Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca771ef-c2fa-3518-90a9-9f5af270e67a.roa
File:                     fca771ef-c2fa-3518-90a9-9f5af270e67a.roa (raw, json)
Hash identifier:          5dxGgxbFVQOz3xHvUdzcfmC/Au5EeELPFfY/uL4ZoNY=
Subject key identifier:   F7:07:3D:5C:97:62:41:69:A8:5B:D3:D2:3D:A7:58:96:1D:A7:43:7B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410CB4CEEF98075D3B73330
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca771ef-c2fa-3518-90a9-9f5af270e67a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.26.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:cb:4c:ee:f9:80:75:d3:b7:33:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d6d787a2-379d-407b-8403-63251e3d93d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:c2:25:95:29:d5:b1:29:4e:de:cc:de:fc:
                    d5:26:24:3e:39:b6:0d:f8:99:c6:28:17:c6:ca:3d:
                    c4:65:d3:99:27:63:73:56:13:c9:fe:9d:be:54:a1:
                    2e:40:f7:18:0b:79:3b:9f:f8:04:3a:ac:c8:9e:0a:
                    d7:9a:6c:19:f4:24:5a:56:dc:6b:04:34:1f:03:1d:
                    4c:1a:28:0a:9f:35:b4:61:d6:25:6b:f8:9c:db:41:
                    0b:dd:e6:85:7e:44:c6:be:ae:12:84:fe:59:9f:7a:
                    52:50:46:af:eb:f6:20:bb:7c:a2:4b:8d:a7:1a:c0:
                    5d:30:e8:dd:8c:89:f4:f2:87:68:08:65:49:a2:25:
                    c6:d6:51:d8:30:8e:cb:90:48:d2:19:76:ed:05:c0:
                    02:0a:0e:1e:70:b2:20:65:4a:d1:85:20:36:2f:b1:
                    9f:3d:c7:2d:46:a6:85:b1:d8:be:06:c4:b2:bd:25:
                    77:e1:57:7d:77:92:29:84:f9:7e:a4:56:46:f1:5c:
                    7b:ab:bc:92:0d:ad:b2:a4:b0:de:e0:84:5a:ac:ae:
                    32:b1:de:d7:42:97:22:05:3c:75:89:4b:d1:df:93:
                    10:37:16:1f:cd:c4:4e:3f:3a:a1:db:df:b8:d9:77:
                    cb:bb:84:ad:bf:8d:98:65:52:54:79:81:b3:4f:32:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:07:3D:5C:97:62:41:69:A8:5B:D3:D2:3D:A7:58:96:1D:A7:43:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca771ef-c2fa-3518-90a9-9f5af270e67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ae:af:45:e4:37:e5:64:0c:9f:e3:0e:56:ca:f7:d8:36:81:
         8b:44:12:65:1b:bc:37:9f:ed:81:17:27:43:fa:be:6c:02:09:
         df:35:2b:7e:6d:06:2a:98:f5:a3:e9:49:e7:b5:f1:13:80:25:
         78:6e:47:a4:90:57:97:1f:28:4b:21:53:e3:b1:52:0f:cd:f7:
         03:af:f8:d7:7e:80:e1:8e:5b:55:bf:a7:df:6a:16:50:01:d5:
         46:ab:a3:2a:bf:b4:ef:64:e9:d6:8a:82:2d:c5:81:2d:10:9f:
         8f:a2:98:58:1e:47:cc:51:33:b0:8b:54:5d:98:87:4d:96:d2:
         64:56:fc:d7:9d:78:4d:21:c6:96:19:55:be:32:8f:05:08:83:
         44:70:40:01:55:86:8c:8a:31:6e:1d:e2:a5:6e:3d:98:f9:c6:
         60:ac:1f:e7:58:7c:1d:3c:f7:b4:58:a5:c7:00:09:03:02:58:
         57:cf:58:59:1b:23:07:a2:14:f9:8f:71:31:04:ad:08:6e:cb:
         3e:e9:31:6a:3a:0e:23:b1:d6:6b:05:b4:41:3d:e7:71:ae:c0:
         dc:96:7d:03:36:2f:67:41:72:86:36:2c:e0:b1:38:3c:a2:ab:
         2c:dc:e9:1c:e5:44:47:af:24:a1:ba:77:ac:5b:ba:1d:86:e5:
         eb:73:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:42 2025 by rpki-client