9:25:fc:79:8a:49:7d:7d:cb:66:9f:5f:
         02:75:d5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:30:44 2026 by rpki-client