Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48814ae4-6f1e-38ef-886c-c325b8f17548.roa
File:                     48814ae4-6f1e-38ef-886c-c325b8f17548.roa (raw, json)
Hash identifier:          kbPG9YGVSQxEL8qpVDYM9WO+YHiNOAms4bd8B8wy01s=
Subject key identifier:   EE:9F:DE:08:72:68:A6:14:FD:80:CF:72:7C:D7:99:FD:7F:F5:0D:35
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF6409F8123A0C8332EC5C000
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48814ae4-6f1e-38ef-886c-c325b8f17548.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     852
IP address blocks:        207.34.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:9f:81:23:a0:c8:33:2e:c5:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=95efd88f-5e96-45be-a770-775f03a176cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:5d:a1:5c:b3:0b:f7:00:37:86:55:5b:bb:
                    a8:ae:b3:30:0a:e8:67:9d:de:51:99:67:1d:29:86:
                    f6:f3:f3:29:a4:55:59:84:fc:11:71:11:5c:3d:bf:
                    df:2e:a3:2f:5b:59:bb:32:e6:ac:17:74:3f:7c:f8:
                    bf:1a:fc:52:7a:ac:5f:85:b2:80:8b:c4:fb:b8:8b:
                    e2:f8:cb:87:56:ef:b2:d8:5a:0e:d0:67:22:a8:92:
                    0b:c3:ec:14:0f:0f:46:0c:f3:00:8b:3c:46:ff:4d:
                    04:45:9e:0c:c8:e5:66:40:18:fc:a6:4a:db:be:05:
                    fa:a5:8f:26:d9:83:9b:bd:46:f3:9f:5b:5f:b0:ae:
                    37:69:9c:8f:a5:aa:f7:9f:01:ad:78:24:9b:ca:71:
                    67:fa:c8:e1:01:0e:ac:d5:2f:f6:74:98:25:8c:62:
                    0b:ca:08:10:98:8a:93:a6:e7:30:90:d6:de:9b:a9:
                    58:b0:ed:2d:85:b5:ad:9e:d6:16:d9:e3:40:40:3e:
                    89:52:a3:c0:7f:26:ac:75:db:a6:24:87:ce:53:5d:
                    10:56:9c:ad:68:bd:ea:80:6b:23:4b:2d:dd:0d:e8:
                    79:6d:7d:54:1c:d3:d7:63:81:3a:aa:a2:1e:89:9b:
                    36:19:c9:c1:1b:f1:05:77:9b:b4:38:11:28:a8:2b:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9F:DE:08:72:68:A6:14:FD:80:CF:72:7C:D7:99:FD:7F:F5:0D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48814ae4-6f1e-38ef-886c-c325b8f17548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:77:9d:d5:8a:c3:19:84:7f:33:3e:3e:41:4d:46:94:94:ae:
         ff:24:e1:7b:10:ae:96:2d:b2:9f:f2:0d:ec:ab:f6:60:68:7f:
         7b:80:07:11:14:f1:bb:43:52:ea:0f:f5:e2:dd:76:10:4d:3b:
         ca:ae:45:7d:b0:85:6c:83:46:34:b1:b4:20:65:39:53:05:7d:
         6a:71:5f:bc:b6:d9:e1:e7:46:4a:6c:02:7b:93:51:20:b8:8c:
         2a:fd:84:ab:f9:f5:bc:cf:b1:49:c5:83:32:78:0b:c6:c0:3c:
         41:7c:d2:71:99:ff:f0:33:a8:97:7e:f0:c7:26:ac:68:c8:b4:
         06:30:3c:27:ad:24:65:af:76:da:58:88:28:33:e4:f4:fb:f6:
         73:6d:24:04:34:1c:96:6e:3e:ee:62:d3:bf:94:20:81:51:dd:
         ba:cc:40:8f:e2:12:99:6f:31:38:85:95:3a:c9:c1:4d:27:f1:
         b3:f0:8d:cd:f3:d4:e1:0f:24:42:63:ad:86:85:b6:34:d8:62:
         3e:46:d3:b3:2a:5a:0c:32:f9:97:27:b2:e5:1f:b7:e3:6b:f0:
         72:9a:77:a0:16:a2:e9:a3:7f:4c:09:b7:b1:50:a8:72:2b:2b:
         5c:bb:03:d9:45:29:f2:cc:69:d7:68:03:8d:73:90:ac:e0:de:
         18:8e:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:57:44 2026 by rpki-client