Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4e06c23f-96f0-3ff4-b78d-9910db4f0502.roa
File:                     4e06c23f-96f0-3ff4-b78d-9910db4f0502.roa (raw, json)
Hash identifier:          LyYc2+AwDjvepyCE5cYdbw2GgYOwjpLqdmzUTPpGjMM=
Subject key identifier:   21:CB:DD:05:13:05:76:63:69:30:AD:FF:AA:50:0F:BE:CF:C7:CB:85
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF640A43C2B79539962E3AA00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4e06c23f-96f0-3ff4-b78d-9910db4f0502.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     852
IP address blocks:        207.34.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a4:3c:2b:79:53:99:62:e3:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=3f4466e9-4fa9-46ab-b6af-98ab207b9fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:fd:77:71:ef:8e:56:f8:0e:b8:e7:10:3e:
                    da:df:b8:1b:7e:1f:60:f1:f1:5d:27:49:14:04:48:
                    c6:b7:65:67:45:29:ee:92:f1:e5:56:72:52:a6:82:
                    78:15:87:da:d9:e6:cc:dc:4d:d1:d2:bb:4b:22:30:
                    ee:d2:ac:d3:6a:41:96:7c:b6:71:5c:d8:e7:98:43:
                    78:de:95:42:ec:d2:c9:fc:07:08:ad:01:3d:a6:4e:
                    eb:c1:ae:24:68:14:16:7c:88:59:90:80:87:59:a7:
                    0a:56:ed:fc:ad:d3:6e:71:15:03:e6:0e:c4:31:21:
                    c2:08:c5:23:a4:f4:f7:a7:6e:82:6c:43:44:97:7d:
                    15:09:65:36:12:d9:ed:bf:d1:17:8a:c8:ce:04:f9:
                    85:54:1d:6c:c6:75:0e:a1:9e:91:16:1e:26:40:8d:
                    f5:79:e1:40:15:42:9c:fc:cf:b9:4b:63:bf:42:11:
                    5e:e0:95:34:cd:53:ae:e1:ca:23:28:1a:9a:b2:f2:
                    ce:0b:f7:29:7c:f2:16:d0:55:d0:2b:5a:3d:0e:ca:
                    5a:fb:64:9c:86:7a:4f:c0:69:67:9b:e9:b2:e2:44:
                    e7:20:a1:51:75:12:b7:5e:77:30:7a:24:c5:d9:25:
                    f9:f0:01:8b:0d:af:e9:2d:95:32:79:88:c1:66:a1:
                    90:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CB:DD:05:13:05:76:63:69:30:AD:FF:AA:50:0F:BE:CF:C7:CB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4e06c23f-96f0-3ff4-b78d-9910db4f0502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:14:f8:15:2f:e2:df:a8:f8:98:e5:fc:fb:80:ba:9e:6e:d8:
         10:dd:ba:74:87:62:2e:c1:9f:72:fe:ee:64:b2:82:04:35:f7:
         0d:a2:d3:05:77:33:fe:ea:37:9c:2f:79:6c:ba:82:e7:4d:42:
         71:15:a5:f5:54:50:ca:5b:44:8d:dd:cb:aa:56:3d:2c:e7:43:
         b7:e5:09:37:77:92:9d:71:30:ce:78:3f:1b:8f:ac:de:9b:25:
         c9:39:df:c0:ce:b8:74:c4:f4:8c:6a:d6:5a:a6:b5:44:9f:7b:
         e1:37:27:48:f9:73:03:63:0b:10:03:8d:1b:17:0d:b2:c3:a5:
         e6:de:96:30:b0:f3:ef:31:bb:36:3d:f6:6d:b5:85:77:6f:c9:
         ba:03:79:b7:13:75:fa:58:96:bc:92:10:3c:7f:30:0a:f1:20:
         a8:9b:6f:b5:ef:92:74:46:91:a3:50:37:7c:a6:eb:71:23:e5:
         49:bb:b7:0f:42:44:89:a3:d0:b6:b3:86:58:90:e9:e3:c1:f8:
         5e:e2:81:52:b1:7e:68:c6:90:55:19:c7:6e:03:e6:7a:8d:8a:
         f1:b4:51:35:d9:97:43:1d:b8:f5:17:bb:7f:09:54:30:ee:e9:
         a1:91:b6:a0:94:05:d4:76:2e:74:d8:57:d7:46:30:29:9d:ee:
         2e:ee:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:50:21 2026 by rpki-client