Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3821e315-43ee-30c8-8bb1-c2fbc0c16e93.roa
File:                     3821e315-43ee-30c8-8bb1-c2fbc0c16e93.roa (raw, json)
Hash identifier:          DOpn1fKg+niH1n5tpw6LF9ZH8my5SCLbZD04ZErdtPY=
Subject key identifier:   8E:F7:1F:28:1A:83:9B:14:E8:74:98:9A:82:53:99:26:BD:EF:B7:35
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0435D609A4EACF663C9316B8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3821e315-43ee-30c8-8bb1-c2fbc0c16e93.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        173.26.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d6:09:a4:ea:cf:66:3c:93:16:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=247d5544-3262-467b-9aa3-e4b3a8d9730a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:21:ce:d0:68:f3:07:8b:28:e8:6b:cf:f3:
                    0e:cd:d7:d2:28:c6:70:55:f9:40:0b:10:b9:88:1d:
                    68:c2:20:5a:a8:dd:b3:3a:5b:c9:21:5a:3d:20:19:
                    62:cc:50:8a:53:53:1d:12:43:2f:2e:97:45:e7:ed:
                    50:72:8c:af:a4:2f:51:7e:51:cd:19:fd:27:53:4f:
                    99:6b:b2:ce:b1:65:2e:30:86:26:a5:80:6d:f8:1c:
                    ef:7e:b2:0f:b3:63:d8:d4:de:b6:9e:75:e1:46:ae:
                    56:97:15:ec:5f:c7:21:6c:35:fd:75:31:1f:48:93:
                    f8:f3:b9:ee:06:44:d7:9b:18:5f:eb:53:32:b0:49:
                    1d:84:61:f7:9f:d6:d8:5d:ee:e1:c9:ef:d0:68:11:
                    92:01:a0:5a:69:f1:ec:69:be:ba:ad:cd:ea:aa:11:
                    9b:ff:03:eb:51:d4:6f:76:17:8f:48:49:e3:00:ac:
                    73:a4:b7:fa:08:6e:32:2d:c7:c4:ca:03:52:ee:17:
                    5b:a2:45:d0:4f:df:00:18:cc:93:89:79:05:00:ef:
                    a2:7c:ef:4c:ed:b9:79:7f:52:b9:cd:5a:a0:4d:8d:
                    be:51:af:fe:ef:ba:97:0d:23:9c:d6:ae:e9:71:ac:
                    fd:4a:f5:9d:e8:fa:71:c5:74:d1:98:02:b6:73:77:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F7:1F:28:1A:83:9B:14:E8:74:98:9A:82:53:99:26:BD:EF:B7:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3821e315-43ee-30c8-8bb1-c2fbc0c16e93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:67:0e:dd:9b:72:ff:21:11:8a:ca:c1:cc:50:1a:1b:64:cb:
         24:1b:be:e9:dc:89:22:9b:1f:07:4c:70:a8:f9:6d:47:b2:17:
         8f:1a:3f:ca:4e:3b:37:7d:64:de:4b:55:ed:84:6c:fc:a4:63:
         b0:2c:d1:7c:a0:8a:80:16:d2:62:10:52:59:e8:7f:0f:b4:fd:
         62:9d:d7:a1:5d:36:75:50:82:72:c3:3a:e9:3c:b2:19:cb:a9:
         06:f8:fa:1b:2a:10:b8:bb:a2:f4:f0:18:7a:9c:1e:2c:83:73:
         1d:be:d6:07:62:bf:56:17:36:9d:4b:41:00:88:5e:60:41:4a:
         d3:40:4d:b2:04:86:82:4b:03:b5:98:96:d5:2a:eb:ec:f1:16:
         50:f1:b1:f0:2c:c3:11:11:3e:cb:31:70:16:91:da:5d:70:2c:
         c1:71:c5:b2:5c:69:64:da:7c:b1:19:80:b5:66:f7:25:3a:1f:
         c7:ee:bf:bd:34:8f:0d:b4:45:cb:ff:d2:55:20:0e:9a:2b:f4:
         8b:f9:44:65:95:3d:ca:f6:03:fb:50:91:ae:c0:54:aa:41:f7:
         f6:95:ec:af:f4:9a:3b:be:6a:bc:a6:25:b9:5e:16:68:71:e0:
         09:00:3e:82:12:7d:fe:0f:56:f6:8f:d0:d6:7a:5d:41:74:0f:
         f3:50:7e:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdYJpOrPZjyTFrgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
MjQ3ZDU1NDQtMzI2Mi00NjdiLTlhYTMtZTRiM2E4ZDk3MzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ4hztBo8weLKOhrz/MOzdfSKMZwVflACxC5
iB1owiBaqN2zOlvJIVo9IBlizFCKU1MdEkMvLpdF5+1QcoyvpC9RflHNGf0nU0+Z
a7LOsWUuMIYmpYBt+BzvfrIPs2PY1N62nnXhRq5WlxXsX8chbDX9dTEfSJP487nu
BkTXmxhf61MysEkdhGH3n9bYXe7hye/QaBGSAaBaafHsab66rc3qqhGb/wPrUdRv
dhePSEnjAKxzpLf6CG4yLcfEygNS7hdbokXQT98AGMyTiXkFAO+ifO9M7bl5f1K5
zVqgTY2+Ua/+77qXDSOc1q7pcaz9SvWd6PpxxXTRmAK2c3ddvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI73Hygag5sU6HSYmoJTmSa977c1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzgyMWUzMTUtNDNlZS0z
MGM4LThiYjEtYzJmYmMwYzE2ZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRrEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChnDt2bcv8hEYrKwcxQGhtkyyQbvunciSKbHwdMcKj5bUeyF48aP8pO
Ozd9ZN5LVe2EbPykY7As0XygioAW0mIQUlnofw+0/WKd16FdNnVQgnLDOuk8shnL
qQb4+hsqELi7ovTwGHqcHiyDcx2+1gdiv1YXNp1LQQCIXmBBStNATbIEhoJLA7WY
ltUq6+zxFlDxsfAswxERPssxcBaR2l1wLMFxxbJcaWTafLEZgLVm9yU6H8fuv700
jw20Rcv/0lUgDpor9Iv5RGWVPcr2A/tQka7AVKpB9/aV7K/0mju+arymJbleFmhx
4AkAPoISff4PVvaP0NZ6XUF0D/NQfkE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:15 2026 by rpki-client