Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1190f95f-2ead-3204-bf72-69356a7fa645.roa
File:                     1190f95f-2ead-3204-bf72-69356a7fa645.roa (raw, json)
Hash identifier:          qjIvLyfgX1ztBIpTySX+QEJufezv9puhUBW4M7nZoaU=
Subject key identifier:   B5:8F:87:EA:EC:C8:59:34:F4:A9:D0:6E:C1:87:4D:FD:CC:44:5F:47
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410C731D08D4C1A023EA2C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1190f95f-2ead-3204-bf72-69356a7fa645.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.26.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c7:31:d0:8d:4c:1a:02:3e:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=22374cdb-9eb4-40d4-b91b-be57bee17051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:aa:27:ff:70:86:6c:bb:f3:50:64:1b:28:93:
                    ae:49:97:af:64:62:4e:ba:74:df:b5:35:bf:0e:65:
                    9b:a2:ac:a5:80:98:ad:d6:d2:b4:ba:80:c4:61:81:
                    4a:94:92:33:a1:53:c2:ba:36:9c:9c:3d:8b:72:09:
                    d2:08:9e:f2:10:3e:bc:45:6c:8c:f4:b7:b2:59:06:
                    86:2a:3e:c4:00:6f:71:16:1f:a9:6e:c9:29:6e:92:
                    47:b2:ff:ea:29:9b:f5:a3:1e:79:dd:57:a7:40:51:
                    db:45:26:fa:9c:aa:db:55:4a:fc:e8:2d:29:5c:cc:
                    e9:7e:e7:33:09:08:e7:d6:64:be:d2:a0:7d:dc:88:
                    cc:65:92:12:53:6f:9a:96:f5:2b:3e:d1:de:fe:b1:
                    d2:34:d9:54:da:d0:5e:92:d3:f9:f9:7c:96:03:81:
                    53:79:75:6a:70:ea:dd:cb:ab:47:8f:75:4d:ed:71:
                    81:99:1d:b1:7c:43:e2:eb:26:86:d7:cf:2c:cb:94:
                    82:fd:d5:34:32:d1:91:7f:fb:f2:e7:3b:94:3b:5d:
                    94:52:40:c1:3c:62:26:ae:d3:a2:17:0f:43:ed:44:
                    0f:db:3e:01:bb:8b:5d:c5:8d:9e:81:43:db:fb:c2:
                    b8:0c:4d:6b:98:06:15:0b:3c:05:04:5b:a6:de:03:
                    da:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8F:87:EA:EC:C8:59:34:F4:A9:D0:6E:C1:87:4D:FD:CC:44:5F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1190f95f-2ead-3204-bf72-69356a7fa645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e7:63:a3:81:46:55:e7:dd:0a:53:3c:2d:75:2e:6c:d4:05:
         09:03:cd:d5:03:fe:de:55:38:f2:b9:71:9b:f0:ef:e7:fa:d1:
         ba:a4:d2:e6:9d:de:fb:67:6e:74:dc:3a:c1:46:46:f2:85:46:
         a5:35:40:6f:9b:12:b9:e1:1e:97:b7:2c:0b:85:ae:4d:66:85:
         f3:84:fe:7d:63:ef:a0:1d:1f:17:83:aa:51:5c:2e:01:0f:80:
         2c:21:07:bf:e9:6f:c6:c0:32:a9:85:72:2b:b3:5b:ed:41:6d:
         36:0e:6f:6e:36:ff:fc:23:bf:44:fa:7f:93:7c:2e:bd:ca:8c:
         8f:3d:9b:41:3b:89:4d:d7:7d:c2:e1:50:ff:d2:db:20:95:7d:
         04:c4:49:5b:17:6b:80:3a:87:a1:e3:b8:18:e3:45:8a:33:37:
         20:b9:d6:a0:18:bc:92:c5:d8:74:32:bd:31:fe:d6:ce:34:dc:
         cb:73:31:23:b2:20:3e:54:6f:29:4a:4b:b2:aa:fa:88:a2:ce:
         8b:c7:5e:e1:7a:b9:51:75:c4:23:4c:2a:3c:b0:cf:e0:81:d6:
         c4:f0:7d:74:03:87:13:e9:ef:41:d8:e7:50:10:19:1f:9b:a0:
         d9:aa:51:f8:d6:84:c8:46:6a:1e:c9:67:13:74:58:f7:53:19:
         5e:39:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:38 2025 by rpki-client