Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f939d96-de77-35f1-a627-353378f3896c.roa
File:                     7f939d96-de77-35f1-a627-353378f3896c.roa (raw, json)
Hash identifier:          H8n4cSPi88+Se4v2XQS9g21i2XrVbXyi8iXPHMA2gLI=
Subject key identifier:   CE:10:B9:76:46:56:F2:A9:DA:16:AC:11:93:7A:35:7A:20:D2:40:0B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584BA5023D72D84ADE9B3DA6F0C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f939d96-de77-35f1-a627-353378f3896c.roa
Signing time:             Sun 26 Oct 2025 01:00:31 +0000
ROA not before:           Sun 26 Oct 2025 01:00:31 +0000
ROA not after:            Sat 24 Jan 2026 02:00:31 +0000
asID:                     30036
IP address blocks:        173.26.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a5:02:3d:72:d8:4a:de:9b:3d:a6:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 26 01:00:31 2025 GMT
            Not After : Jan 24 02:00:31 2026 GMT
        Subject: CN=a2c9660a-c59a-4e20-9569-1baebf26f6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:62:53:b3:74:c1:a9:87:85:6a:1f:c5:1c:bd:
                    9d:2c:9c:ff:da:dc:72:aa:72:2f:ab:a9:f6:2b:52:
                    ee:66:1a:12:84:f6:13:31:ff:74:56:75:71:f9:1a:
                    22:c6:86:08:80:a8:59:d6:a7:15:e2:94:75:25:dc:
                    5f:99:6d:e8:aa:77:3e:1c:8d:e9:0a:00:c1:a0:58:
                    24:ca:9c:a7:70:51:bc:11:31:6f:12:ef:b3:37:94:
                    6d:99:5b:24:ad:c2:e6:8f:59:3a:77:64:cc:1d:d0:
                    fa:c2:9a:32:16:0d:af:a7:11:d4:75:1c:18:54:bd:
                    38:fa:3a:3d:9a:75:ec:58:42:99:1f:8e:be:6c:a7:
                    42:4c:07:13:38:2e:ef:60:37:3e:45:23:3d:7c:fc:
                    f2:7f:62:bb:4c:e7:b1:72:5e:00:21:cf:a1:ca:9a:
                    17:90:8f:a9:57:3c:85:3e:c7:4a:af:e2:62:37:c2:
                    01:c6:29:54:6f:57:fd:33:e9:ee:fa:b6:4f:f3:e2:
                    3c:e1:4d:fe:e8:c0:cf:7d:17:8b:a1:c4:4f:2a:b1:
                    a9:71:c3:e0:77:87:f5:f8:ac:b6:fa:d8:80:fc:3d:
                    ee:6e:c5:25:f4:5a:1d:c9:23:e6:87:e9:9f:91:13:
                    e0:45:e3:05:af:61:b4:51:76:58:01:8b:ef:b4:03:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:10:B9:76:46:56:F2:A9:DA:16:AC:11:93:7A:35:7A:20:D2:40:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f939d96-de77-35f1-a627-353378f3896c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:19:59:cf:4f:0c:c0:07:fa:b6:ef:66:49:3c:79:21:d6:5e:
         e7:ad:3e:29:09:3a:9b:b4:60:3e:ac:22:70:67:4a:5c:96:e0:
         a3:e3:ce:32:48:01:88:04:19:24:2d:ed:fd:9c:b8:74:ca:bf:
         ec:21:50:ce:97:a9:d3:c7:53:c6:ae:68:bc:f0:03:a6:02:62:
         7e:4a:3d:39:f7:7f:ce:ce:fd:cc:37:37:f8:1d:4b:9e:7d:7a:
         ce:2e:45:11:82:5c:09:75:d8:b4:e6:65:db:2c:a6:e5:36:33:
         22:6c:97:35:ed:f8:66:4d:b0:ba:9e:82:85:a3:58:b5:8c:2e:
         cf:05:3e:f8:65:23:12:11:c3:cc:86:69:44:f4:27:24:d4:f4:
         c6:86:f0:02:20:c9:58:26:80:36:e2:ed:24:1f:ff:48:b6:25:
         04:69:e3:0c:3b:cc:63:a6:5a:67:75:6c:ee:9e:7c:81:9c:74:
         13:13:8e:60:20:c1:f7:bf:9f:fd:7f:08:53:32:ed:d6:28:51:
         0f:a2:cc:bf:28:fe:68:85:22:14:84:d0:1f:b9:c2:50:b0:03:
         db:ff:6a:53:6d:92:3b:41:5f:ef:84:30:79:a1:30:19:af:24:
         22:00:cd:56:7d:78:5f:44:18:27:f7:e5:97:68:e3:21:33:6c:
         1b:3b:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:16:38 2025 by rpki-client