Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/35c766e6-866c-314d-9b18-a83e6368bc7d.roa
File:                     35c766e6-866c-314d-9b18-a83e6368bc7d.roa (raw, json)
Hash identifier:          DfXVmwsUb1oOv/CrqcDD1Q2tnDjRGh+XKbIUDNF4E1M=
Subject key identifier:   8A:E2:9D:4D:99:42:30:C6:2E:5F:A3:3F:7D:C4:C0:C0:AD:91:55:E8
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584E36019121CEB101B126705400
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/35c766e6-866c-314d-9b18-a83e6368bc7d.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     14114
IP address blocks:        169.145.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:91:21:ce:b1:01:b1:26:70:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=584d9ebe-91d4-4a59-a4b1-5b435854ad4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:d6:be:20:b4:6c:14:cb:d9:b1:bd:a6:36:
                    a1:ab:ca:c6:70:c3:3f:01:1b:bc:70:78:0f:0b:28:
                    a9:68:52:43:1a:f4:bd:28:5b:60:b7:91:d6:a8:a4:
                    80:b1:77:79:87:db:54:41:b8:48:c6:42:54:4d:24:
                    68:53:9e:4f:cc:8c:6d:c8:0b:81:d0:4b:9d:c4:69:
                    93:01:a4:4d:ff:81:82:3c:55:88:18:1b:f0:97:34:
                    04:d3:38:6c:7f:d8:8f:da:4a:33:0e:fc:ec:43:f5:
                    8e:58:27:48:95:a3:a0:13:95:c7:05:df:c7:a6:f5:
                    91:c0:0d:95:1d:9b:1d:14:ae:50:f7:73:ba:50:d4:
                    f2:26:a5:ef:8b:7f:20:21:2f:7e:19:c0:79:a5:bc:
                    18:bf:7c:f2:3d:d4:35:91:f7:7b:1e:3d:24:d6:4d:
                    de:69:d1:70:77:eb:20:b6:d4:8d:b9:36:77:a5:ea:
                    68:63:c4:6c:14:41:62:95:ba:8c:de:5c:8f:19:32:
                    38:5c:39:99:c0:12:a5:5e:7f:17:73:cb:7f:97:b7:
                    73:b1:b5:da:ff:df:81:bf:d4:5a:26:02:0e:e7:a3:
                    ca:bf:13:af:9f:98:91:d2:50:6d:34:88:17:7c:79:
                    a2:b0:16:d5:aa:8b:2a:50:e7:53:c8:d8:09:81:c8:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E2:9D:4D:99:42:30:C6:2E:5F:A3:3F:7D:C4:C0:C0:AD:91:55:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/35c766e6-866c-314d-9b18-a83e6368bc7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ae:56:51:d5:14:fc:fa:14:42:4d:c7:20:17:f1:5a:b8:13:
         b4:cc:0e:1c:26:7c:d4:d4:4e:2a:94:17:73:fb:4e:63:3e:c5:
         a4:88:0c:0a:83:e6:25:01:cc:06:a0:33:c8:77:81:17:7a:5e:
         ad:1b:a7:e4:66:94:cb:fe:c9:aa:de:7f:10:6d:72:11:7c:9e:
         bd:61:c6:16:1a:4d:67:55:a5:8f:b4:8e:54:3d:07:ce:d2:cd:
         44:37:ba:70:b1:46:c1:59:dd:8a:81:20:8a:1a:f5:c8:dc:dc:
         7a:1c:21:b9:45:c8:f0:87:8b:50:3a:00:f0:28:b2:66:0e:a2:
         ae:1a:87:6a:e0:b8:7e:c4:5e:21:5c:ec:db:42:75:4b:a4:81:
         87:a9:c9:06:0a:3d:c5:15:f1:90:17:c9:b4:02:d5:7c:70:3a:
         95:ab:b2:78:4f:82:ac:64:c5:3e:a6:11:b8:69:6a:4c:8a:f6:
         1d:d0:65:a8:ea:e2:22:bd:80:21:c2:9d:8e:8f:8e:18:07:31:
         68:90:03:02:0e:50:4f:5b:f0:9e:3c:66:b4:d8:67:7e:40:4b:
         73:b7:ad:f9:ff:da:a9:07:b9:f5:64:a3:08:65:bf:45:ce:a8:
         1f:a9:c2:4c:b9:e7:43:f9:58:78:80:c1:ea:13:ba:2d:0f:86:
         64:fe:07:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 20:21:53 2026 by rpki-client