Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc206857-803d-3437-9ae4-2b084fa68ca0.roa
File:                     dc206857-803d-3437-9ae4-2b084fa68ca0.roa (raw, json)
Hash identifier:          pHYe7jUwIHMo6fFGRZZqDEVaD1ghvh6nwxlS3I9Eb2M=
Subject key identifier:   81:AF:5D:79:8A:03:02:5F:8B:A3:42:51:A9:85:BF:4A:5A:7E:4B:7C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1F4A3CF9E8592E18CC09DC80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc206857-803d-3437-9ae4-2b084fa68ca0.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        173.26.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:3c:f9:e8:59:2e:18:cc:09:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=4239dc5b-966e-42d9-ac50-78f0bbba478e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:0c:5f:16:3a:3c:84:b4:1d:4e:e7:89:cd:
                    f9:5f:85:d1:67:7a:90:bc:b5:41:cc:ff:6f:40:67:
                    2a:ac:f4:87:31:e1:39:5a:bc:14:d9:e4:8f:54:3e:
                    6a:83:6a:12:d6:31:66:35:d0:95:b9:11:b8:03:37:
                    c1:07:bc:08:59:df:50:e0:f1:80:7a:f8:fb:c1:70:
                    0b:81:a7:eb:f1:b8:70:db:e5:bd:b9:b3:0c:be:68:
                    26:32:ef:24:d1:5f:48:a0:99:bf:c4:43:fc:36:ce:
                    37:be:a5:16:49:84:d7:30:4f:06:60:fa:07:00:5e:
                    39:6f:db:56:69:52:c1:07:25:33:37:39:9e:37:b9:
                    e7:94:c9:75:10:52:4d:6a:c8:ae:04:a3:33:a1:69:
                    d3:fe:8d:0d:27:e9:49:f4:2b:82:bc:7f:96:2f:cd:
                    66:89:b9:7b:f5:8e:b6:95:a2:69:4f:76:0d:b9:25:
                    2f:b7:0a:8a:eb:66:92:0d:eb:25:ac:54:bc:45:9c:
                    65:aa:55:f1:29:0a:89:32:8f:5f:88:23:d3:88:b0:
                    1a:1c:fc:06:53:31:21:91:75:a4:4a:0e:c4:e4:42:
                    57:74:ba:9e:96:53:36:05:9b:99:3a:73:e9:44:b6:
                    19:c7:fe:72:ec:86:64:a2:eb:21:57:63:ee:ac:58:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:5D:79:8A:03:02:5F:8B:A3:42:51:A9:85:BF:4A:5A:7E:4B:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc206857-803d-3437-9ae4-2b084fa68ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a3:c8:46:6b:55:87:38:74:ea:fc:8a:79:a4:2a:bb:f2:59:
         fb:d9:96:6d:34:ca:c0:b6:70:46:1f:dd:16:88:8a:9d:cf:64:
         79:fe:70:3f:60:10:6a:e0:58:64:3e:71:23:32:13:90:05:56:
         a2:27:f2:a5:db:d1:3d:ef:33:b6:e9:21:95:db:e6:47:2a:63:
         e2:0b:ef:24:b4:e6:1e:dc:c7:f3:9d:17:8b:17:e1:89:b6:84:
         d9:89:33:b6:c5:cc:fc:55:3c:a0:29:50:16:0b:7a:f6:76:16:
         dd:22:08:50:23:48:2d:b3:e4:8b:60:85:9c:12:8e:f3:58:d9:
         42:12:81:0d:fb:c2:4e:5d:50:ff:df:55:6a:8e:01:8f:48:4a:
         4e:98:dd:89:c7:2c:e4:c8:2e:86:ad:e8:91:0d:59:c6:99:10:
         ca:e4:03:d0:e2:2e:03:c9:1a:c9:08:41:5d:44:77:68:bf:8d:
         71:6d:42:25:11:43:7c:8c:27:4c:cb:63:03:3c:48:42:b6:a4:
         bd:dc:4a:21:e9:d1:77:ec:6c:6a:7a:48:68:c3:f8:63:85:1d:
         8a:1b:a7:8e:4c:0a:ff:86:5b:46:48:89:ef:6b:fb:d9:36:55:
         83:e8:23:4d:13:b1:33:1a:bb:ef:9e:43:ce:62:23:4c:62:d2:
         cd:00:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:06:52 2026 by rpki-client