Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4fe5a25a-7e37-3021-84c4-ab63ee058e3e.roa
File:                     4fe5a25a-7e37-3021-84c4-ab63ee058e3e.roa (raw, json)
Hash identifier:          OSgKh2JfcHdMd8hWlZ8iOfu51Y4B91nvDRI1XL3ow4U=
Subject key identifier:   4C:8B:44:EE:FD:39:9A:FE:63:29:1F:80:EA:FC:69:38:4E:6A:92:69
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E1A144CEB55900A021BBE0700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4fe5a25a-7e37-3021-84c4-ab63ee058e3e.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     19905
IP address blocks:        173.26.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:4c:eb:55:90:0a:02:1b:be:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=fb059721-ba5a-4018-a0d8-5315ab10ae94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:89:8c:35:49:16:74:c7:f3:70:a1:6b:f0:
                    ae:4e:a1:30:03:c2:db:dc:46:f8:66:83:22:eb:af:
                    fe:17:72:e0:ee:00:1d:2e:1a:9d:b3:ac:49:32:c1:
                    05:13:d1:d6:b7:0e:0f:83:81:80:9b:07:c1:cd:c6:
                    71:19:62:7c:04:ca:c2:80:fb:a0:70:a9:95:75:fc:
                    47:5f:ba:d1:8a:69:da:b6:1f:a1:a6:9e:d1:c6:a4:
                    3d:65:50:c5:25:89:8c:a6:8d:bd:73:85:76:6f:61:
                    22:cd:af:20:50:f2:80:6a:28:d6:b9:bc:f9:97:29:
                    df:4f:4c:44:14:07:b0:e7:0b:92:40:db:dc:97:7c:
                    f1:7d:67:e5:e4:38:b3:ad:c2:f5:91:96:3f:18:73:
                    94:5d:4b:eb:d6:a2:9c:61:c2:f6:93:38:2f:e0:e6:
                    fc:36:4d:aa:c1:82:73:62:01:e8:43:8d:21:5f:ed:
                    0e:cb:3c:d1:48:43:af:97:85:d6:30:04:a8:fd:e5:
                    99:42:80:1d:a3:1f:a5:62:08:1b:93:e4:cb:8b:b4:
                    38:13:5b:ca:f5:7e:d6:53:6d:4d:8a:95:24:b4:ea:
                    25:75:06:7a:68:64:1d:d2:82:d0:1c:37:6f:3a:63:
                    4c:ab:9e:ad:09:ed:86:6f:a1:2b:d4:3a:2f:23:60:
                    a6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8B:44:EE:FD:39:9A:FE:63:29:1F:80:EA:FC:69:38:4E:6A:92:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4fe5a25a-7e37-3021-84c4-ab63ee058e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7d:dd:cb:99:1c:21:5c:43:97:76:fa:a3:94:a0:4f:bd:19:
         c6:ad:17:02:0a:b8:35:da:13:61:f0:84:98:c3:6a:03:4b:ff:
         b8:e5:0b:1f:c0:65:d0:1b:a2:2c:0f:55:8b:27:9c:2d:59:da:
         a9:ea:5d:51:65:37:6c:4b:bb:06:43:e4:47:e6:64:79:32:42:
         46:21:4a:b9:03:19:37:eb:6c:cb:fd:b0:48:6c:e8:86:9e:58:
         38:77:87:69:00:cf:e5:42:f3:f3:da:2f:f9:67:a9:ac:fa:15:
         cf:ce:01:ae:ab:9c:a4:55:50:d0:bd:ca:4d:75:17:d9:0d:7d:
         37:d5:e0:fe:2c:b9:fa:c8:a0:e5:65:7e:87:32:58:e9:b2:f5:
         2e:ca:5b:cf:01:c9:3a:0b:59:b4:14:0e:d5:78:ad:16:b4:25:
         e8:29:c7:41:62:54:52:d7:eb:20:87:ec:64:c5:d2:91:71:8f:
         bd:19:2a:77:bc:78:c2:6a:ea:70:1c:f6:e8:dd:75:ff:6d:9a:
         31:ef:1d:f4:15:b8:c1:03:f5:fa:d3:89:a7:71:65:be:0d:b8:
         02:62:54:a8:96:0d:60:58:4a:f8:92:58:e4:c3:50:65:ae:28:
         4c:32:81:a0:7f:05:58:ac:0d:eb:73:31:39:2a:1a:a8:96:6e:
         f9:bd:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:28:08 2026 by rpki-client