Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/2d9bef25-1a7f-3db5-80af-29f614970229.roa
File:                     2d9bef25-1a7f-3db5-80af-29f614970229.roa (raw, json)
Hash identifier:          7V/I/fB/JPbngDVRFrCI7ZZyz2woUAB4CgbIQWPOXVc=
Subject key identifier:   79:E8:C3:84:1F:D7:A8:FC:2D:18:33:D2:31:5E:D4:9F:7E:94:DE:AC
Certificate issuer:       /CN=f9c69ad2-7fee-4064-9683-23ee7a48db4f
Certificate serial:       010D0C9F4328584E1A1442E734EEE717DA3E3E80
Authority key identifier: 71:D5:8C:34:F1:35:24:6F:25:FA:0A:4A:4D:A5:86:82:19:59:C4:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/2d9bef25-1a7f-3db5-80af-29f614970229.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     16276
IP address blocks:        23.174.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/f9c69ad2-7fee-4064-9683-23ee7a48db4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/f9c69ad2-7fee-4064-9683-23ee7a48db4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:42:e7:34:ee:e7:17:da:3e:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c69ad2-7fee-4064-9683-23ee7a48db4f
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=3807ea4e-7d50-45cb-a645-c729647033f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:3d:02:67:20:91:7d:cf:b1:fd:42:4d:8c:
                    c4:2d:07:92:8f:d7:18:cd:99:e3:46:19:f3:bc:40:
                    fc:58:dd:f7:39:34:da:86:cb:32:a0:45:e7:ad:a6:
                    dd:cc:c6:2f:3f:d9:54:f0:d1:46:17:f5:24:7b:64:
                    6f:4a:dc:a8:35:fd:19:25:ac:5d:f0:dc:ae:99:c8:
                    db:08:de:d4:34:69:a3:ba:3d:96:58:6b:01:0a:91:
                    ea:36:c8:33:32:99:25:55:18:a8:a8:5a:d9:a3:fc:
                    2c:8b:48:71:ac:04:e1:28:19:0b:d8:56:31:7f:e5:
                    6b:27:81:1b:76:e9:3a:49:33:9a:a7:5c:10:f0:d8:
                    b8:37:01:22:5e:ad:39:a6:5b:42:f1:42:db:8d:33:
                    48:3a:ed:5c:05:55:70:ee:46:eb:97:2a:1f:c1:3d:
                    d2:ab:4c:27:73:19:43:b8:c4:3c:bd:cc:47:8e:e8:
                    34:e5:03:ba:45:65:87:36:6e:57:e4:9b:c9:c2:1b:
                    e5:96:7a:b4:c4:37:2b:c4:48:83:b5:3b:41:eb:e9:
                    9d:26:0f:2f:6a:e7:11:bc:1b:7e:18:1a:f3:62:fb:
                    a0:b1:e4:cf:08:39:f6:28:24:c8:30:87:4f:5a:b1:
                    10:d4:32:11:ff:3f:69:10:1c:63:d8:8f:ea:78:fa:
                    86:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E8:C3:84:1F:D7:A8:FC:2D:18:33:D2:31:5E:D4:9F:7E:94:DE:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/2d9bef25-1a7f-3db5-80af-29f614970229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/f9c69ad2-7fee-4064-9683-23ee7a48db4f.crl

            X509v3 Authority Key Identifier:
                keyid:71:D5:8C:34:F1:35:24:6F:25:FA:0A:4A:4D:A5:86:82:19:59:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:02:a9:dc:25:c2:ca:a5:25:ea:94:b6:68:bf:ba:7d:e7:bb:
         16:d3:ec:24:92:9d:eb:c1:4a:c8:1d:6f:ce:7e:1f:27:d5:fe:
         7e:2d:93:a8:fb:5e:7d:4b:9c:d3:bb:0c:e6:c0:5e:28:d9:2d:
         92:84:52:44:fd:cd:45:b8:db:a2:86:4e:54:dd:21:bb:2e:f4:
         05:b4:1f:80:06:8b:43:95:a9:ac:3d:25:60:c3:4c:df:ce:3f:
         1b:0d:72:f7:0b:30:9c:f5:24:b9:8d:f1:9a:09:73:5c:13:6e:
         94:47:46:cf:38:35:d7:9d:71:8d:70:b9:b5:ba:e7:15:60:11:
         7c:47:41:90:6b:32:23:37:ce:2a:89:eb:29:cf:7b:54:d4:87:
         2a:7e:90:cc:fb:c7:4d:14:0a:6a:da:09:a8:08:a6:d8:f6:99:
         bb:66:bb:d4:96:b2:29:e3:c1:c2:54:cd:97:6c:3c:7d:a6:dd:
         ba:eb:a4:29:56:fe:1d:39:09:a7:15:e9:0f:50:84:55:36:eb:
         01:10:d8:cd:94:59:b6:fa:4e:55:9c:bd:28:32:a7:3e:5e:db:
         04:ed:6a:35:d2:ba:1d:3b:39:ab:42:67:70:27:fb:47:97:db:
         61:c0:a8:99:45:5e:cf:4a:39:2d:4f:6d:f1:eb:25:99:a6:17:
         0a:bb:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:03:53 2026 by rpki-client