Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35584833-f532-30b3-be53-4beb1c7384c7.roa
File:                     35584833-f532-30b3-be53-4beb1c7384c7.roa (raw, json)
Hash identifier:          4DkGXPVzvHEsSsqDq+uIllwFxfUK5TOh0Nb5H8IfcyI=
Subject key identifier:   94:AA:E6:E8:0B:66:82:6D:03:81:F9:05:B6:0D:80:CA:3A:C2:63:19
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE423470B7D906664B0326080
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35584833-f532-30b3-be53-4beb1c7384c7.roa
Signing time:             Wed 19 Aug 2026 18:03:54 +0000
ROA not before:           Wed 19 Aug 2026 18:03:54 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        209.189.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:47:0b:7d:90:66:64:b0:32:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:54 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=e56c613e-c9c3-4916-8d9c-2ebeae74f0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:cc:ce:01:4c:53:e1:7d:b9:0e:7d:24:f1:
                    44:9c:f6:ab:6b:57:9c:c8:ac:a1:d7:e7:11:e7:60:
                    0e:42:45:b4:2e:6a:61:c8:8f:38:1c:cb:1b:d9:1b:
                    f7:e5:44:fa:33:2d:92:ac:b6:9b:9b:d8:90:45:f7:
                    74:b3:d6:8b:38:ac:49:a6:f2:21:65:8b:8d:89:76:
                    bd:e1:cd:39:c5:39:8b:60:f0:22:89:aa:f4:a4:23:
                    50:85:a9:41:1f:24:3c:04:4a:3b:5f:17:7b:f0:be:
                    d1:2e:cc:ab:de:d9:61:61:21:b4:76:5a:37:75:06:
                    74:83:95:2b:1e:3d:be:76:dd:01:0f:3d:69:aa:08:
                    4e:39:d5:94:88:78:12:95:5a:a4:60:c4:63:b4:d3:
                    ed:60:56:17:19:4f:99:27:85:75:e7:87:78:49:ad:
                    23:9e:53:ce:14:12:3d:ad:f4:c5:56:ae:08:46:92:
                    e6:11:68:8b:c7:84:80:4a:88:b6:d2:72:b7:db:9d:
                    e2:d3:2d:23:fc:f9:ed:7a:98:45:d3:11:be:28:d7:
                    a1:0a:d4:2e:59:b4:88:0d:b6:f1:ab:df:4f:56:9e:
                    10:46:48:18:90:e3:9b:67:b9:cf:b2:29:44:6f:54:
                    b8:d4:44:f7:5a:17:f0:e6:1f:a4:ba:bf:8b:64:a5:
                    8f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AA:E6:E8:0B:66:82:6D:03:81:F9:05:B6:0D:80:CA:3A:C2:63:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35584833-f532-30b3-be53-4beb1c7384c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.189.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:24:bb:df:e3:22:d0:bd:da:24:31:8e:c4:e7:83:d0:24:1c:
         f5:43:93:cd:4c:54:65:75:e5:b7:81:9e:b2:f7:27:ac:32:bd:
         6d:28:4e:ca:38:fc:f4:bf:83:71:29:f9:46:48:5c:97:96:9d:
         dd:23:9e:0e:88:ad:60:6a:4c:f7:2d:f7:c3:d3:da:f7:7d:79:
         92:b6:4b:f5:09:22:d0:11:c7:ba:17:cd:c3:24:6d:a8:cc:e4:
         77:06:cf:60:67:3b:5d:a6:80:90:54:7d:e5:8c:fa:09:62:e8:
         60:69:58:da:57:e0:74:99:5d:7f:05:39:2c:ff:e5:07:80:c7:
         ad:76:28:98:3d:84:6f:73:aa:f8:72:e5:49:5d:18:b5:3b:08:
         1c:87:a9:4c:49:89:6b:47:26:a6:ee:01:5e:2a:54:01:f4:5f:
         e1:7d:aa:bf:07:bf:c9:79:b3:f0:7b:5c:55:66:86:bb:03:14:
         2a:03:b4:12:fb:9c:97:4f:54:ce:ee:d1:be:22:f3:5c:13:e8:
         42:d9:44:9c:99:c0:1b:bc:dc:72:e2:e2:e0:20:0d:f7:76:b3:
         af:a2:a9:9b:0c:5a:23:70:3d:03:be:ee:23:a8:ab:a8:20:43:
         ec:a7:cc:83:90:29:12:f9:5f:36:5d:53:48:78:4c:7f:b6:da:
         e9:6e:15:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:51:56 2026 by rpki-client