Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f255b28-dce1-3736-ba4f-000ae1996f51.roa
File:                     5f255b28-dce1-3736-ba4f-000ae1996f51.roa (raw, json)
Hash identifier:          RUHkMaZzfRRJOkEPCIW40zz9wQgbw06yYOXekR6kFR8=
Subject key identifier:   1F:9C:49:A1:07:1A:5F:07:3D:7C:9A:05:E4:1D:57:98:DE:68:10:63
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CF6ECCB6454C1999EFB0E3270
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f255b28-dce1-3736-ba4f-000ae1996f51.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        173.26.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:cb:64:54:c1:99:9e:fb:0e:32:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=9c3d256b-c59b-47a3-8495-39891ff454b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:26:08:b0:da:bc:5f:c5:9d:78:6b:7f:0f:
                    ef:04:6d:ce:4d:70:40:ca:9d:45:9a:22:69:0b:cf:
                    37:7d:7a:42:d6:62:64:83:e8:0d:f0:a7:54:03:e8:
                    b3:0e:b1:c7:18:98:77:92:9a:1a:60:d3:a5:94:b1:
                    3c:85:e1:4a:af:01:8d:5b:a5:69:ac:69:a6:0f:1d:
                    88:c7:bb:23:d6:76:58:41:3d:98:1d:42:e9:58:0f:
                    bb:24:29:91:f3:18:b7:a5:04:c5:f8:2c:49:41:45:
                    8b:5f:d4:69:4c:80:06:7a:71:80:df:c8:aa:ee:32:
                    61:3a:60:12:a1:96:ec:5d:63:fe:70:9c:60:a2:19:
                    9c:a4:db:74:28:90:64:23:d0:46:8c:81:85:e3:d9:
                    58:d8:af:f4:47:1d:9f:97:d8:4f:63:df:d9:f1:74:
                    f4:a9:aa:3e:3a:58:b5:94:3e:35:db:80:40:4f:66:
                    41:ce:3d:24:7c:83:19:c7:90:a8:08:f0:2e:d5:71:
                    08:6d:09:6f:cc:d3:23:b7:1a:8a:f5:45:bc:10:ce:
                    27:3b:c7:23:e2:03:1e:92:ee:8f:52:90:f0:b7:c7:
                    c8:5c:a7:ba:ef:16:d7:92:cf:3f:df:98:a5:b6:82:
                    af:c4:7d:40:25:d7:2a:0e:a3:63:c6:8f:4e:d6:8f:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9C:49:A1:07:1A:5F:07:3D:7C:9A:05:E4:1D:57:98:DE:68:10:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f255b28-dce1-3736-ba4f-000ae1996f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:09:32:87:22:fe:bc:85:d0:e8:66:1a:05:e8:28:ab:25:32:
         9c:9f:38:8f:f2:d7:49:1a:e0:50:ed:2b:81:c0:45:7a:1d:18:
         93:cd:3e:0c:46:89:00:02:4c:f4:cb:18:54:fa:55:e6:c5:18:
         7d:18:89:b4:b7:37:1f:dc:56:85:ef:a6:10:93:02:84:15:24:
         ba:2f:e1:a7:66:56:ab:16:06:3f:be:c2:5f:8d:8a:22:7c:1a:
         0f:0f:f5:65:54:8e:c2:e5:b3:f8:69:b7:ef:40:df:7e:34:79:
         f7:f4:65:3a:62:c3:b5:ea:fd:37:6a:1a:48:77:f1:bc:43:63:
         b7:0d:a0:43:1c:c5:59:63:f0:d4:49:4c:19:07:fa:81:14:13:
         42:b6:37:a3:42:c7:a2:93:ee:5f:6b:c6:f9:02:1b:d7:f4:84:
         14:86:80:c1:ff:34:60:89:9b:c0:38:0a:11:74:1b:38:c8:4e:
         f1:e0:70:1b:00:d6:de:26:cd:f6:4e:d3:d1:c7:b5:ff:b2:e9:
         30:c1:73:56:9f:2b:d7:a2:51:f8:20:5a:bc:f2:32:8f:7c:62:
         95:89:ad:e5:1f:0e:48:0a:c9:1d:79:eb:c3:ef:c7:8b:19:da:
         eb:da:4f:3a:c9:3e:09:12:92:b2:c2:41:21:60:50:7e:60:e5:
         08:d4:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:10 2026 by rpki-client