Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2e602cbd-127c-339c-9923-21188e6f547b.roa
File:                     2e602cbd-127c-339c-9923-21188e6f547b.roa (raw, json)
Hash identifier:          k3iQWOXMYtQ6CeM4PS1Dpc/SlpYyuKuk/fbW5fk+pTo=
Subject key identifier:   4E:63:33:BF:ED:B8:BA:A8:0C:E8:B2:45:FE:13:1A:DC:69:92:EB:A0
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584DBFD0579321006C265A88B4B8
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2e602cbd-127c-339c-9923-21188e6f547b.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     26421
IP address blocks:        209.234.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:57:93:21:00:6c:26:5a:88:b4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=f006a454-8f90-4527-85a2-a81ee1346dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:85:4f:91:93:ae:e0:7c:4e:9b:e5:8e:55:
                    fe:97:bf:a4:78:67:b2:2e:5b:70:c6:21:c8:98:a6:
                    5f:a1:99:09:b2:2d:67:37:b1:b8:9a:3a:0a:29:d9:
                    1a:26:b7:d0:86:17:ad:9a:af:13:ba:0c:89:19:c0:
                    1f:68:f0:8c:ff:c5:9f:8a:c0:b7:fe:8c:ed:2e:1d:
                    d5:d0:2b:3b:ac:ec:92:93:0d:32:ce:bb:d3:44:e3:
                    3e:88:5d:34:49:82:33:d7:12:3a:8f:8e:01:6c:91:
                    98:24:8d:de:4f:32:4d:2c:92:46:36:c8:67:42:95:
                    22:b4:e9:1f:10:fa:3b:64:5b:da:8a:21:4a:af:c4:
                    06:f3:f1:ba:10:a6:f7:c8:c4:02:57:2e:5a:38:22:
                    60:af:42:20:94:f7:3d:d9:36:ed:5e:c3:ca:29:ad:
                    59:5a:d4:e3:a2:18:58:90:f2:c3:aa:d3:3a:b3:8a:
                    13:57:85:dc:18:b1:ea:b4:4b:71:99:a1:53:31:b9:
                    67:58:34:23:4e:44:53:61:62:17:24:48:fc:13:09:
                    e9:7b:f1:0c:ed:34:2c:32:76:f0:85:a0:7d:57:03:
                    4f:9b:e4:b7:72:fb:1a:c1:4a:d5:80:f5:0f:45:9f:
                    91:b5:62:80:dd:41:ba:bd:c6:4d:1a:89:ae:f7:54:
                    1d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:63:33:BF:ED:B8:BA:A8:0C:E8:B2:45:FE:13:1A:DC:69:92:EB:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2e602cbd-127c-339c-9923-21188e6f547b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.234.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:20:74:49:7f:83:3d:6d:bf:cc:f4:61:1e:5b:23:3c:b0:
         53:be:c7:29:42:db:37:14:0b:c5:a5:75:55:9b:5f:b2:a0:02:
         7e:ab:ce:aa:ad:90:f9:82:57:93:6d:49:68:00:ce:dd:95:8b:
         ca:19:7a:08:b9:de:b7:b6:be:10:2f:89:22:64:6e:23:bc:93:
         98:ed:cd:40:4a:34:17:7b:94:8a:b6:80:10:7e:22:10:03:72:
         2a:67:9c:6a:09:6a:b8:84:b6:fe:2a:61:b3:a1:75:73:e9:45:
         4f:db:67:5a:5f:db:93:7c:64:cc:26:24:b9:73:5b:74:95:44:
         e5:a5:8c:76:35:13:43:17:f0:36:d8:7d:ec:90:41:87:83:9e:
         11:8f:9c:41:24:20:99:18:1e:65:89:9a:45:92:83:a9:eb:02:
         a6:9b:c0:3f:ca:a0:39:d1:c1:ef:39:e3:1a:59:c2:16:b4:d3:
         d8:a2:be:b1:e8:e1:6f:bc:74:5c:d7:d0:06:0a:b6:80:b1:4b:
         84:80:aa:b6:00:64:0b:da:c4:d7:36:74:10:07:95:61:44:75:
         f2:c5:01:03:ac:d2:8b:29:24:45:af:55:d6:f1:a7:a6:f9:e8:
         56:8a:19:a9:40:85:10:71:e7:0f:a6:a5:fc:22:99:0c:a7:d7:
         77:06:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 00:41:13 2026 by rpki-client