Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/039d5cc0-5b83-30a1-94a3-c6a913324e9a.roa
File:                     039d5cc0-5b83-30a1-94a3-c6a913324e9a.roa (raw, json)
Hash identifier:          k0jw4RzdK0ZsS/7blv7ce1gM8wcIWbVPDalFjQYf0Zo=
Subject key identifier:   A1:ED:1F:C4:F6:EC:F0:3E:EF:93:01:C1:85:B3:4B:86:6A:A3:20:A5
Certificate issuer:       /CN=93e43339-37a5-4091-b560-67e3fca1a9fa
Certificate serial:       010D0C9F4328584D0A77A1AD33FBDC416F6AA700
Authority key identifier: 22:7D:8E:EC:B9:0A:FB:3C:CA:D0:B1:0D:9A:C9:B0:15:6E:A9:23:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/039d5cc0-5b83-30a1-94a3-c6a913324e9a.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     27277
IP address blocks:        173.250.192.0/23 maxlen: 24
                          173.250.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:a1:ad:33:fb:dc:41:6f:6a:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e43339-37a5-4091-b560-67e3fca1a9fa
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=bb974224-c8b6-4a18-8b69-b85e769bcf28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9c:ed:08:bf:49:df:23:4d:4e:8e:c2:19:18:
                    34:6c:34:d1:52:78:02:29:a1:e9:1b:1b:69:a5:fc:
                    91:a2:d8:6b:65:0d:32:9e:6b:6b:fe:72:dd:9b:c2:
                    41:40:16:b1:22:ec:55:79:c3:78:86:e2:ad:d3:d3:
                    93:93:28:4a:40:ed:43:13:a3:cb:b6:cb:fc:2a:27:
                    49:1c:b3:e8:38:7f:cf:06:d5:14:a6:db:3d:3d:3e:
                    e6:27:8b:88:7f:b9:dd:68:f3:26:92:29:af:f5:27:
                    40:c9:ca:98:d4:47:88:1b:6e:b0:5b:bd:b7:10:6e:
                    15:1c:60:24:2d:a3:f8:63:c5:f8:f1:e6:4c:df:6d:
                    93:4c:69:6c:58:dd:d2:4d:60:e0:76:5c:6d:d0:fa:
                    88:14:b2:b6:ec:75:00:13:2b:53:a9:2b:45:cf:6d:
                    70:a6:67:97:44:f3:c1:06:32:44:0e:b6:ff:64:a5:
                    97:6c:22:40:4c:9f:c4:5a:c1:82:aa:9f:cc:f7:df:
                    73:b8:7c:38:6d:13:35:53:7e:97:ec:87:bd:32:da:
                    4d:bc:98:a7:2f:48:3b:88:55:b8:59:a3:53:65:8f:
                    ab:b6:65:86:a1:ac:d0:07:55:f0:02:e6:dd:08:51:
                    c9:d4:b4:d4:23:27:6e:46:01:e4:b7:af:2e:d3:0b:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:ED:1F:C4:F6:EC:F0:3E:EF:93:01:C1:85:B3:4B:86:6A:A3:20:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/039d5cc0-5b83-30a1-94a3-c6a913324e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa/93e43339-37a5-4091-b560-67e3fca1a9fa.crl

            X509v3 Authority Key Identifier:
                keyid:22:7D:8E:EC:B9:0A:FB:3C:CA:D0:B1:0D:9A:C9:B0:15:6E:A9:23:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93e43339-37a5-4091-b560-67e3fca1a9fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.250.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:86:a2:6f:36:4b:79:a3:86:00:77:1d:9f:01:8b:fb:35:a0:
         52:62:8a:d7:ab:ef:4b:b2:11:59:27:57:d3:43:a3:9f:bc:19:
         ca:73:f7:c9:b9:22:fa:df:79:a7:40:3c:18:0a:9e:f7:87:5a:
         06:55:a7:8a:71:1e:a7:b3:09:b5:e1:ca:21:06:e9:fd:83:8f:
         03:23:32:46:70:b0:2a:73:70:22:02:9a:77:55:da:5f:b2:e0:
         24:26:11:a3:87:77:63:73:34:84:b3:31:ff:66:90:20:63:a4:
         d9:b9:80:05:5f:02:0e:5e:0e:e6:08:e9:56:64:5d:38:26:1d:
         00:6d:9d:85:7e:7e:37:22:22:4f:88:71:fc:a2:9b:0b:ef:6d:
         08:b3:d9:ac:1a:04:96:35:89:c2:0f:bd:25:b5:51:8b:72:fd:
         90:c3:74:fa:75:dd:db:3d:85:a0:45:49:22:7e:37:b2:a6:3d:
         a1:7e:c0:e3:50:6b:e4:11:87:d1:91:bd:bf:7a:65:ef:91:95:
         e1:18:72:45:3b:76:ef:9c:99:97:eb:d6:76:e0:88:ec:92:ad:
         57:ad:24:d8:c9:f8:48:dd:f3:ba:27:4c:ae:7a:93:b2:80:5a:
         12:cf:8c:27:89:44:78:ae:07:b2:cd:79:92:0d:70:34:8b:41:
         6d:27:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 11:26:10 2026 by rpki-client