Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea281ac4-aa4a-3743-a351-531eca10173b.roa
File:                     ea281ac4-aa4a-3743-a351-531eca10173b.roa (raw, json)
Hash identifier:          gSErT5piBAoJWM80WPfc9uzDlfKdl7kBODfYXmRBOXM=
Subject key identifier:   85:6C:23:9B:1D:51:C8:7D:6F:C2:0B:81:62:F7:65:09:00:C3:3A:50
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AB43B1D36318847D8FBD27DC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea281ac4-aa4a-3743-a351-531eca10173b.roa
Signing time:             Thu 31 Jul 2025 19:05:22 +0000
ROA not before:           Thu 31 Jul 2025 19:05:22 +0000
ROA not after:            Wed 29 Oct 2025 19:05:22 +0000
asID:                     30036
IP address blocks:        173.26.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:3b:1d:36:31:88:47:d8:fb:d2:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 31 19:05:22 2025 GMT
            Not After : Oct 29 19:05:22 2025 GMT
        Subject: CN=bbc80cd2-472b-440f-8718-443d31cacf0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:48:f8:09:87:bd:20:4a:e2:f6:ba:a1:94:
                    d8:f8:47:fc:a7:59:b7:b6:1c:ad:53:f7:8e:56:60:
                    11:60:4e:04:ff:45:65:36:01:d7:8d:89:e0:f9:9e:
                    f2:dc:b1:e6:b9:e1:29:db:91:40:78:83:58:d3:bd:
                    b9:a4:77:58:d6:59:91:d5:19:7e:d0:fd:00:13:81:
                    af:c2:af:c7:7d:54:a1:05:69:cb:eb:61:cf:a1:82:
                    00:af:62:72:8e:05:e6:d8:7e:be:3d:26:71:b3:81:
                    10:33:d7:31:90:98:94:58:b9:7b:1b:01:ba:e5:e2:
                    9e:d1:f8:3f:93:f8:11:bd:68:9d:c6:ee:e6:af:87:
                    92:47:67:cc:dc:4b:c4:fa:74:cc:9d:9c:2e:95:94:
                    11:5a:fd:7a:8c:98:a6:7e:c9:13:25:0e:3d:d7:7b:
                    58:59:92:2a:8b:2a:a1:f9:33:8c:94:7b:32:40:4a:
                    66:6a:94:ba:36:50:26:58:76:1b:77:f6:96:25:2f:
                    de:49:aa:d2:96:b7:30:c4:b8:28:70:53:b6:f9:8c:
                    0c:3a:11:27:97:a3:62:e3:68:28:0a:ef:df:3b:40:
                    53:f6:c8:87:1e:2a:6e:d9:f7:35:47:c5:80:44:b1:
                    d7:9a:69:8d:33:da:45:b8:71:79:c5:df:df:1c:90:
                    81:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6C:23:9B:1D:51:C8:7D:6F:C2:0B:81:62:F7:65:09:00:C3:3A:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea281ac4-aa4a-3743-a351-531eca10173b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:e8:d9:13:c6:2d:7d:bf:d4:6e:1c:b1:a7:46:29:0b:46:
         06:ef:eb:34:1f:64:bf:9a:15:52:c6:e7:d5:91:06:28:51:77:
         9c:dc:67:5e:15:b3:ee:37:48:1b:c3:09:1d:5c:11:b1:ef:c9:
         48:1d:90:12:88:aa:d7:77:18:c7:50:7e:37:ef:64:98:7b:9a:
         1e:0c:d8:9e:b3:86:ce:01:05:18:cc:c7:e3:fd:ad:c9:ea:4b:
         11:72:78:ba:b3:03:99:48:53:59:25:07:af:6a:cb:2a:08:bc:
         a7:42:e6:4d:cf:a7:48:88:b1:eb:3d:81:4d:b1:85:96:80:c1:
         58:f8:09:7b:4d:ef:09:d8:b8:0b:14:8c:f2:9c:02:8f:9c:59:
         87:b1:3e:60:e1:b3:1b:f0:cc:9e:07:a8:08:5c:a7:9c:ee:3e:
         14:71:e9:8c:46:39:32:29:20:ad:69:8f:91:0b:57:4d:15:77:
         e7:52:8f:30:29:a2:17:7f:12:d4:b4:26:90:d7:e3:08:8d:1e:
         00:15:6c:8e:2f:05:9c:c9:a5:a6:55:03:78:c6:0c:5d:2e:61:
         86:04:91:70:c2:6a:b5:5d:d7:5d:1d:d9:0e:cb:a6:15:83:97:
         8f:96:b3:06:df:d8:e9:a6:1d:80:fb:18:0f:e3:46:ba:88:43:
         b3:5b:d8:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0Ox02MYhH2PvSfcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDczMTE5MDUyMloXDTI1MTAyOTE5MDUyMlowLzEtMCsGA1UEAxMk
YmJjODBjZDItNDcyYi00NDBmLTg3MTgtNDQzZDMxY2FjZjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DhI+AmHvSBK4va6oZTY+Ef8p1m3thytU/eO
VmARYE4E/0VlNgHXjYng+Z7y3LHmueEp25FAeINY0725pHdY1lmR1Rl+0P0AE4Gv
wq/HfVShBWnL62HPoYIAr2JyjgXm2H6+PSZxs4EQM9cxkJiUWLl7GwG65eKe0fg/
k/gRvWidxu7mr4eSR2fM3EvE+nTMnZwulZQRWv16jJimfskTJQ4913tYWZIqiyqh
+TOMlHsyQEpmapS6NlAmWHYbd/aWJS/eSarSlrcwxLgocFO2+YwMOhEnl6Ni42go
Cu/fO0BT9siHHipu2fc1R8WARLHXmmmNM9pFuHF5xd/fHJCBrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVsI5sdUch9b8ILgWL3ZQkAwzpQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWEyODFhYzQtYWE0YS0z
NzQzLWEzNTEtNTMxZWNhMTAxNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRpcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2a6NkTxi19v9RuHLGnRikLRgbv6zQfZL+aFVLG59WRBihRd5zcZ14V
s+43SBvDCR1cEbHvyUgdkBKIqtd3GMdQfjfvZJh7mh4M2J6zhs4BBRjMx+P9rcnq
SxFyeLqzA5lIU1klB69qyyoIvKdC5k3Pp0iIses9gU2xhZaAwVj4CXtN7wnYuAsU
jPKcAo+cWYexPmDhsxvwzJ4HqAhcp5zuPhRx6YxGOTIpIK1pj5ELV00Vd+dSjzAp
ohd/EtS0JpDX4wiNHgAVbI4vBZzJpaZVA3jGDF0uYYYEkXDCarVd110d2Q7LphWD
l4+Wswbf2OmmHYD7GA/jRrqIQ7Nb2GE=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:06:01 2025 by rpki-client