Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86e91230-dfd1-348c-86f3-1bdae621c1ec.roa
File:                     86e91230-dfd1-348c-86f3-1bdae621c1ec.roa (raw, json)
Hash identifier:          Yn6tx/SlrCUlnwQleLS+gdNwToHbDQSyYXft99CQo50=
Subject key identifier:   09:21:05:2D:DD:DA:95:C3:8B:6A:03:61:27:A2:D6:F2:20:B3:E1:6D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CE57E1509AE6C2849BEB97100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86e91230-dfd1-348c-86f3-1bdae621c1ec.roa
Signing time:             Tue 17 Feb 2026 20:08:47 +0000
ROA not before:           Tue 17 Feb 2026 20:08:47 +0000
ROA not after:            Mon 18 May 2026 19:08:47 +0000
asID:                     19905
IP address blocks:        173.26.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:7e:15:09:ae:6c:28:49:be:b9:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 17 20:08:47 2026 GMT
            Not After : May 18 19:08:47 2026 GMT
        Subject: CN=a532d39e-21a0-490a-a395-bf11e2c83ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7b:ab:e1:e0:4e:fb:e0:b2:73:76:74:79:ea:
                    e4:d8:fc:04:79:98:3c:5a:fe:3d:28:75:b4:89:bf:
                    3c:5a:df:86:0c:60:31:3d:e2:21:22:d2:f3:4f:09:
                    26:91:7a:28:75:e3:58:a0:2d:d8:c4:f6:b3:4f:70:
                    ad:36:90:2f:46:82:aa:14:76:ed:b8:eb:2d:42:e6:
                    c9:92:37:8c:45:96:e9:53:89:7c:8e:87:2c:a2:49:
                    59:c6:d5:12:33:22:41:18:89:15:39:34:ed:de:c6:
                    cf:56:bc:1f:bd:af:36:4d:2b:ef:9d:03:09:c7:45:
                    ac:c1:65:a0:ef:a4:c7:db:56:fb:3c:8d:86:a3:11:
                    7b:39:77:3c:65:3c:2b:29:2f:50:af:29:89:ad:d4:
                    ad:18:6d:92:a8:5b:1a:9d:94:99:fc:ba:a6:09:b7:
                    f2:f9:18:d6:94:0c:21:39:27:e3:bb:21:13:03:28:
                    b8:12:c6:e3:97:0d:6f:f9:29:e3:84:14:1d:dc:43:
                    60:8c:52:65:45:2a:ff:cc:02:62:9b:07:db:c1:30:
                    ca:d8:e2:48:5c:cd:41:8c:63:7e:7a:48:22:c1:08:
                    d4:43:09:7a:f4:48:4b:f4:e7:62:ae:e0:ca:4e:0a:
                    ea:51:68:59:30:6f:64:a2:25:ee:8f:8e:55:61:5b:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:21:05:2D:DD:DA:95:C3:8B:6A:03:61:27:A2:D6:F2:20:B3:E1:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86e91230-dfd1-348c-86f3-1bdae621c1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f3:b4:92:a0:13:96:39:2c:0a:4d:25:a1:1a:0b:a8:9e:8e:
         8f:42:62:11:71:84:5b:f3:1c:d3:0e:ce:1a:b2:64:6c:2b:88:
         6c:4f:5b:fc:bb:df:29:cc:d9:8f:83:02:de:1b:93:75:75:fa:
         24:55:ee:f8:c1:f5:ad:6e:7b:35:60:40:f8:df:37:8b:49:2e:
         a7:63:cc:07:76:9b:64:8a:ba:a0:3e:0e:59:c0:d9:60:83:37:
         37:e8:34:0f:35:7d:33:71:ba:2a:5e:f3:bd:43:44:b2:a9:3c:
         ce:94:fd:5b:f0:05:da:0d:ea:43:03:a0:bd:06:a6:76:e7:b5:
         1a:1c:45:ff:54:70:75:97:44:67:2a:73:ca:5c:39:0a:59:da:
         76:4b:73:21:3a:4e:11:91:45:d2:58:84:7c:2b:c1:6d:d8:1b:
         39:95:73:ee:ba:a4:f6:52:92:42:6c:06:35:23:93:54:72:dd:
         7b:6e:53:55:98:2a:c6:d1:c2:fb:a0:70:f3:53:b8:65:9b:5b:
         d6:37:1b:48:53:39:0c:c3:1d:fd:8b:e9:c2:81:cd:8c:1c:19:
         c6:35:81:c2:5e:30:30:02:85:b9:46:22:86:15:a2:cf:f8:cb:
         83:06:c6:44:d4:89:93:f8:4e:6f:60:0b:fb:40:b3:9c:fc:78:
         f9:16:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:33 2026 by rpki-client