Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf815dfe-f701-357c-bd7d-0655cc725531.roa
File:                     bf815dfe-f701-357c-bd7d-0655cc725531.roa (raw, json)
Hash identifier:          wp9TmnqtW3BcUaw1tScMmtCZ7aflW1ZPeFKgSa2Prh4=
Subject key identifier:   D4:0A:47:DF:07:33:6D:24:A8:4E:F0:8D:8C:41:3A:54:21:20:4B:9E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E36018A8672969427D47ED200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf815dfe-f701-357c-bd7d-0655cc725531.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     19905
IP address blocks:        173.26.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:8a:86:72:96:94:27:d4:7e:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=7dffcf67-b2ae-404b-bd61-7c2976a01c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0b:05:5c:aa:25:c7:cf:f8:aa:fd:04:70:df:
                    21:56:04:a1:eb:b5:43:90:00:03:f5:f5:5b:82:01:
                    7f:5a:a9:b9:59:4f:05:ab:05:0d:ad:fc:3c:2f:6c:
                    00:67:2f:40:6a:ce:2d:73:3e:09:e2:93:5c:91:02:
                    26:88:58:66:58:54:52:8d:97:1e:1c:58:24:51:94:
                    bc:0e:1d:0f:ac:87:a7:f7:d8:95:f9:7d:cf:7b:94:
                    8b:ac:c9:7d:73:1c:9a:29:cc:31:e2:14:f0:8b:77:
                    16:ea:3b:73:f8:28:da:86:ee:12:e8:d2:20:b4:ba:
                    7f:bf:33:0f:a3:a7:0a:9c:29:58:4c:f1:a0:2e:35:
                    bd:d3:70:09:69:9e:6a:4e:df:81:89:a0:e1:68:2e:
                    6f:8c:a8:e4:b5:8b:75:c0:fd:37:a9:79:6d:a0:d9:
                    c5:fc:c4:72:9e:9e:74:69:d3:d6:e9:20:3b:2c:f4:
                    86:74:90:50:5e:02:c8:83:87:40:d4:18:ed:80:52:
                    14:d0:a6:39:d1:d7:92:46:62:70:95:46:11:41:06:
                    26:28:48:32:46:e0:78:df:d8:82:43:31:12:81:33:
                    50:83:db:cb:c6:54:2f:c4:13:5f:9a:96:66:16:02:
                    a8:97:c0:46:2d:3d:ad:26:67:80:27:21:7b:b4:9e:
                    ac:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0A:47:DF:07:33:6D:24:A8:4E:F0:8D:8C:41:3A:54:21:20:4B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf815dfe-f701-357c-bd7d-0655cc725531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0a:9c:1d:f2:d0:ec:ab:fe:da:ab:34:7f:62:09:98:fb:9c:
         1a:27:e4:f6:7f:d9:ba:8c:54:21:e5:ad:fd:a3:52:ad:3b:61:
         ea:81:07:75:46:a6:c1:07:ab:eb:de:73:d3:a7:e9:65:55:62:
         76:43:e3:42:f4:7d:55:91:3a:ee:80:91:2c:26:4b:93:38:b3:
         c9:f0:7c:3b:7e:ff:f8:d9:3c:61:d2:04:53:54:2a:c2:e6:2f:
         92:6a:6a:ad:a6:74:30:f6:23:3f:3d:61:47:3a:03:98:ab:76:
         51:1d:33:96:10:21:7f:e3:a8:91:ae:aa:86:13:12:cb:a4:fe:
         fe:1a:fc:8c:96:25:08:e3:8c:43:f9:e8:2b:6c:18:01:5b:ac:
         9f:f7:2c:18:f5:80:cc:b8:8e:53:d8:3c:17:ae:91:13:89:bd:
         4d:a3:88:64:ea:aa:a6:65:e0:ec:39:e9:29:76:ab:78:9d:b1:
         ef:b7:42:75:33:a7:04:23:64:b7:65:95:35:ea:dc:5a:6a:d8:
         67:9f:7a:68:30:55:8a:88:f7:3c:6e:71:9e:dd:d7:5a:a4:d1:
         ff:09:cb:35:d8:72:cd:ae:ba:00:7c:09:40:ef:25:f4:42:71:
         09:d2:89:8e:18:1c:0b:ad:83:35:4f:5a:06:09:f1:29:93:a5:
         11:02:07:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 05:34:24 2026 by rpki-client