Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/315a17bc-477a-3db3-aad2-6874ebc375e9.roa
File:                     315a17bc-477a-3db3-aad2-6874ebc375e9.roa (raw, json)
Hash identifier:          BckZfxpH2oMciLiXT+42p1rudF7OOr7AkRpMxi95EY4=
Subject key identifier:   C4:DB:33:3F:AA:B7:FC:F5:0D:69:A5:BE:21:03:BB:E6:40:72:EE:EA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D59EA4BDEF9DE17A12F32DBC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/315a17bc-477a-3db3-aad2-6874ebc375e9.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     30036
IP address blocks:        173.26.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:4b:de:f9:de:17:a1:2f:32:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=2004d654-08f2-4092-998c-519331956cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:58:98:6d:ed:23:30:64:d9:25:60:8a:fc:
                    36:20:b8:1b:fe:f9:94:f2:36:93:49:d6:11:f3:19:
                    ff:16:86:be:80:c4:2d:ae:1d:81:dd:f1:1a:c3:f1:
                    7e:7d:aa:8c:81:2d:41:b8:26:63:c7:70:76:cf:e1:
                    0d:bb:4e:19:69:44:a1:58:e3:cf:84:02:3a:a1:07:
                    c4:f3:08:d9:a1:3c:42:d9:6d:fc:79:22:00:38:85:
                    2d:76:79:65:16:92:8f:2d:a8:df:57:a2:9d:8a:db:
                    4b:e3:83:82:b7:23:1b:e4:7a:d3:c4:c0:22:98:d4:
                    71:87:a4:9d:91:ab:cc:68:c3:f7:ef:e1:23:5c:13:
                    62:b0:d1:a5:d6:3d:bb:42:e8:ee:80:7b:15:47:9f:
                    b9:6b:37:91:33:12:a7:4c:33:9c:01:71:c4:cf:6c:
                    09:e2:4b:fc:5f:c3:18:69:4d:14:d2:4d:c3:16:dc:
                    05:7a:31:15:1f:d3:28:eb:47:44:0d:e1:85:b8:53:
                    e7:68:21:67:4f:05:d6:87:e5:b7:28:35:49:36:ac:
                    29:e1:f1:33:f4:41:78:0f:8f:c7:de:2d:80:8f:73:
                    a5:2e:4c:ce:89:f4:05:93:b6:d9:8b:d9:e8:ba:59:
                    7d:46:99:56:65:b9:83:a2:b1:70:b8:67:ff:10:3e:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DB:33:3F:AA:B7:FC:F5:0D:69:A5:BE:21:03:BB:E6:40:72:EE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/315a17bc-477a-3db3-aad2-6874ebc375e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:03:71:c9:0b:2c:6b:ea:78:31:43:7b:32:9f:47:0b:82:78:
         3f:a3:28:b8:86:fd:00:e9:7d:79:f5:0a:cf:2d:cd:d8:26:d2:
         ca:14:0f:86:2d:12:3b:63:ed:b4:ad:8d:61:9d:d9:37:af:09:
         e6:cf:e8:2e:31:2d:59:22:e8:19:f1:65:35:06:27:26:fd:be:
         8c:6a:a8:5f:13:37:db:63:7f:b3:cf:cb:dd:fd:4e:6c:77:b7:
         0a:8a:5f:9f:62:89:9d:3e:81:c6:70:5a:0e:5d:64:b2:ce:16:
         44:fd:af:af:61:73:86:6e:61:7f:20:7f:2d:f5:bf:c9:ee:ef:
         44:45:2c:9a:50:85:39:9a:20:25:73:7a:c3:08:19:f3:ad:23:
         b8:c6:f1:9e:2d:20:41:6c:c8:3d:1d:20:ff:0b:95:cf:28:1c:
         35:80:26:9c:d9:e6:8e:7b:17:05:3b:5c:4a:d5:df:e5:fd:14:
         02:aa:a0:ec:42:a1:e6:9c:34:a3:1b:09:bf:58:c3:9f:9c:9f:
         0e:97:3e:d0:95:01:2a:22:97:0f:22:19:23:72:29:86:b1:29:
         5d:6c:03:31:4c:e3:93:01:a5:ce:db:14:ee:0b:b6:d8:f7:d5:
         d4:56:58:63:e9:8f:57:41:06:79:a1:05:c0:9b:71:c1:e6:2c:
         5a:5f:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:17:12 2026 by rpki-client