Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/8c68ae2a-36bc-3a42-aefa-296efe09740c.roa
File:                     8c68ae2a-36bc-3a42-aefa-296efe09740c.roa (raw, json)
Hash identifier:          wFYIOG0Zk9NLiQQiBUpOmlG9+A3GMP7IZm6cranE1pk=
Subject key identifier:   FC:D7:74:06:79:07:3B:DE:19:2D:39:C9:06:35:C3:17:4A:63:56:EC
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584E74F87FBD2E52856039320580
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/8c68ae2a-36bc-3a42-aefa-296efe09740c.roa
Signing time:             Fri 10 Jul 2026 22:22:59 +0000
ROA not before:           Fri 10 Jul 2026 22:22:59 +0000
ROA not after:            Thu 08 Oct 2026 22:22:59 +0000
asID:                     400384
IP address blocks:        173.249.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:f8:7f:bd:2e:52:85:60:39:32:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Jul 10 22:22:59 2026 GMT
            Not After : Oct  8 22:22:59 2026 GMT
        Subject: CN=d37954cb-07bf-40be-9868-be80a48e8633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:ac:0e:7a:17:51:3d:42:ac:66:11:b7:05:
                    e3:72:8a:ca:ff:c5:b6:4f:15:ce:ed:9c:d4:ab:54:
                    83:cc:67:f5:ae:a3:60:35:c2:8f:3f:c9:bb:7f:48:
                    6e:2a:7c:e7:83:67:74:a6:cb:5f:a4:51:b0:b3:92:
                    f6:f4:f5:9e:61:3f:21:49:6c:9a:57:e9:62:1f:eb:
                    b4:6b:18:b1:8f:91:b8:62:3c:4c:04:e1:62:0f:09:
                    c9:2f:14:3e:df:e0:f1:ab:02:db:3d:d2:5c:13:f7:
                    17:f7:81:71:5d:7c:9d:80:2d:69:15:f6:d7:14:6d:
                    c7:7f:ae:dd:38:3c:60:c3:99:bf:1b:58:89:1b:48:
                    c2:ad:7b:ef:0d:e4:bd:b8:1c:76:c1:10:52:c4:bf:
                    fc:ba:25:13:d1:e9:d7:b3:fc:fb:ac:3e:6b:ce:0f:
                    15:ec:a3:c4:a6:4b:55:15:f1:4c:34:da:bf:db:a4:
                    99:19:8e:63:c3:31:79:6c:90:0c:31:69:14:53:13:
                    57:dc:8a:fa:90:04:d5:6b:8f:1d:84:43:96:55:5a:
                    f5:f3:c8:55:95:61:c6:40:26:09:86:a2:30:6f:ea:
                    57:85:eb:54:01:47:e2:b4:7b:17:47:5b:d2:08:ac:
                    bc:b0:3b:ee:a5:9c:10:86:f3:f8:46:7e:b7:89:99:
                    02:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D7:74:06:79:07:3B:DE:19:2D:39:C9:06:35:C3:17:4A:63:56:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/8c68ae2a-36bc-3a42-aefa-296efe09740c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:09:ac:2d:2d:09:ed:7a:33:7c:74:cd:76:e3:b8:48:2f:1d:
         58:37:71:8a:18:84:dc:8d:2e:c5:34:11:89:bc:2a:ba:8b:05:
         16:0f:91:89:00:c8:27:10:0c:32:b2:b2:36:e6:7c:54:44:80:
         0f:62:85:c4:f6:34:43:65:00:e3:e0:0b:29:22:76:c4:d4:c5:
         c1:c3:a0:5f:83:06:6d:0b:53:92:fc:16:08:2d:d3:bd:54:ac:
         56:56:9f:40:0c:40:55:bc:19:ce:9a:1e:3c:d3:03:1a:a2:9d:
         ac:2e:03:03:24:ee:1f:8a:a1:9e:81:a3:9a:c2:55:5b:2c:52:
         10:fb:15:66:8d:69:48:44:1c:15:46:31:ca:94:63:8a:a5:2f:
         6e:1e:26:74:1d:61:90:30:62:16:6f:9e:f6:7e:ab:70:86:ff:
         56:53:12:d0:e0:59:b1:53:9a:ee:18:f3:c9:f9:82:62:b5:16:
         d3:89:a6:d0:a7:79:3a:6f:5d:96:1b:5e:14:12:80:9a:f2:dc:
         c8:32:e8:f7:47:83:ab:1d:45:cd:fb:f7:e9:d1:dc:9a:3c:55:
         90:5e:d4:ce:89:72:fd:4e:7a:34:a2:d5:33:e7:00:ec:0b:f9:
         9e:e6:c1:e1:88:31:b2:19:4b:a7:1f:83:65:51:e5:8d:16:f5:
         c7:bc:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:51 2026 by rpki-client