Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc8fdd92-4661-3599-b28e-97aa80697c0d.roa
File:                     bc8fdd92-4661-3599-b28e-97aa80697c0d.roa (raw, json)
Hash identifier:          +G3QvrbuVdGmhDPXI0AkYmjfi4pf10uRJGFjV5yOO1E=
Subject key identifier:   C0:27:3A:D4:9C:69:40:74:33:40:FE:3A:92:7A:C3:1A:58:CB:D0:28
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49742E723F2465A5724D3B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc8fdd92-4661-3599-b28e-97aa80697c0d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.26.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:2e:72:3f:24:65:a5:72:4d:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f89040e6-348c-4adf-ac45-f48297ff736d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:48:79:67:e8:1d:54:4b:9a:2e:ad:22:15:b5:
                    07:6d:35:77:1d:32:2b:b1:90:26:09:b5:4a:ce:a5:
                    a2:7e:16:43:d0:49:b7:26:d6:ab:bd:7e:f3:95:60:
                    42:e7:be:b4:29:9a:a1:5c:96:62:02:f0:b0:be:59:
                    c0:fd:d1:60:03:49:61:f9:ba:53:59:2c:bd:2b:ed:
                    9d:a9:1d:cc:f4:b0:13:57:e6:d8:b5:70:c1:6d:50:
                    d9:2d:5c:e3:47:79:27:36:55:d1:c9:47:d0:8d:7a:
                    eb:d7:cb:76:ab:d9:bf:ce:63:4c:0c:bf:4e:8e:21:
                    5a:3a:d6:ef:27:e5:f6:e2:dc:a8:1e:da:aa:00:70:
                    fa:c3:07:9a:00:29:96:84:24:55:21:f2:47:ce:df:
                    8d:a3:5f:1f:75:6e:15:dd:58:e7:73:d3:0f:65:dc:
                    9e:9d:43:b6:dc:7c:c4:3c:b8:71:13:96:36:85:bb:
                    dc:89:67:3b:ea:84:7d:63:5b:83:3a:19:92:3a:35:
                    10:d6:f3:04:9f:22:d3:5e:d3:bf:83:b5:bc:b0:90:
                    27:49:fb:bf:5f:f7:d6:f1:35:fa:b5:8c:e7:fb:0a:
                    8f:75:a9:26:ea:4f:21:c7:3e:54:37:d3:69:f1:33:
                    a4:07:24:c2:40:40:a0:77:55:27:85:7a:b5:34:3e:
                    16:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:27:3A:D4:9C:69:40:74:33:40:FE:3A:92:7A:C3:1A:58:CB:D0:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc8fdd92-4661-3599-b28e-97aa80697c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:b6:2c:94:6a:f9:fb:2f:67:66:80:b6:63:c3:39:85:e4:
         6f:da:c9:10:68:e6:ce:fe:6f:3a:72:a5:17:62:f8:6f:a1:31:
         90:be:39:1c:45:23:b6:18:21:0b:49:51:c0:96:9c:06:b4:53:
         f2:81:be:92:23:0d:b3:a6:a1:f4:e3:94:ae:fc:4e:fe:e9:80:
         cb:b6:46:6b:e4:64:43:bc:1b:2e:25:a6:ea:bf:f0:33:16:94:
         a2:b1:a9:49:a7:7e:67:07:d1:6a:fd:32:0c:81:4d:f8:24:22:
         59:92:d3:3e:de:b2:4a:bf:39:99:d3:3b:8d:ff:44:2d:ca:bc:
         a9:9d:12:b0:5f:23:79:1b:27:e5:a3:af:1c:56:eb:bc:52:b4:
         8d:52:84:e2:0d:5e:67:1c:9e:35:89:b0:49:ee:62:6f:0b:8a:
         1b:34:cc:72:3e:cc:cb:4b:97:2a:72:71:9b:84:6b:6e:3d:f3:
         2b:33:db:e3:b8:06:be:20:de:ff:bf:fb:b1:45:b2:d0:8b:c8:
         8f:85:c9:c0:70:01:7c:6d:fd:0b:ed:80:52:cd:10:85:15:5f:
         55:24:77:e3:f1:4f:dd:72:78:f5:f7:77:5c:a7:26:ba:be:cf:
         9a:05:b0:2c:22:d4:5c:cf:aa:d7:2d:eb:86:c6:40:2d:da:b1:
         15:03:2a:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdC5yPyRlpXJNOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Zjg5MDQwZTYtMzQ4Yy00YWRmLWFjNDUtZjQ4Mjk3ZmY3MzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50h5Z+gdVEuaLq0iFbUHbTV3HTIrsZAmCbVK
zqWifhZD0Em3JtarvX7zlWBC5760KZqhXJZiAvCwvlnA/dFgA0lh+bpTWSy9K+2d
qR3M9LATV+bYtXDBbVDZLVzjR3knNlXRyUfQjXrr18t2q9m/zmNMDL9OjiFaOtbv
J+X24tyoHtqqAHD6wweaACmWhCRVIfJHzt+No18fdW4V3Vjnc9MPZdyenUO23HzE
PLhxE5Y2hbvciWc76oR9Y1uDOhmSOjUQ1vMEnyLTXtO/g7W8sJAnSfu/X/fW8TX6
tYzn+wqPdakm6k8hxz5UN9Np8TOkByTCQECgd1UnhXq1ND4WxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMAnOtScaUB0M0D+OpJ6wxpYy9AoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmM4ZmRkOTItNDY2MS0z
NTk5LWIyOGUtOTdhYTgwNjk3YzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRrPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHZtiyUavn7L2dmgLZjwzmF5G/ayRBo5s7+bzpypRdi+G+hMZC+ORxF
I7YYIQtJUcCWnAa0U/KBvpIjDbOmofTjlK78Tv7pgMu2RmvkZEO8Gy4lpuq/8DMW
lKKxqUmnfmcH0Wr9MgyBTfgkIlmS0z7eskq/OZnTO43/RC3KvKmdErBfI3kbJ+Wj
rxxW67xStI1ShOINXmccnjWJsEnuYm8Lihs0zHI+zMtLlypycZuEa2498ysz2+O4
Br4g3v+/+7FFstCLyI+FycBwAXxt/QvtgFLNEIUVX1Ukd+PxT91yePX3d1ynJrq+
z5oFsCwi1FzPqtct64bGQC3asRUDKlI=
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:13:55 2026 by rpki-client