Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da83e155-a2fd-3dd4-84ff-a8f49a447084.roa
File:                     da83e155-a2fd-3dd4-84ff-a8f49a447084.roa (raw, json)
Hash identifier:          EMtrU6LswUz/3IRunq+LHksyBNQ+X+NFhdfNHYjGS7Q=
Subject key identifier:   5A:75:27:F3:3B:F1:0C:75:5B:09:80:E8:F1:79:7C:90:FF:54:8B:D2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81462937B91B8D901EE18000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da83e155-a2fd-3dd4-84ff-a8f49a447084.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        173.26.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:29:37:b9:1b:8d:90:1e:e1:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=975cb669-647c-4c58-9e04-b2a1f566e36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:08:e4:a0:a6:35:5f:ba:12:2b:a1:e9:8d:ab:
                    7d:d8:ec:68:1f:c0:9a:44:3d:0b:a7:4a:b7:76:64:
                    4f:9e:90:0a:30:c0:60:ef:dc:49:20:bc:04:df:c7:
                    c1:09:32:50:26:46:29:df:63:b9:f8:77:2b:0a:d9:
                    98:fd:da:d8:24:81:11:83:9b:d9:14:2e:d9:fc:70:
                    f7:35:2d:38:08:73:df:83:37:ab:78:61:89:62:03:
                    d5:d5:87:1c:b2:12:2c:ad:05:ae:e4:86:fe:c1:75:
                    05:80:8c:63:eb:54:4e:7b:bb:73:23:e8:69:40:59:
                    2a:a1:c5:d7:20:58:2d:3c:f0:7f:f5:b3:d0:9c:23:
                    c7:ac:25:73:6f:62:ff:56:c8:2c:9f:43:3c:df:ee:
                    a0:9c:1f:6d:4f:5a:71:b7:e1:7a:72:4f:4c:f5:ff:
                    92:e8:cb:3f:c3:58:4b:a7:db:80:61:6c:b0:b3:dd:
                    8d:c2:1f:12:fb:4f:22:71:43:6d:c8:8d:c6:89:30:
                    57:ea:6a:b6:1e:85:ce:5f:5c:3d:53:47:77:16:63:
                    49:d6:05:82:fa:fd:19:d4:52:68:81:6f:ef:c8:6d:
                    db:d6:20:2f:42:1c:5b:5e:f1:28:28:0b:81:3a:7a:
                    5c:db:df:55:19:dd:23:a4:fd:e1:e6:d7:f3:80:bb:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:75:27:F3:3B:F1:0C:75:5B:09:80:E8:F1:79:7C:90:FF:54:8B:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da83e155-a2fd-3dd4-84ff-a8f49a447084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ba:d6:6a:d3:3f:a2:a4:bd:49:d0:b6:33:9b:6d:5a:30:34:
         ce:19:da:27:fa:74:58:00:de:d4:0b:74:44:73:1e:4f:8f:8c:
         9d:55:e6:74:0e:dc:ca:ae:d8:53:74:95:ad:6a:44:41:e3:48:
         c3:bf:38:ec:70:37:09:2e:89:c2:54:4d:ff:d9:07:f3:42:6e:
         9e:97:9c:71:df:87:94:4c:6d:f2:a3:c7:be:68:4e:4b:bb:db:
         34:d8:45:b2:36:5c:96:10:8b:61:e4:18:12:a8:3c:73:ee:a2:
         bf:a4:41:59:43:13:c1:1e:9c:33:1a:d3:e9:89:bd:54:29:a2:
         a4:ef:59:15:16:0f:fd:a9:14:3a:32:e8:cf:9e:85:1c:9e:1f:
         5c:6e:a0:1d:a5:83:0b:c6:e2:a9:f1:3d:76:88:43:62:7c:54:
         50:87:48:c6:ab:8b:da:b1:eb:32:b3:58:66:d5:9d:42:d9:62:
         a7:dc:53:af:fa:7d:4d:45:e0:0a:b3:d7:77:d9:2c:d4:91:9c:
         bc:c1:12:31:9c:4f:14:83:f2:f0:e5:2c:84:30:0d:c5:f8:cb:
         8b:55:dd:f3:8a:85:fa:76:14:97:1d:db:e5:db:88:ac:f7:de:
         c3:2d:15:d4:bd:4e:d0:b5:9f:02:10:17:d4:95:a1:af:05:b3:
         77:73:69:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:26:37 2025 by rpki-client