Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab3f8457-c9df-358c-9479-e770df3c05f2.roa
File:                     ab3f8457-c9df-358c-9479-e770df3c05f2.roa (raw, json)
Hash identifier:          1OrmDK8JMqaAbezizcuSc2/pC8c8G5qdpJh8UtaczDI=
Subject key identifier:   64:A3:AA:E6:36:01:EF:C5:16:59:FE:DA:19:12:42:11:35:81:25:D2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84124236D8E7AF1E217D6CF0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab3f8457-c9df-358c-9479-e770df3c05f2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.26.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:42:36:d8:e7:af:1e:21:7d:6c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=289b479c-43de-4494-a3af-dcef8fb36351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:28:4b:8c:73:0d:ce:f3:7e:de:9e:c0:17:
                    78:12:e2:8c:2c:c1:0f:9c:31:fc:19:92:a0:63:25:
                    03:4c:89:5e:b7:be:7b:54:84:b7:25:f6:81:6d:40:
                    46:90:9c:93:45:23:ce:f6:f6:2b:ca:2a:e3:ee:d6:
                    b4:69:bc:b9:bf:34:03:2d:51:f9:89:a5:6e:93:22:
                    ca:6e:b6:2a:5b:c2:b0:75:a1:09:3d:b6:ab:b0:79:
                    1c:61:60:6f:6e:35:a9:fa:37:b3:d8:71:07:09:21:
                    cf:a3:de:fd:80:b0:f6:4b:7d:47:0a:af:6a:a1:26:
                    4c:25:28:5f:49:af:99:9e:ab:2f:06:62:54:b4:c0:
                    3a:7c:2a:d9:cb:6a:cf:0b:bb:89:18:1b:b8:1e:35:
                    b1:1d:35:e4:68:1b:69:25:78:40:82:6a:f9:1a:b5:
                    1e:92:11:a3:35:9b:ea:3a:cf:96:f7:8a:ed:f2:db:
                    f3:d5:f2:2d:d1:78:a5:1d:3f:f3:7e:97:00:3f:87:
                    30:8d:e0:97:ef:4a:b5:57:df:79:33:e9:49:03:77:
                    35:6b:a6:48:c4:b4:ea:6d:cd:e0:46:71:eb:84:77:
                    cf:c8:21:43:71:86:60:ed:b8:9e:65:04:b9:c1:eb:
                    4f:0b:ff:54:08:cb:43:12:3e:1c:f5:b3:97:5c:48:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A3:AA:E6:36:01:EF:C5:16:59:FE:DA:19:12:42:11:35:81:25:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab3f8457-c9df-358c-9479-e770df3c05f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:71:30:a4:ad:8c:71:f9:1f:be:11:f3:63:5e:fe:e4:8d:87:
         a3:74:25:20:11:94:76:9b:de:38:63:6c:2a:a2:f2:d9:b0:9a:
         27:bd:f8:e0:b7:15:22:96:45:17:64:ce:93:18:6a:d9:51:27:
         1e:85:a5:97:9c:71:c2:22:fd:42:0f:56:01:54:32:ad:74:15:
         94:99:00:d7:be:9b:05:99:1d:c7:14:61:b3:31:5c:32:4f:cd:
         1a:5c:5e:27:a2:22:70:ba:75:4e:ec:a3:3c:8f:1e:8c:ad:2a:
         78:25:7a:cd:01:59:e1:0d:1c:50:1d:12:98:cd:aa:86:51:55:
         57:bc:77:39:51:22:f0:56:82:e5:33:2d:e3:09:2c:ae:98:56:
         90:ae:2d:48:31:19:9c:0e:43:83:2c:25:6a:e5:03:f9:98:48:
         9b:1b:70:85:e4:85:77:0c:ce:26:fb:36:4d:c3:b8:3a:45:f5:
         59:e3:ee:fe:ea:0e:21:86:22:c6:86:64:6d:c5:ff:ed:0a:f9:
         37:fc:f2:f1:2f:39:a0:fa:69:bc:1a:53:b3:30:a1:51:b2:af:
         1e:2f:8c:11:94:53:2e:db:6d:ce:e0:5d:d1:5d:cf:7b:8e:df:
         8f:d1:db:d5:d9:e0:f3:7e:bb:fe:89:7f:11:9d:3c:bd:6f:3c:
         a7:fa:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:50:11 2025 by rpki-client