Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86488c59-b8d3-3172-b21d-e008a976e9a8.roa
File:                     86488c59-b8d3-3172-b21d-e008a976e9a8.roa (raw, json)
Hash identifier:          K7BqHYAkkSGpb4NNQDnQccqwx24wh5Siyavtyibyd+k=
Subject key identifier:   C0:4E:5F:18:43:34:AA:42:B9:0C:CD:B6:04:3B:0F:BD:01:FD:3F:39
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CEDCF47C80ED459A88DFA5000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86488c59-b8d3-3172-b21d-e008a976e9a8.roa
Signing time:             Fri 20 Feb 2026 19:38:52 +0000
ROA not before:           Fri 20 Feb 2026 19:38:52 +0000
ROA not after:            Thu 21 May 2026 18:38:52 +0000
asID:                     19905
IP address blocks:        173.26.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:cf:47:c8:0e:d4:59:a8:8d:fa:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 20 19:38:52 2026 GMT
            Not After : May 21 18:38:52 2026 GMT
        Subject: CN=47e1f31d-60df-498a-8c67-d295873284b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:14:46:92:d1:d0:c1:2e:cd:1c:20:b0:df:b2:
                    cd:7c:8a:32:89:54:65:34:41:60:80:1a:d8:9a:d4:
                    a5:c0:ca:27:92:25:08:15:17:89:78:dd:80:1e:09:
                    38:51:d4:4a:62:b9:e4:2e:d3:4c:9b:23:77:e8:3b:
                    d4:54:7d:b8:17:69:3c:84:c2:0f:1a:a6:ae:05:b7:
                    d4:d8:b2:1d:00:19:d8:41:97:d1:1b:24:eb:1d:1d:
                    78:e0:61:a1:4b:5a:d6:1e:f0:23:08:12:35:a7:25:
                    49:22:9a:85:1f:b0:82:c8:a2:e6:7d:c9:ea:29:17:
                    fe:7e:e4:ea:fe:47:dc:09:a8:e6:e2:e0:be:47:43:
                    e3:b4:2e:f0:2b:c1:ee:4f:e8:93:f5:52:b6:ad:6b:
                    29:13:72:cc:ce:7c:d8:53:d2:ce:74:67:1f:b5:a8:
                    ea:54:a3:f2:c5:d2:d4:3c:f7:47:7c:a5:fb:9a:8c:
                    b0:53:01:f1:75:4a:34:e6:24:34:76:1b:f0:2d:65:
                    d4:95:c6:7f:f4:26:eb:be:03:1e:3c:7a:f5:d4:0d:
                    54:43:64:dd:13:fc:ef:1a:36:ba:c6:de:38:b9:4b:
                    62:e7:78:45:10:a1:d3:ac:92:06:bc:bd:0c:86:98:
                    7c:fa:b0:e9:2c:c1:12:ee:05:e1:e6:29:ef:c4:5c:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4E:5F:18:43:34:AA:42:B9:0C:CD:B6:04:3B:0F:BD:01:FD:3F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86488c59-b8d3-3172-b21d-e008a976e9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:95:51:47:24:f9:b4:7b:dd:04:72:c2:1d:6d:92:fc:62:cd:
         49:a8:2b:64:d0:9d:f4:18:9f:af:4a:ee:f5:6e:0c:9d:3e:76:
         62:3b:b7:f1:bc:b1:d8:42:ed:1b:5f:82:05:d2:b6:51:51:08:
         80:48:c9:25:09:f1:9d:17:9e:45:52:c6:22:1f:56:0b:cc:05:
         c5:b9:96:5d:46:b5:ba:fd:05:55:80:91:86:3e:45:7c:97:34:
         75:f9:f7:4c:ba:76:54:aa:98:c6:df:18:fc:ec:db:94:87:8c:
         82:52:e9:b9:ce:21:5b:f9:5f:fb:1c:9c:53:49:cd:bf:02:1a:
         e7:de:a2:fd:0e:8e:dd:2e:b3:aa:e6:89:cc:7d:a2:23:8c:55:
         a4:ca:bb:40:24:6c:16:0e:5d:34:3e:63:47:6f:80:64:7d:c5:
         06:9b:1a:66:14:3f:6b:02:05:cb:77:41:5a:5d:98:41:29:8f:
         c3:28:98:39:1b:7c:a2:7d:87:a8:1a:a2:14:46:00:32:29:3c:
         1a:9d:6b:21:6c:db:9f:6d:57:41:43:e3:f8:19:9a:b3:03:7e:
         91:39:da:64:5b:fe:4d:09:9d:35:f9:52:f3:96:f5:12:42:d2:
         92:c6:10:c2:31:a8:61:11:85:84:2f:44:96:86:c8:60:ad:88:
         80:2f:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:09 2026 by rpki-client