Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/13e35cd3-82b3-39b6-be75-9a1fa5ee7335.roa
File:                     13e35cd3-82b3-39b6-be75-9a1fa5ee7335.roa (raw, json)
Hash identifier:          t/d6o13vFiw9xSktQjWCg7UHEwhWdVGZM4Eu+sk3Y4o=
Subject key identifier:   10:26:18:C9:B4:57:FF:E3:7F:92:84:44:F5:7F:06:A9:DD:C5:D5:4A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CED40F8E841AA9116112DEE80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/13e35cd3-82b3-39b6-be75-9a1fa5ee7335.roa
Signing time:             Fri 20 Feb 2026 14:52:08 +0000
ROA not before:           Fri 20 Feb 2026 14:52:08 +0000
ROA not after:            Thu 21 May 2026 13:52:08 +0000
asID:                     30036
IP address blocks:        173.23.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:40:f8:e8:41:aa:91:16:11:2d:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 20 14:52:08 2026 GMT
            Not After : May 21 13:52:08 2026 GMT
        Subject: CN=33f79c0e-ce32-4b54-90c9-08114ceac605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:99:95:a2:fe:9d:bd:68:16:18:ed:e6:d1:
                    53:05:63:bd:e0:6f:d6:a6:cc:63:f2:b4:f6:b4:76:
                    36:44:b3:95:d8:7f:5b:e3:88:b1:91:80:34:b9:34:
                    05:64:93:fa:9c:13:36:52:44:99:cf:ad:5c:f6:ce:
                    de:11:df:a6:76:79:9c:1a:84:24:43:3a:c1:80:9b:
                    2c:62:94:0e:11:ff:45:13:f9:e8:c2:ca:37:48:47:
                    ad:0f:5a:2d:b5:50:99:95:ef:5a:e9:47:26:1f:85:
                    68:af:ab:4d:60:56:11:46:f1:8e:7e:bd:81:31:db:
                    79:22:64:0c:7d:f4:ba:04:98:18:64:32:09:e0:91:
                    21:76:e3:c8:e7:75:b0:69:85:01:26:50:ad:d4:5f:
                    9a:f5:ff:91:64:8c:58:48:c9:f0:31:b0:14:1f:78:
                    71:07:a4:02:51:aa:b4:07:54:71:03:f5:17:e4:d3:
                    c3:ed:e8:f3:bc:ba:83:62:7c:95:80:55:4e:d4:b3:
                    5f:ca:44:24:73:89:d0:68:18:77:e8:6d:04:90:49:
                    e6:46:ee:eb:2e:c6:43:c4:88:e3:e8:3e:65:64:52:
                    7d:09:62:5b:0a:cd:fa:2a:58:9f:63:97:49:44:1c:
                    16:ab:3b:43:2a:7f:24:98:eb:36:25:b4:d3:ab:6f:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:26:18:C9:B4:57:FF:E3:7F:92:84:44:F5:7F:06:A9:DD:C5:D5:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/13e35cd3-82b3-39b6-be75-9a1fa5ee7335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:77:7b:14:90:1c:20:cf:f1:03:c6:c2:b5:2f:75:0b:35:e1:
         c5:fc:ed:94:48:f9:58:de:ba:18:70:be:b1:2b:c3:e3:39:58:
         65:b7:8a:c5:fa:a6:5c:48:90:12:d5:1a:dd:9f:dc:63:5f:ff:
         04:9c:60:a2:7a:48:6b:ef:cb:42:5e:fa:20:33:98:0e:68:18:
         3c:d6:1b:72:c4:9f:12:99:de:cd:c6:dd:55:0b:5a:8e:97:3b:
         b0:57:58:98:5c:6c:f9:82:a8:24:6b:dd:9c:a7:d8:38:8c:7d:
         c1:d5:e4:ed:2c:78:ea:0f:95:6e:bd:03:cc:3d:9d:93:43:81:
         95:b9:d9:04:fd:fb:1e:6a:09:71:d3:12:e0:6a:c6:07:51:52:
         4a:c2:b7:52:07:4a:48:45:35:2e:87:7a:0c:fc:56:9b:79:6c:
         a6:7a:bd:43:9c:c1:17:ea:c4:6f:41:24:3e:6d:55:0d:b4:e3:
         56:e0:d9:3b:9e:02:d7:3a:5e:ee:e8:65:da:86:d3:63:90:3c:
         6f:ce:65:51:ec:f1:71:ce:4c:7c:6a:e9:01:3d:d3:d6:f0:7f:
         75:d9:b3:56:46:5e:7d:5b:25:2f:76:36:65:ef:7e:ac:9f:e1:
         ab:30:61:2f:1c:06:3c:af:5c:f6:1d:b3:59:e7:e0:7b:28:3d:
         f8:27:ff:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:34 2026 by rpki-client