Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec274f65-7c41-3493-8f9a-c42e78d25c55.roa
File:                     ec274f65-7c41-3493-8f9a-c42e78d25c55.roa (raw, json)
Hash identifier:          osu4Wd93YDskEU7O+yWHC63CAxmK5XJlaK8F+hE2HKw=
Subject key identifier:   89:74:92:A1:32:64:D9:8D:35:E9:75:6B:2A:E9:EF:BF:F6:B8:E0:9A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA795B7CD8E896ED02B03ABC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec274f65-7c41-3493-8f9a-c42e78d25c55.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        173.26.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:b7:cd:8e:89:6e:d0:2b:03:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=219a506d-6709-49f9-b589-2e5e0221c30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:d8:b1:59:c8:b6:23:0f:05:e2:ca:80:55:
                    af:d2:9e:11:14:7b:e6:da:89:65:3c:a7:70:4b:7a:
                    25:e0:e4:82:35:4f:80:27:7e:d0:79:51:98:d0:ea:
                    60:60:6b:7c:1b:8e:d4:aa:80:33:33:9e:4b:84:77:
                    5a:07:81:8f:f2:a2:5d:ae:91:d1:43:4f:33:2e:7d:
                    da:fe:b0:ad:a1:3c:79:98:52:0c:81:3b:6e:4c:b3:
                    73:bd:51:3c:1d:03:b2:e7:bc:e3:e3:e6:45:c6:5a:
                    52:24:71:52:85:26:08:1f:c4:ba:ad:e8:8f:0b:fb:
                    72:3a:7b:e3:ac:72:0d:eb:a9:be:92:5d:fc:64:3d:
                    34:92:e3:6b:46:74:f8:3c:50:72:a5:23:17:e3:22:
                    06:ee:b5:26:9a:ea:e8:74:07:35:1d:73:54:02:63:
                    fb:c7:81:99:fc:4e:f4:a6:ac:48:24:c7:ca:21:41:
                    1f:e9:20:6a:ae:dd:db:4f:64:c9:c0:14:fa:c5:54:
                    e1:f0:6c:ae:fe:31:79:45:91:7e:ee:d9:a2:e7:28:
                    91:c9:4d:0a:02:0e:b4:25:10:8a:e9:ad:54:a4:a5:
                    ad:ac:73:46:e8:d6:2f:30:51:83:99:4a:6b:08:1b:
                    57:cc:2c:e3:01:16:68:aa:6f:72:21:d4:96:f0:b2:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:74:92:A1:32:64:D9:8D:35:E9:75:6B:2A:E9:EF:BF:F6:B8:E0:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec274f65-7c41-3493-8f9a-c42e78d25c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b2:8d:13:ba:fc:19:33:4b:35:92:6f:b9:8b:92:80:f0:b0:
         aa:9b:b5:e3:7d:b2:4f:71:19:36:c9:76:85:a9:fa:22:e0:f4:
         46:1b:a9:a5:7c:ad:d6:14:eb:5c:f8:3a:32:05:6f:38:69:74:
         bf:61:f6:61:6d:0f:e0:07:19:fa:c0:7d:a1:5b:da:e0:11:45:
         13:14:e9:ed:32:39:c3:8f:9e:2f:ee:4c:c9:83:fb:5c:5c:5e:
         17:46:fc:7c:21:8d:80:2d:7e:ab:32:a4:02:a0:36:9e:13:8a:
         59:93:88:96:6b:4c:eb:4a:76:91:98:f4:b5:d8:c4:2c:2b:e1:
         f4:dd:da:9b:9d:c2:ed:69:05:59:d0:af:44:c3:e2:70:92:10:
         53:44:38:2d:37:bd:8e:e4:d8:f1:03:5f:eb:79:94:b3:cd:d6:
         99:2f:30:42:cd:69:24:ff:e0:88:23:5f:db:44:8a:21:75:da:
         2e:02:9e:e4:ff:8b:c5:be:60:6d:fa:c2:4f:58:d9:e6:0f:b9:
         d9:c7:3a:db:68:a8:25:8d:c6:16:78:66:37:92:de:35:37:a3:
         65:8e:69:b4:c3:8a:82:75:e5:78:6c:2b:27:3d:75:19:3a:a9:
         5c:17:de:6a:4e:b8:d1:71:57:ad:1b:ca:4d:5d:60:2d:ed:1b:
         65:e5:ce:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlbfNjolu0CsDq8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjE5YTUwNmQtNjcwOS00OWY5LWI1ODktMmU1ZTAyMjFjMzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAbYsVnItiMPBeLKgFWv0p4RFHvm2ollPKdw
S3ol4OSCNU+AJ37QeVGY0OpgYGt8G47UqoAzM55LhHdaB4GP8qJdrpHRQ08zLn3a
/rCtoTx5mFIMgTtuTLNzvVE8HQOy57zj4+ZFxlpSJHFShSYIH8S6reiPC/tyOnvj
rHIN66m+kl38ZD00kuNrRnT4PFBypSMX4yIG7rUmmurodAc1HXNUAmP7x4GZ/E70
pqxIJMfKIUEf6SBqrt3bT2TJwBT6xVTh8Gyu/jF5RZF+7tmi5yiRyU0KAg60JRCK
6a1UpKWtrHNG6NYvMFGDmUprCBtXzCzjARZoqm9yIdSW8LKLkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIl0kqEyZNmNNel1ayrp77/2uOCaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWMyNzRmNjUtN2M0MS0z
NDkzLThmOWEtYzQyZTc4ZDI1YzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRoIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOyjRO6/BkzSzWSb7mLkoDwsKqbteN9sk9xGTbJdoWp+iLg9EYbqaV8
rdYU61z4OjIFbzhpdL9h9mFtD+AHGfrAfaFb2uARRRMU6e0yOcOPni/uTMmD+1xc
XhdG/HwhjYAtfqsypAKgNp4TilmTiJZrTOtKdpGY9LXYxCwr4fTd2pudwu1pBVnQ
r0TD4nCSEFNEOC03vY7k2PEDX+t5lLPN1pkvMELNaST/4IgjX9tEiiF12i4CnuT/
i8W+YG36wk9Y2eYPudnHOttoqCWNxhZ4ZjeS3jU3o2WOabTDioJ15XhsKyc9dRk6
qVwX3mpOuNFxV60byk1dYC3tG2Xlzrs=
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:20:06 2026 by rpki-client