Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec274f65-7c41-3493-8f9a-c42e78d25c55.roa
File:                     ec274f65-7c41-3493-8f9a-c42e78d25c55.roa (raw, json)
Hash identifier:          enBQGRbt1O5Q6hCAqQ297rpkBMoy+7N5sAaUVs2iMXk=
Subject key identifier:   49:81:23:5E:86:15:B8:F8:03:AB:D8:D1:9E:93:99:FD:4E:FC:C1:1A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49887F78D240031C4C8F48A7
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec274f65-7c41-3493-8f9a-c42e78d25c55.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.26.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:7f:78:d2:40:03:1c:4c:8f:48:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=87fd3041-8cd6-435a-8172-674c4d50633c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:5a:3f:78:b1:f7:81:50:27:13:0a:73:b4:
                    34:70:1b:cc:86:c1:76:6f:1f:b7:62:be:c8:65:97:
                    dd:c9:9c:73:e1:89:0f:46:2b:ca:13:74:15:69:af:
                    5b:1d:49:c3:1d:7e:76:ef:52:c6:cb:51:a6:12:1e:
                    65:f1:ea:77:8d:23:2a:dc:5b:b3:d8:20:69:94:46:
                    42:32:bd:45:17:66:0c:a6:5d:7a:48:da:50:c3:b3:
                    17:fc:38:dd:77:0d:4e:cb:93:34:67:9f:5a:3b:12:
                    52:c9:27:41:03:60:16:d8:8a:1d:8e:c3:87:71:9f:
                    73:b5:88:88:4c:72:6d:52:58:38:dc:8a:67:c0:fa:
                    76:5d:8b:9b:ac:e7:e6:dc:42:75:b3:6e:06:d3:63:
                    f0:f7:84:9d:34:9c:4f:8f:c0:8c:3e:2f:32:ef:57:
                    f5:2a:39:d5:59:38:01:09:17:84:3f:fb:55:0f:36:
                    35:1b:4f:38:a3:55:3e:77:09:ff:6f:fa:4b:5f:2a:
                    55:be:16:36:62:ab:d2:f2:ce:c4:ab:53:3e:58:2c:
                    44:84:0b:67:11:86:0d:c4:d6:75:f0:40:77:e9:6b:
                    72:ee:96:e3:15:85:80:82:be:04:1a:24:61:84:cb:
                    01:38:ae:96:3b:1b:e0:31:d3:b8:f1:c2:ff:60:28:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:81:23:5E:86:15:B8:F8:03:AB:D8:D1:9E:93:99:FD:4E:FC:C1:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec274f65-7c41-3493-8f9a-c42e78d25c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:71:f1:bf:24:46:be:3c:b3:36:50:0c:9b:95:f1:fb:7e:95:
         46:58:6d:bc:ca:a8:7a:47:a4:56:f9:bc:e7:fa:d0:f5:1c:cc:
         de:da:5f:5b:d9:e7:34:5d:4c:e7:6c:9d:10:f2:e9:69:a0:ef:
         ac:09:e6:58:a6:41:4a:0e:a2:16:9d:a7:85:2e:86:94:1e:12:
         73:a5:89:af:25:97:a2:71:e0:4b:5a:c9:02:2f:cd:65:c3:cd:
         c6:73:93:1d:c8:92:24:76:81:57:93:0a:51:57:0a:a1:ef:95:
         d1:56:20:b3:9e:22:62:df:06:48:4e:20:f0:b3:32:4c:96:3f:
         e3:5f:66:51:54:4b:70:4e:8c:79:2d:c3:a6:79:aa:d1:94:cf:
         82:2e:e2:f8:52:3f:dd:b0:d3:4d:28:9f:8d:96:db:1b:98:4b:
         7c:56:b9:de:49:f8:b6:e3:ea:6d:a8:dc:d5:ed:c2:fb:34:d1:
         60:9c:f4:99:fe:c3:c0:87:6e:10:2c:a5:4c:58:b5:66:ee:64:
         20:7c:b8:38:ba:48:80:55:fb:e8:15:d0:7c:b7:19:e2:de:1a:
         fc:31:eb:34:e3:99:c7:99:cc:7c:5a:40:50:4d:6d:29:30:a4:
         de:75:8a:bc:7e:20:ff:86:d0:13:ea:8d:8c:92:5d:f3:c2:9e:
         59:df:a1:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiH940kADHEyPSKcwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODdmZDMwNDEtOGNkNi00MzVhLTgxNzItNjc0YzRkNTA2MzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrhaP3ix94FQJxMKc7Q0cBvMhsF2bx+3Yr7I
ZZfdyZxz4YkPRivKE3QVaa9bHUnDHX5271LGy1GmEh5l8ep3jSMq3Fuz2CBplEZC
Mr1FF2YMpl16SNpQw7MX/Djddw1Oy5M0Z59aOxJSySdBA2AW2IodjsOHcZ9ztYiI
THJtUlg43IpnwPp2XYubrOfm3EJ1s24G02Pw94SdNJxPj8CMPi8y71f1KjnVWTgB
CReEP/tVDzY1G084o1U+dwn/b/pLXypVvhY2YqvS8s7Eq1M+WCxEhAtnEYYNxNZ1
8EB36Wty7pbjFYWAgr4EGiRhhMsBOK6WOxvgMdO48cL/YCjsxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmBI16GFbj4A6vY0Z6Tmf1O/MEaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWMyNzRmNjUtN2M0MS0z
NDkzLThmOWEtYzQyZTc4ZDI1YzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRoIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJx8b8kRr48szZQDJuV8ft+lUZYbbzKqHpHpFb5vOf60PUczN7aX1vZ
5zRdTOdsnRDy6Wmg76wJ5limQUoOohadp4UuhpQeEnOlia8ll6Jx4EtayQIvzWXD
zcZzkx3IkiR2gVeTClFXCqHvldFWILOeImLfBkhOIPCzMkyWP+NfZlFUS3BOjHkt
w6Z5qtGUz4Iu4vhSP92w000on42W2xuYS3xWud5J+Lbj6m2o3NXtwvs00WCc9Jn+
w8CHbhAspUxYtWbuZCB8uDi6SIBV++gV0Hy3GeLeGvwx6zTjmceZzHxaQFBNbSkw
pN51irx+IP+G0BPqjYySXfPCnlnfobQ=
-----END CERTIFICATE-----
Generated at Tue Oct 13 20:45:37 2026 by rpki-client