Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/c8aee78c-d4aa-3ce8-8126-ac1d69ef8bab.roa
File:                     c8aee78c-d4aa-3ce8-8126-ac1d69ef8bab.roa (raw, json)
Hash identifier:          MlbbDYWyhnheuZUS8GClo0LKTQp3Df+ERnr/jC4RVSw=
Subject key identifier:   29:BB:01:1B:52:4F:4B:4F:FD:39:F1:88:5C:00:1B:10:71:AB:CC:D1
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584EFD5E1BF2AD4DFC1E929DDE80
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/c8aee78c-d4aa-3ce8-8126-ac1d69ef8bab.roa
Signing time:             Fri 28 Aug 2026 18:57:39 +0000
ROA not before:           Fri 28 Aug 2026 18:57:39 +0000
ROA not after:            Thu 26 Nov 2026 19:57:39 +0000
asID:                     40934
IP address blocks:        189.25.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fd:5e:1b:f2:ad:4d:fc:1e:92:9d:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Aug 28 18:57:39 2026 GMT
            Not After : Nov 26 19:57:39 2026 GMT
        Subject: CN=907a2a9f-1332-4b36-bfc2-a471fa1307fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:23:0b:85:f0:c5:13:36:e1:5c:c0:18:a4:fa:
                    65:01:0b:dc:68:4c:db:8a:8a:5b:0e:a7:6e:4c:1c:
                    70:0e:fc:e7:be:83:d1:47:4b:00:ed:8e:a5:f6:d6:
                    b7:40:db:b7:3e:26:c9:4b:55:d0:56:60:e5:bc:8b:
                    e4:ea:e0:5f:0d:df:ac:04:9e:2e:d2:80:43:45:46:
                    de:de:73:7e:c8:67:10:67:01:6d:57:9b:ae:4f:ab:
                    16:38:52:3b:0a:6f:0d:f3:34:17:a3:0e:f4:e4:ef:
                    60:b9:a5:8f:45:f2:01:b1:44:a1:bb:1a:aa:86:11:
                    ed:c3:4d:72:24:d5:52:20:b5:14:c4:41:9e:a9:b0:
                    10:06:d1:63:99:c7:89:60:4d:89:35:a7:e7:46:32:
                    c9:e5:12:7a:df:6f:3f:38:31:7a:fd:2e:36:88:b1:
                    42:bb:49:d8:0a:68:fb:23:d7:c2:44:cc:35:13:8f:
                    b1:9e:6c:df:bf:96:a7:04:85:02:41:62:eb:bb:d9:
                    9c:ee:03:3f:10:69:02:b4:96:3a:eb:4d:25:57:f6:
                    8f:1f:52:cc:6a:26:a6:12:f8:19:ab:13:37:d6:39:
                    54:c1:e8:97:cf:ca:60:29:fe:60:8c:32:6f:10:5c:
                    34:09:83:55:46:fd:0c:3f:9c:97:e4:b7:41:f6:18:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BB:01:1B:52:4F:4B:4F:FD:39:F1:88:5C:00:1B:10:71:AB:CC:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/c8aee78c-d4aa-3ce8-8126-ac1d69ef8bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.25.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:bb:56:34:60:57:33:fd:29:18:19:5b:9d:87:df:ae:c5:
         7b:b9:02:ed:4c:aa:4e:88:09:da:c9:eb:44:8b:58:24:91:c4:
         9d:65:d6:73:03:11:11:31:97:bf:9c:0b:82:a0:91:b3:95:46:
         2a:b3:59:6a:45:49:54:48:fb:d6:d0:24:f9:3c:54:66:e9:e1:
         60:4f:5a:67:42:60:c6:10:ec:bb:e4:b5:f6:9d:05:fa:f0:0e:
         16:3d:06:2e:a1:29:11:d6:31:60:43:29:93:ab:ac:df:4f:bc:
         3a:e4:6a:5c:a8:2e:58:09:fa:e1:a9:cc:81:08:93:5d:ac:88:
         18:65:5f:19:63:a0:7c:5f:9a:6d:ef:a5:94:99:73:1e:2d:9d:
         b0:f3:04:a2:99:e4:2e:1f:48:ab:88:c6:5d:85:da:5c:f0:44:
         53:45:d1:cf:1e:f9:d2:88:33:1d:c3:c0:4d:9d:3c:93:11:18:
         74:1b:9b:40:08:60:a8:f5:b4:90:97:20:61:74:81:b4:fc:32:
         f5:72:3a:2c:66:a0:2a:ee:02:68:4f:1d:b0:5f:8d:aa:0d:1f:
         af:dd:9d:5f:60:4a:d5:c4:b5:46:65:70:4d:d8:28:13:fa:dc:
         e4:ce:b5:49:2b:5c:a5:fe:fb:89:28:97:22:34:8e:81:18:c6:
         e8:ec:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 20:08:46 2026 by rpki-client