Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10f7fd7d-0b6e-338f-8df8-a9e486e529f7.roa
File:                     10f7fd7d-0b6e-338f-8df8-a9e486e529f7.roa (raw, json)
Hash identifier:          Ehc2ScfsYPYlP+KG9BDOXCzfSa5mWjrTxXtwb15yWEI=
Subject key identifier:   85:FE:52:4B:03:8B:BF:2C:A0:4D:53:BB:8C:A2:6C:EF:68:67:B2:D6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059C60E6D873C4A203F57540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10f7fd7d-0b6e-338f-8df8-a9e486e529f7.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.26.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:60:e6:d8:73:c4:a2:03:f5:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=3d6b2275-7363-4c7c-9cb5-998da4120d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:bb:22:da:a8:dd:22:51:d0:50:8b:42:ee:
                    c3:c0:a6:c9:ba:fc:55:d2:f9:24:4d:50:2b:14:cb:
                    0c:f4:65:06:f2:60:e5:78:66:d3:05:75:f9:b8:d3:
                    75:e8:ac:4d:b2:32:f6:85:b6:eb:67:a8:47:49:01:
                    06:d9:c5:ee:6e:be:91:4f:02:ef:f6:23:2b:8b:fd:
                    6c:01:6c:b0:23:09:ee:f6:8b:43:c3:b2:e8:c9:12:
                    7a:05:b0:91:88:6d:0f:7b:8b:f2:56:04:56:ac:d5:
                    37:6b:42:ff:8e:7d:b9:2e:47:1b:fe:e0:ad:ff:43:
                    40:c4:cc:d3:fc:b4:ee:09:e2:1e:79:de:f2:27:06:
                    ee:08:e7:2a:01:88:0a:3f:64:14:88:cd:cc:5c:40:
                    f0:90:b7:b6:59:28:5d:51:a6:38:bb:2d:33:e6:a4:
                    7e:04:53:16:c0:70:f7:55:ef:dd:19:f3:60:df:f4:
                    02:ac:a1:14:23:aa:91:b9:21:3b:7c:56:9b:47:99:
                    1b:4f:35:ff:95:41:ed:35:ef:21:59:0a:07:8c:ac:
                    c4:a1:b2:e6:ae:c4:17:ed:e3:e3:b5:8d:92:85:28:
                    11:f9:1d:7f:63:e8:3f:03:ad:82:5f:89:2f:ed:5f:
                    7c:2e:04:80:42:3c:d4:20:00:e5:b6:9c:98:5b:45:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FE:52:4B:03:8B:BF:2C:A0:4D:53:BB:8C:A2:6C:EF:68:67:B2:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10f7fd7d-0b6e-338f-8df8-a9e486e529f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7f:a9:a3:17:9a:37:f5:b7:df:4a:9d:37:f6:e8:25:3d:dc:
         38:ba:65:03:69:cc:a2:ed:0f:42:0c:9b:e7:25:43:e3:de:82:
         a2:b5:36:4e:6c:26:ad:65:89:ee:62:4e:e8:37:e4:56:6d:c6:
         46:8f:8e:e6:06:b0:e2:f1:e2:da:8d:32:0e:e5:29:81:06:d4:
         39:eb:ab:87:63:70:91:5d:cb:a0:a9:41:7a:e4:4e:e8:ad:98:
         3e:db:6e:cb:46:1e:f4:42:c3:a9:6e:c5:c6:6b:36:c3:4d:08:
         80:cb:81:9a:17:6f:2a:8f:cc:b5:70:c2:72:20:f9:81:27:c3:
         83:89:f0:10:91:92:1d:2f:75:01:22:b7:2f:35:0b:f5:53:6b:
         f6:a9:1a:6d:90:7c:e1:0b:06:2f:cb:52:e1:4f:f6:48:f7:c3:
         26:57:f5:d4:ee:f0:65:33:dc:8a:2e:ad:d9:a1:3a:6b:d0:d3:
         79:86:98:8d:e4:ee:75:0c:b0:94:e8:3f:62:d1:5d:cc:4d:98:
         bc:4b:1f:64:0b:94:2e:ba:bb:c9:97:fa:4c:f9:9b:35:ed:00:
         b7:ae:45:05:df:ad:b1:32:83:ce:17:e0:26:98:50:e8:31:00:
         4b:5b:22:0e:3e:a1:aa:3c:61:2e:44:d7:de:82:8a:83:0e:f5:
         7e:d3:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:23 2026 by rpki-client