Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d7dc076-a6e6-3fc7-8f49-0e96dc7fe22f.roa
File:                     3d7dc076-a6e6-3fc7-8f49-0e96dc7fe22f.roa (raw, json)
Hash identifier:          hwpa2uI/GxlZ030SN8d5n0PEI/DVBNIX/4+V/qFN1sk=
Subject key identifier:   E6:A4:87:BF:62:34:B9:4F:DA:C1:35:71:8F:73:E7:6C:9F:2E:E3:C5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AAEE13C489AC5D0ABC2D98A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d7dc076-a6e6-3fc7-8f49-0e96dc7fe22f.roa
Signing time:             Tue 29 Jul 2025 21:05:14 +0000
ROA not before:           Tue 29 Jul 2025 21:05:14 +0000
ROA not after:            Mon 27 Oct 2025 21:05:14 +0000
asID:                     30036
IP address blocks:        173.26.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:e1:3c:48:9a:c5:d0:ab:c2:d9:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 21:05:14 2025 GMT
            Not After : Oct 27 21:05:14 2025 GMT
        Subject: CN=52e0565f-f252-4a30-9996-5308f087aac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:66:41:17:d5:f9:0b:44:ef:4f:77:95:ea:
                    68:8f:55:79:31:47:2f:66:a7:2c:0b:0f:64:81:4e:
                    0d:50:b9:c8:c3:fb:62:c0:84:fc:b1:77:f8:2c:be:
                    e5:0f:33:71:af:65:eb:a7:e1:e9:23:9a:af:df:5c:
                    2d:09:f5:6d:9f:05:cf:9d:02:62:b3:63:e6:b0:18:
                    02:1e:cd:52:de:01:1e:ca:cc:d2:db:83:a2:26:93:
                    b4:63:3f:f5:52:d2:84:6c:96:a9:e9:e6:08:fa:f1:
                    de:e3:02:b6:ae:19:9c:64:d8:6b:73:7d:ce:02:a7:
                    41:b2:fd:e0:53:6f:49:ed:ad:67:35:4b:de:b2:6c:
                    f1:ef:5f:ef:76:5e:b3:9d:7f:12:2c:79:6e:1e:a4:
                    6b:d5:84:5d:e4:1b:70:23:0f:03:cd:61:bb:5b:44:
                    e1:7f:52:88:7e:c8:3b:ed:dc:cf:bf:05:6e:15:29:
                    53:e9:d1:21:4c:22:c2:1f:dc:7d:80:77:94:ae:38:
                    89:6f:18:c8:73:57:54:06:56:7b:bb:d4:4f:61:9b:
                    64:40:6f:31:b0:66:55:46:5c:f1:7c:8b:fe:32:d2:
                    fd:39:48:5d:7d:22:4b:a8:57:91:88:ed:47:ea:34:
                    90:60:bd:d2:a8:09:68:cf:f9:e7:78:ef:59:7e:17:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A4:87:BF:62:34:B9:4F:DA:C1:35:71:8F:73:E7:6C:9F:2E:E3:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d7dc076-a6e6-3fc7-8f49-0e96dc7fe22f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:56:82:2d:1c:b0:cd:41:53:4f:ec:0b:94:5d:ef:03:3b:1a:
         5e:67:21:7c:54:51:5d:b8:04:71:1c:af:61:b4:e1:ad:28:4a:
         38:b0:46:62:2e:e1:ef:43:14:74:aa:c2:60:5e:a3:67:2c:72:
         b9:1b:f2:25:67:72:68:0c:66:c8:be:d4:d1:45:e0:61:6a:15:
         2b:39:71:a8:2c:4d:f3:c3:fa:51:44:12:05:85:30:98:e6:1d:
         b1:df:68:b6:aa:a9:91:bd:2d:78:4e:8c:91:71:5f:c8:af:c7:
         5c:39:15:d1:da:ff:1f:ad:a1:a1:f5:a5:b2:65:5f:db:84:82:
         c0:27:81:a5:d8:05:10:e9:f2:ab:31:b6:ba:c5:5d:93:a6:29:
         2a:0c:50:f8:bf:68:0b:a4:a5:f8:6c:5c:73:ef:06:7a:5d:30:
         4c:83:73:ca:c6:64:c0:59:0f:24:af:4d:72:a8:92:bc:97:e6:
         f8:c7:e0:ca:46:ad:cd:e4:74:4d:43:d7:20:70:b3:60:25:dc:
         29:11:49:63:38:b5:63:7b:d3:8a:6b:3d:bd:ee:eb:d1:df:aa:
         40:05:27:fe:e7:7d:c3:07:2e:e6:ef:e4:36:cd:63:20:88:f6:
         88:55:d7:ab:d4:e5:52:d0:8e:48:14:0d:74:a5:4e:e0:a6:05:
         81:26:39:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:59:52 2025 by rpki-client