Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e98ae86a-917c-3d69-a0ae-4e174e0dd5cf.roa
File:                     e98ae86a-917c-3d69-a0ae-4e174e0dd5cf.roa (raw, json)
Hash identifier:          Lf4Dh4iQO2vM2tiak2lMxYoFydyoGI9pSpDHR+xOo9I=
Subject key identifier:   A8:F6:A2:0A:88:D2:FF:B5:D7:7A:22:6C:E4:79:F4:1C:D6:AD:A8:01
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D20AF4808D9D419B5B3630450
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e98ae86a-917c-3d69-a0ae-4e174e0dd5cf.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.26.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:48:08:d9:d4:19:b5:b3:63:04:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=87e2f47c-8276-49e9-8f6e-536972dfd8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:a4:08:6d:15:95:23:02:39:21:29:b2:e0:
                    52:5d:bf:16:6b:90:24:51:c3:f9:1e:74:5c:99:20:
                    e7:de:12:4d:e0:3c:0b:9c:8d:54:b3:65:fd:13:bc:
                    da:1a:2e:f4:2f:1a:39:a2:73:ff:4f:96:1c:e5:68:
                    73:dd:1e:59:db:27:90:05:57:62:96:9a:b6:c2:ea:
                    ba:8c:83:a5:a3:45:1b:28:c4:2e:a8:71:48:86:73:
                    98:02:70:b1:48:bb:b9:fd:90:77:d9:41:6e:9a:76:
                    f2:b8:7b:6b:5e:16:44:3d:df:57:43:15:c4:76:d1:
                    36:d4:10:98:1a:35:46:b0:9d:e4:03:0d:e2:bc:ce:
                    cd:8b:41:3a:15:72:bd:97:51:59:6b:17:9f:13:f6:
                    17:04:7a:6a:d9:2a:8d:6c:94:52:e5:86:c9:3b:69:
                    44:52:fb:59:d8:39:83:ec:8b:90:b8:03:ba:64:d4:
                    93:c5:4f:6e:0a:ad:56:a3:a0:ef:3f:73:46:e1:06:
                    fb:7f:ed:56:a0:76:63:a2:67:74:be:8a:a2:07:7d:
                    4f:cc:57:d3:37:66:ae:3d:35:ee:2c:cd:82:77:12:
                    03:3c:3c:27:ee:db:12:ec:e4:54:75:e0:23:ae:07:
                    7d:be:1a:18:ea:ce:72:ba:f4:3d:1c:e4:a0:57:eb:
                    6d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F6:A2:0A:88:D2:FF:B5:D7:7A:22:6C:E4:79:F4:1C:D6:AD:A8:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e98ae86a-917c-3d69-a0ae-4e174e0dd5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:94:d3:f3:f7:71:f8:20:b3:0d:9d:32:44:c1:63:fc:84:
         e1:8a:55:fd:f1:47:44:5c:43:97:1d:bf:a4:9a:eb:3c:b6:ac:
         0c:d2:7e:c2:00:1c:76:c6:f2:8f:c1:27:7b:a0:7b:7d:c4:48:
         61:f5:1e:cd:93:b1:10:44:e6:51:43:1f:62:02:04:2b:ec:34:
         2d:bd:3a:c5:ad:a9:bf:32:91:d5:15:72:4e:3a:b0:56:7b:ba:
         ff:79:4b:f8:2a:bf:cb:0a:d8:2d:5c:85:6d:07:01:1e:45:83:
         f4:b8:4b:1f:bd:c1:90:7b:ac:38:6e:02:0b:0c:73:4c:6c:91:
         69:a2:15:6a:91:de:9e:ff:6d:83:84:b8:e2:cf:10:52:de:9b:
         c5:0a:36:b9:92:fe:34:fb:55:3c:39:34:6e:5a:7a:4b:3f:5b:
         8f:eb:ef:6a:0c:ff:0f:bb:a9:34:d2:5a:8c:f1:99:5c:b3:fd:
         fe:c5:cc:ca:8c:48:60:8a:13:a9:c8:eb:7a:1a:26:9b:88:cd:
         43:ef:f3:52:7c:fd:0a:88:fe:91:0b:07:22:6a:76:40:78:e9:
         31:b9:12:1f:c2:38:69:20:63:09:cd:9b:45:f7:2c:d2:b5:cb:
         dc:51:fb:79:db:d2:9a:4c:67:8b:13:9d:02:76:ad:06:47:13:
         f4:a2:6b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:07:35 2026 by rpki-client