Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa
File:                     823f045c-56e3-3844-8d04-8e44b7241d53.roa (raw, json)
Hash identifier:          i3CAWZF5yvtcjmXmRNYV1lkdBuXCTkkkbd1OI4LZhvI=
Subject key identifier:   6B:7D:09:96:5E:24:C4:B3:39:A6:A9:00:9E:E0:B2:69:3F:D5:59:DF
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584DE84B45C76C9FF6B7CF15C500
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     394889
IP address blocks:        209.211.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:45:c7:6c:9f:f6:b7:cf:15:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=e39cc191-5f82-4f11-8684-ed57435845e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:f4:9d:0d:7a:08:26:af:be:72:85:88:9e:
                    f9:52:84:96:a1:7c:66:7a:b0:4c:45:da:7d:85:3a:
                    48:61:bb:4c:b8:ef:57:99:e1:48:c2:c6:25:5f:a4:
                    f8:fd:9d:3e:e5:04:1e:56:0e:01:e5:a6:19:8b:11:
                    9b:66:a9:7d:44:53:ff:30:7c:98:38:a7:50:c3:9c:
                    84:b6:e7:bf:32:e6:04:06:92:0a:84:3f:66:5d:af:
                    6e:00:ba:e4:77:01:cb:a7:d2:45:c4:52:db:c1:21:
                    cc:e8:30:25:c7:34:44:dc:fd:13:60:fc:9b:9c:46:
                    71:f3:69:e0:83:f0:2b:c5:c9:42:1f:e6:fa:9a:c7:
                    b8:61:ea:8e:97:88:33:47:32:9f:16:0d:84:36:67:
                    ec:1f:37:06:e5:55:77:e5:9f:c8:22:33:16:1b:04:
                    e0:f1:73:79:dc:ca:74:fc:a1:32:37:67:32:46:51:
                    da:69:0c:01:d7:82:da:b1:bb:9a:0d:de:f2:13:5a:
                    14:cf:81:65:d0:6b:a9:d7:8d:0e:8c:e3:3a:99:1b:
                    29:f9:0c:3e:84:b1:a3:61:89:86:be:cf:e6:12:93:
                    a5:6c:1d:f5:2f:23:1c:fa:45:5c:26:47:9f:c8:ad:
                    c7:20:d7:ad:bf:68:9d:48:32:4a:c6:2e:67:8b:c3:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7D:09:96:5E:24:C4:B3:39:A6:A9:00:9E:E0:B2:69:3F:D5:59:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/823f045c-56e3-3844-8d04-8e44b7241d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.211.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:0a:67:37:48:ab:25:90:fe:df:4c:4d:0a:e0:e6:29:32:ad:
         b0:eb:d5:85:34:a2:10:91:e9:5b:76:60:f1:f1:0b:bf:a1:f8:
         e5:eb:ea:71:82:cb:aa:48:d4:7c:93:f9:e8:db:db:6a:73:b1:
         80:ea:08:46:c4:a3:e2:16:26:7a:b3:3b:44:b2:12:0f:3b:82:
         7a:1a:1c:11:4b:ff:f7:d4:3c:02:54:56:e8:5f:c1:9b:54:c7:
         a7:33:14:29:ca:99:31:b8:17:1d:bc:f8:85:93:af:c9:62:fc:
         5e:24:00:da:fe:e9:45:52:74:57:ec:6f:5d:1d:a2:1d:d7:2a:
         4e:0c:a5:66:91:90:b3:96:e5:99:40:21:ef:47:2b:bb:64:85:
         d5:80:6b:8c:f3:76:29:af:0b:c1:4e:ca:bf:0f:76:e4:f3:21:
         b9:21:e5:80:6b:70:bb:23:8f:29:97:b8:18:5e:e9:90:01:81:
         ab:36:f2:6b:60:c4:4e:2e:34:18:eb:a4:5c:63:f0:c9:d2:45:
         0f:d2:c3:19:fa:38:e1:38:96:40:19:5a:8e:b0:f1:16:25:a5:
         b9:e7:fd:34:a8:dd:63:b2:e0:76:21:a9:71:2a:28:55:cb:c5:
         05:3a:5e:42:ef:1a:ab:a2:e8:6b:c1:31:99:6f:a8:53:a2:a7:
         b2:40:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 07:31:57 2026 by rpki-client