Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ccbae526-41fb-39e8-8de4-2dd011fc2a40.roa
File:                     ccbae526-41fb-39e8-8de4-2dd011fc2a40.roa (raw, json)
Hash identifier:          0ROCv+PO3DU5GxDmV9fcMwFhe0+/t2hQ8EkCyvaJSoc=
Subject key identifier:   75:C6:F2:E7:DF:77:0A:FF:F7:3C:32:53:B6:52:35:DE:B1:75:15:16
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584D5E1A683E274504C159D50C80
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ccbae526-41fb-39e8-8de4-2dd011fc2a40.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     394996
IP address blocks:        24.144.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:68:3e:27:45:04:c1:59:d5:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=da2a8d29-ce37-43d6-9067-5605a76fc1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:0b:9c:51:34:46:a5:b7:c6:c9:86:ca:74:
                    d4:dc:5f:45:e0:32:da:c0:c1:9f:c8:2e:f8:7c:74:
                    fb:59:ac:7a:f1:ce:ad:e4:96:5f:5f:f1:f1:16:ce:
                    ae:05:ba:4b:9e:36:f4:85:40:9d:89:9c:97:98:0a:
                    93:d0:77:d2:72:51:ef:8c:3c:11:bf:43:05:3e:78:
                    de:fc:2c:a8:49:71:72:de:57:6e:25:eb:f9:62:61:
                    4b:30:6a:c9:43:dd:71:d4:70:c9:58:56:32:f3:a1:
                    4c:9c:5e:ac:85:14:5a:67:2b:2d:8a:95:ed:23:b6:
                    c2:5a:67:fb:ca:98:8c:16:66:c1:a1:64:8b:50:d3:
                    97:79:f7:6d:13:73:27:e8:b4:f4:96:8e:1a:54:cb:
                    30:cf:50:c7:65:bb:f2:f8:de:d3:2a:8e:f4:3c:74:
                    31:fb:f3:69:e9:fc:85:6a:29:37:ca:de:5a:90:38:
                    8a:01:b1:d2:00:cc:da:cc:ca:ce:1b:ea:6f:a9:db:
                    fc:f9:10:c9:9e:ab:a1:fc:3f:ba:1f:eb:75:0f:49:
                    62:e1:e5:c8:b9:62:27:a2:df:55:00:c2:fc:e3:d8:
                    c1:27:de:a4:ac:45:99:ec:ed:03:eb:5a:cc:f8:d9:
                    88:d0:95:a9:a2:88:9f:31:85:47:99:0a:5a:b5:b4:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C6:F2:E7:DF:77:0A:FF:F7:3C:32:53:B6:52:35:DE:B1:75:15:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ccbae526-41fb-39e8-8de4-2dd011fc2a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.144.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0a:d5:a8:84:00:bd:21:a2:5a:1d:d1:1f:72:0e:87:41:54:
         e6:a4:b1:0f:8d:a6:b0:7f:df:de:a4:ed:25:d2:14:97:4e:80:
         ff:cf:8a:f9:1b:ab:d7:5b:f3:b7:48:f9:71:0f:9a:07:f0:5e:
         5b:57:d1:85:d2:4e:19:ab:82:c7:fd:72:68:7d:b6:79:1d:21:
         5d:18:b6:cc:74:fa:72:a4:be:52:0f:a3:3f:a9:30:9d:d3:f4:
         46:3d:76:b4:ab:12:fd:63:70:f8:98:d0:74:01:1f:8b:4c:68:
         70:0d:7f:b1:eb:24:6e:a4:23:f0:c1:46:ce:bd:e5:e6:d5:67:
         2c:31:1a:dd:20:15:c6:3d:ba:90:ff:97:cb:cd:23:40:af:3d:
         fa:3f:8d:ca:79:f7:c3:56:bb:5e:78:27:0d:f4:7c:59:82:d8:
         57:51:5b:11:9a:33:53:b1:41:fe:06:5c:6f:9d:a7:f4:6f:18:
         dd:34:4e:e7:fb:aa:8c:4e:53:c0:0c:ca:e7:74:15:61:3e:b9:
         bb:76:d1:66:bb:12:dc:7b:18:36:d8:79:25:1b:3c:70:50:6e:
         c0:d5:11:01:18:fd:f5:af:62:aa:ad:62:a2:cb:3c:35:89:6e:
         73:72:1b:bf:f6:c6:76:57:7d:cc:36:cf:54:29:7c:92:aa:e6:
         6c:c4:b9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:30:06 2026 by rpki-client