Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3d647b0-062b-32c5-b968-61a8455efc53.roa
File:                     d3d647b0-062b-32c5-b968-61a8455efc53.roa (raw, json)
Hash identifier:          YkO+g93P47L7MY9eLWJRF6qqhkMiG3vTmsr0xgo5CZE=
Subject key identifier:   28:29:D1:A1:26:1E:77:DE:62:5E:27:9F:14:1A:0C:83:0A:A2:EB:32
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584ED8648337418EB0A36027A980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3d647b0-062b-32c5-b968-61a8455efc53.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        173.26.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:83:37:41:8e:b0:a3:60:27:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=fcaa92af-6ebc-403f-81aa-ec90a78e664e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:39:e1:72:b9:ee:8a:9e:b4:d5:77:b4:0c:0c:
                    ce:73:9d:16:0e:3c:88:65:5f:2e:c2:9b:27:e9:91:
                    3f:fa:35:d1:df:2c:ab:83:89:e4:f3:c2:ef:af:1a:
                    eb:99:d6:26:34:5b:d5:1f:30:11:43:74:90:45:09:
                    46:ea:4d:8e:76:3f:f9:0e:6c:33:09:6f:e1:ff:8d:
                    2a:cb:28:40:f0:bf:7e:5e:71:7a:7a:ea:38:0f:ed:
                    d8:48:04:18:4c:23:a2:1a:c0:f3:4f:11:c4:e6:a8:
                    96:97:5b:d3:34:e0:00:37:d8:c7:17:7f:33:ea:8f:
                    16:2c:3f:10:95:57:3e:43:ed:54:88:0c:ae:6d:b4:
                    8a:22:58:e0:71:f6:7d:cf:4d:44:47:d1:71:14:6d:
                    a7:af:eb:49:7b:0e:38:5d:ad:1b:93:2e:7b:67:4c:
                    10:d2:5d:35:83:14:b4:87:9d:f3:c7:fb:f2:b6:3b:
                    44:e5:ef:77:b5:84:d6:83:01:e5:78:da:b7:a6:f6:
                    23:67:81:93:99:3a:4d:2c:92:f6:1d:d0:7f:1b:e1:
                    6e:63:96:6c:e0:3f:21:89:ea:74:3a:71:3a:d0:37:
                    a5:0c:c4:33:45:65:fa:f7:2f:f7:45:16:10:99:6b:
                    ab:f7:20:a1:0e:c7:87:f6:72:69:66:7e:ae:68:0b:
                    8c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:29:D1:A1:26:1E:77:DE:62:5E:27:9F:14:1A:0C:83:0A:A2:EB:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3d647b0-062b-32c5-b968-61a8455efc53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:6a:2d:ab:85:0f:35:bc:76:91:0b:a1:08:93:fe:37:85:
         14:8b:60:a2:7b:ce:5a:7e:11:c7:3b:49:93:3e:51:38:d8:93:
         38:88:74:05:2e:cd:18:43:0c:93:18:62:11:a2:85:62:e4:7e:
         1b:0d:0e:44:c9:31:7c:0a:23:85:38:40:c2:d7:85:21:7f:55:
         7e:d3:cb:b1:39:36:92:9f:2b:93:91:84:36:c0:80:03:bb:97:
         bf:3e:27:9d:87:15:5a:c7:f9:a0:ff:8b:e1:1d:9b:f9:7d:a0:
         73:cf:7b:0b:34:92:b4:72:54:70:63:1b:0f:a8:a9:2e:ff:cf:
         f1:81:d1:1c:46:4b:b5:45:f7:57:89:45:4b:12:93:96:f9:bb:
         cf:1a:f4:ac:f6:3b:0e:7b:57:26:1b:71:f1:ba:e9:c9:c7:37:
         eb:ca:48:27:c3:66:55:53:2e:74:96:56:a8:c6:84:0e:bc:43:
         54:68:2e:8c:0c:91:37:ff:e2:64:81:62:5c:0a:3c:19:7c:7d:
         a6:e6:1f:1d:88:aa:85:c4:31:36:f8:ae:a1:9b:1c:1e:99:8e:
         9f:6a:64:67:71:94:51:7f:f2:63:e5:8d:c2:05:90:bc:10:8b:
         a3:92:0b:4d:90:7b:be:c8:5c:06:e1:ee:19:09:3b:64:23:60:
         1f:80:1b:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZIM3QY6wo2AnqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
ZmNhYTkyYWYtNmViYy00MDNmLTgxYWEtZWM5MGE3OGU2NjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Dnhcrnuip601Xe0DAzOc50WDjyIZV8uwpsn
6ZE/+jXR3yyrg4nk88LvrxrrmdYmNFvVHzARQ3SQRQlG6k2Odj/5DmwzCW/h/40q
yyhA8L9+XnF6euo4D+3YSAQYTCOiGsDzTxHE5qiWl1vTNOAAN9jHF38z6o8WLD8Q
lVc+Q+1UiAyubbSKIljgcfZ9z01ER9FxFG2nr+tJew44Xa0bky57Z0wQ0l01gxS0
h53zx/vytjtE5e93tYTWgwHleNq3pvYjZ4GTmTpNLJL2HdB/G+FuY5Zs4D8hiep0
OnE60DelDMQzRWX69y/3RRYQmWur9yChDseH9nJpZn6uaAuMNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgp0aEmHnfeYl4nnxQaDIMKousyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDNkNjQ3YjAtMDYyYi0z
MmM1LWI5NjgtNjFhODQ1NWVmYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRrYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6Yai2rhQ81vHaRC6EIk/43hRSLYKJ7zlp+Ecc7SZM+UTjYkziIdAUu
zRhDDJMYYhGihWLkfhsNDkTJMXwKI4U4QMLXhSF/VX7Ty7E5NpKfK5ORhDbAgAO7
l78+J52HFVrH+aD/i+Edm/l9oHPPews0krRyVHBjGw+oqS7/z/GB0RxGS7VF91eJ
RUsSk5b5u88a9Kz2Ow57VyYbcfG66cnHN+vKSCfDZlVTLnSWVqjGhA68Q1RoLowM
kTf/4mSBYlwKPBl8fabmHx2IqoXEMTb4rqGbHB6Zjp9qZGdxlFF/8mPljcIFkLwQ
i6OSC02Qe77IXAbh7hkJO2QjYB+AGzQ=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:44:08 2026 by rpki-client