Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cdaefd2b-16db-3281-acfa-cf23982d7d52.roa
File:                     cdaefd2b-16db-3281-acfa-cf23982d7d52.roa (raw, json)
Hash identifier:          lOpHzsqzfRYE7xr2hFVLZw2R+NnaipGFwkE+kchB6H8=
Subject key identifier:   0A:A4:2D:02:97:11:04:BE:20:6C:D6:13:E5:3E:DF:21:17:9A:8E:BF
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584CA75C68FEC0E61BEEA842BC80
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cdaefd2b-16db-3281-acfa-cf23982d7d52.roa
Signing time:             Mon 26 Jan 2026 14:00:41 +0000
ROA not before:           Mon 26 Jan 2026 14:00:41 +0000
ROA not after:            Sun 26 Apr 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        141.109.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a7:5c:68:fe:c0:e6:1b:ee:a8:42:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Jan 26 14:00:41 2026 GMT
            Not After : Apr 26 13:00:41 2026 GMT
        Subject: CN=89aeac21-b9aa-4f8d-b574-e1bf45d94f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:c1:82:2f:7e:6e:02:30:c9:fc:4a:2e:23:
                    28:3e:4b:73:42:22:97:13:1e:0d:94:ca:91:d4:7c:
                    d0:a3:b8:db:04:cd:79:ea:11:b8:14:ce:bb:2a:fa:
                    12:a1:64:49:2f:dc:44:ce:1f:09:2b:bf:df:50:9d:
                    db:19:f4:cf:84:4b:36:c7:7a:5b:c6:27:d4:40:b2:
                    b7:cc:d4:1a:95:19:f2:3f:3b:0a:9c:4b:39:4d:1b:
                    ce:c0:d8:4e:1f:b9:db:78:71:99:af:c1:e7:a8:61:
                    9b:e8:a9:84:08:aa:41:db:63:77:0a:f6:c1:35:74:
                    d0:99:bf:ef:f3:95:b3:52:51:25:13:71:8b:68:26:
                    65:1e:dd:0d:11:f8:09:b5:0f:bf:8d:b2:df:c4:a7:
                    5f:68:18:69:36:45:45:a0:f3:0c:22:7e:09:aa:45:
                    b8:4a:6a:ad:5d:69:7a:48:e5:e4:20:29:fa:5b:c2:
                    38:68:b4:90:83:b7:f2:f3:a9:5e:5e:d2:79:84:5c:
                    b0:61:7f:cd:76:17:a1:2a:0a:55:94:a1:69:40:6b:
                    c7:90:d6:d0:fd:fb:d0:f4:19:2a:7d:eb:15:47:29:
                    0c:0a:2a:67:b2:94:ce:15:79:78:34:1c:27:96:04:
                    30:50:47:d4:e8:76:25:e8:49:51:a3:88:e1:2f:db:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A4:2D:02:97:11:04:BE:20:6C:D6:13:E5:3E:DF:21:17:9A:8E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cdaefd2b-16db-3281-acfa-cf23982d7d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.109.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:4b:f3:6a:dd:5a:a9:f9:b5:ee:7b:dd:73:fe:cb:ca:a1:c3:
         de:37:90:21:c5:bc:2a:39:ec:d6:10:76:e4:3c:fa:e2:cd:c7:
         44:12:6b:2b:c5:e0:9c:ac:80:28:27:90:72:51:37:a9:31:eb:
         6b:c4:af:42:33:eb:db:15:8a:be:1c:0a:3e:b7:fa:25:8a:f6:
         14:70:69:65:43:82:9f:d7:7a:44:61:56:36:20:d8:d4:b5:ae:
         1f:3c:7d:36:76:08:df:4b:fb:f6:f4:a7:bf:0d:f8:dc:af:1f:
         a1:44:36:8c:03:35:e8:35:8c:29:e7:e7:ed:cb:42:8c:65:e7:
         6c:25:42:ff:f9:3d:55:ea:fc:62:57:9a:d2:cc:97:b7:1e:51:
         50:45:77:62:b2:89:1c:0d:0e:fc:bb:f5:c0:da:61:d1:b7:7d:
         88:b9:0c:45:d3:43:4d:0d:3b:ae:65:2d:d3:b3:68:21:d3:4a:
         c7:27:57:df:cb:de:44:c8:87:95:27:97:37:cc:f6:aa:33:c8:
         5d:04:01:22:81:48:f4:12:81:c8:ce:b2:85:c1:5b:7f:8e:d2:
         96:4f:9b:cb:ab:a8:af:af:c6:e9:4d:9d:49:57:47:fd:3c:b1:
         05:21:63:16:e1:b8:d1:57:84:32:ef:2d:40:ce:9f:75:8e:cc:
         3a:49:11:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 00:54:54 2026 by rpki-client