Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a39e022-3d32-35c8-84fe-b0d322477975.roa
File:                     2a39e022-3d32-35c8-84fe-b0d322477975.roa (raw, json)
Hash identifier:          lacJfaHpQSTioXsz628oEDdKj7N7GU51pgpx7tijJwo=
Subject key identifier:   EB:29:76:3F:2F:69:89:05:68:3C:B4:C0:CA:E7:99:69:42:40:CD:5A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849922786A268FDCFA4351EAF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a39e022-3d32-35c8-84fe-b0d322477975.roa
Signing time:             Fri 18 Apr 2025 21:21:29 +0000
ROA not before:           Fri 18 Apr 2025 21:21:29 +0000
ROA not after:            Thu 17 Jul 2025 21:21:29 +0000
asID:                     19905
IP address blocks:        173.26.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:27:86:a2:68:fd:cf:a4:35:1e:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 18 21:21:29 2025 GMT
            Not After : Jul 17 21:21:29 2025 GMT
        Subject: CN=ac36c209-1328-4c1f-89e1-806e345760fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5c:56:a2:d6:70:9c:5e:7d:8e:9f:27:48:8d:
                    20:87:82:cb:40:99:35:b3:22:a1:3d:0b:d2:9a:87:
                    5a:e3:dd:54:ef:18:a7:78:02:4c:a7:0a:40:d8:34:
                    d5:35:3e:22:5f:7a:60:9a:11:27:e3:b4:54:26:8a:
                    44:b7:c8:d8:48:1e:14:a2:de:fb:c7:75:f7:bc:7e:
                    e3:68:59:bd:dc:5d:e9:fd:bb:72:35:79:29:8b:e1:
                    e8:24:57:a9:58:ee:ee:d7:35:ad:38:fe:b7:ad:55:
                    ac:fb:ce:8f:61:d4:8c:02:84:64:0e:7b:42:e3:2b:
                    8f:c1:b1:c2:45:e2:ce:a3:7c:3c:fb:25:c5:55:06:
                    e5:6f:ca:78:81:83:8b:4c:8b:2e:ea:24:5e:90:be:
                    8d:f6:92:4d:8f:f4:b1:83:28:97:5b:6e:9a:62:38:
                    2c:aa:59:43:49:38:fc:43:c7:c6:d9:64:8d:dc:13:
                    39:9a:26:ef:3c:05:d5:04:ab:e2:d0:6b:3b:37:ef:
                    0f:0e:58:99:3d:78:29:83:cd:9b:ed:6b:ca:f6:91:
                    2a:14:24:d6:4b:d4:b0:92:d7:02:7b:9b:44:b3:d0:
                    1a:6f:0d:e0:fd:c1:64:bd:df:06:d7:45:49:57:50:
                    f3:4d:2d:d5:bc:f6:8b:60:bf:bd:0c:d6:c6:72:e2:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:76:3F:2F:69:89:05:68:3C:B4:C0:CA:E7:99:69:42:40:CD:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a39e022-3d32-35c8-84fe-b0d322477975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b4:73:6b:09:a2:93:4a:f9:40:2b:33:ae:8a:b2:ec:d6:c0:
         e4:b6:49:67:4c:92:70:a3:41:99:8c:01:2d:82:a3:1c:46:7e:
         5b:c4:d7:85:8f:01:40:4f:97:aa:5f:87:49:3e:33:14:62:41:
         3d:3b:70:da:48:c2:be:34:ce:81:d1:7e:2f:1c:27:e0:d9:36:
         1b:0c:c4:0e:ae:f8:fe:be:bf:fa:8a:72:a4:d6:56:bb:3d:c2:
         ce:56:78:dc:0a:4f:62:07:62:66:6c:53:44:fd:ca:62:d0:b9:
         f4:f5:a2:e7:44:a6:02:51:88:c6:d2:ba:f1:36:27:3a:87:ee:
         67:e9:32:a3:ad:17:47:18:4d:2e:ba:7f:46:a1:46:07:b9:c8:
         16:89:f2:f1:79:14:15:f9:97:36:50:f9:79:ca:c9:8c:14:c3:
         2e:87:d6:92:a5:42:0b:6c:6e:4c:8a:7b:65:14:74:d2:0f:0c:
         8d:b5:ee:d5:00:fb:fd:1c:e7:52:47:b4:c7:11:34:8f:c4:d7:
         98:a9:d6:bc:bc:44:89:16:6c:f1:73:e3:db:64:86:15:ad:ff:
         f0:f7:ea:0b:64:db:a9:de:ab:58:8c:79:29:e0:1a:75:fa:b0:
         fa:0e:27:25:13:6a:91:83:4c:41:2c:25:44:f5:14:26:f9:40:
         05:73:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:41:35 2025 by rpki-client