Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
File:                     e38b7540-8d02-3428-8b61-2305b0a7237b.roa (raw, json)
Hash identifier:          Nd+K1W8qKc71exsFTwT0VvC5YeYVFdadOqXWpnLIuWY=
Subject key identifier:   7B:D0:96:4A:6C:85:AB:36:EA:EC:8D:9A:D2:D5:74:F3:0B:C5:82:C4
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584DE580879B31B278055D2BE058
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     40934
IP address blocks:        23.249.55.0/24 maxlen: 24
                          96.45.39.0/24 maxlen: 24
                          96.45.40.0/24 maxlen: 24
                          96.45.41.0/24 maxlen: 24
                          209.40.103.0/24 maxlen: 24
                          209.40.110.0/24 maxlen: 24
                          209.40.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:87:9b:31:b2:78:05:5d:2b:e0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=39d29c64-5dcf-45dd-a04d-0de7a56b98cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5c:ca:6f:17:49:75:f4:cf:83:07:22:16:8b:
                    cf:16:00:1a:c6:0c:35:c8:cc:b6:62:a4:93:d7:7d:
                    bf:73:e5:7e:9a:6a:7c:a4:1a:66:23:c6:fb:18:9f:
                    f3:46:e8:a6:ce:22:fb:6f:a8:2b:30:a7:0e:97:d5:
                    89:a1:e4:15:45:1b:31:1a:98:49:6a:91:0e:e4:ae:
                    29:43:7d:fd:ba:8f:1c:7d:96:a7:88:8d:dd:d3:a3:
                    54:c7:0b:77:71:fd:18:d6:bc:2a:d2:3b:0f:fb:9e:
                    f4:db:9e:4b:4d:9e:bd:86:ba:8f:2f:fd:0a:4b:ee:
                    76:e1:a1:71:ce:24:6c:da:ce:ea:78:e5:e1:ac:8d:
                    92:2a:ec:eb:19:4f:ca:84:a8:1a:fb:ad:cc:70:e0:
                    b9:8c:28:76:8b:c8:fb:96:6d:32:ec:32:38:96:ee:
                    2f:ab:74:ba:1b:36:68:15:da:1e:5a:da:4c:3b:18:
                    f2:c8:ca:a4:e2:1f:74:df:06:15:88:84:ca:af:a1:
                    be:23:e8:5f:1a:a7:54:34:c2:dd:47:a3:80:90:bc:
                    dd:9f:a4:58:bc:96:8a:67:af:13:d6:22:0e:d2:71:
                    c1:c7:83:29:96:11:34:44:fa:fd:42:61:9c:65:a7:
                    b1:bf:cf:bb:9c:0f:72:9f:9d:c6:22:52:72:fc:a3:
                    e1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D0:96:4A:6C:85:AB:36:EA:EC:8D:9A:D2:D5:74:F3:0B:C5:82:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.55.0/24
                  96.45.39.0-96.45.41.255
                  209.40.103.0/24
                  209.40.110.0/24
                  209.40.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:51:c0:c9:bd:4b:2f:0e:3c:da:63:e9:fb:d1:d5:56:84:34:
         3c:46:34:bb:1e:2a:8a:b1:f9:7b:af:8f:df:60:20:ee:1a:78:
         27:26:14:4b:d6:50:66:0b:35:7b:6d:d7:02:0b:47:7e:65:c6:
         d2:f4:56:45:ac:d9:b3:ca:ef:25:65:71:8f:a0:b0:c9:d8:d6:
         a4:0b:39:f6:be:04:6a:2b:74:35:3d:a2:00:73:b4:ad:9e:fa:
         4e:ae:b6:f9:46:8e:b2:e3:b1:1d:87:1d:8b:0c:91:d5:18:4b:
         70:c5:55:19:dc:37:2b:27:4d:95:27:c6:71:46:20:ea:5f:fb:
         5f:fe:9f:fb:28:e1:a1:ca:1a:28:99:d7:35:9d:bf:fb:5c:6c:
         78:f4:db:72:f9:d7:fe:48:fc:1a:a7:9b:7a:62:29:a5:18:61:
         bd:ea:a9:90:d7:fe:1c:87:87:23:ac:a0:aa:9f:2d:78:1b:db:
         3a:74:67:d7:00:64:4d:eb:75:79:96:77:eb:26:d9:c9:df:1f:
         7e:37:c0:18:25:be:7f:1a:1a:3f:47:30:97:9b:7d:18:49:f6:
         ac:93:66:aa:4f:ce:20:c4:64:31:25:a4:f2:54:a3:a4:3a:62:
         1e:ea:5e:eb:b1:27:23:fc:5d:5d:ba:b6:d0:58:07:61:fb:c5:
         df:26:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 07:59:18 2026 by rpki-client