Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/d2fe84b7-57c7-39cb-acbe-45a354fd7ce2.roa
File:                     d2fe84b7-57c7-39cb-acbe-45a354fd7ce2.roa (raw, json)
Hash identifier:          2ch9mt81D7tntMrW9Wbgm7LdjFglhGc2VbgXbIOs5e4=
Subject key identifier:   AD:7E:30:A3:43:E1:00:FD:EA:5D:31:09:8E:26:02:A4:E3:5D:2B:41
Certificate issuer:       /CN=59723481-42fd-4957-8eb9-3b266c71eec3
Certificate serial:       010D0C9F4328584DA81577B9094212ED7DA9B280
Authority key identifier: B9:AA:B5:CD:67:A7:46:3B:7E:AC:36:43:C2:D4:C3:35:47:08:E7:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/d2fe84b7-57c7-39cb-acbe-45a354fd7ce2.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     13329
IP address blocks:        174.34.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/59723481-42fd-4957-8eb9-3b266c71eec3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/59723481-42fd-4957-8eb9-3b266c71eec3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:77:b9:09:42:12:ed:7d:a9:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59723481-42fd-4957-8eb9-3b266c71eec3
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=afdad8ab-cc74-4a2b-9fc9-76af6ef5c89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:09:32:09:29:f1:6a:42:f3:ed:3e:4d:0b:ad:
                    5d:5f:99:35:44:34:86:5e:29:05:a5:7e:86:36:f1:
                    b0:46:23:31:0a:a1:b1:2c:35:10:7c:c5:93:80:43:
                    51:2e:e4:2a:ed:30:4b:65:0b:3e:e0:c6:c1:3f:d2:
                    ab:9c:be:68:a1:fc:31:fc:db:df:57:c4:7f:f2:06:
                    b6:10:b2:e0:85:5c:aa:d7:88:32:28:c4:3b:f0:39:
                    9c:58:6a:04:91:a2:5d:50:f1:b6:46:eb:53:d5:ae:
                    fe:14:1d:05:51:04:1a:83:52:4f:ce:c8:7e:fd:cc:
                    93:57:aa:81:5a:51:f3:00:ff:93:6a:47:69:36:4f:
                    81:d3:a7:62:9c:10:5a:21:6a:3b:23:c5:c1:7c:36:
                    bc:8b:61:27:59:b2:0e:40:de:9f:85:ca:7d:aa:f9:
                    ee:50:92:d4:a0:60:c3:18:e6:51:bd:8b:3b:44:18:
                    28:cd:7c:41:7b:ef:f7:98:b6:48:ea:4e:ff:96:d0:
                    5b:29:90:f1:df:cf:b8:c3:35:42:cb:56:d7:45:c9:
                    6b:9a:ac:33:47:13:5f:ea:9c:24:2c:d8:d0:25:0c:
                    12:8a:51:a2:6d:55:89:d4:43:32:8c:08:07:2e:3c:
                    fe:f1:7f:79:5f:cc:c7:40:b8:26:e5:09:24:5a:3a:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7E:30:A3:43:E1:00:FD:EA:5D:31:09:8E:26:02:A4:E3:5D:2B:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/d2fe84b7-57c7-39cb-acbe-45a354fd7ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3/59723481-42fd-4957-8eb9-3b266c71eec3.crl

            X509v3 Authority Key Identifier:
                keyid:B9:AA:B5:CD:67:A7:46:3B:7E:AC:36:43:C2:D4:C3:35:47:08:E7:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/59723481-42fd-4957-8eb9-3b266c71eec3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.34.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:9c:7d:29:c4:ae:1b:b1:10:27:25:fa:e0:48:81:86:9b:60:
         da:6b:a8:20:25:4e:ff:1c:02:b2:64:b4:a0:70:36:e1:f4:a4:
         93:34:93:9b:2a:00:dc:c0:5a:dd:b5:fa:b0:33:23:08:64:8c:
         87:30:b3:50:5a:6f:64:07:65:da:64:97:c5:56:39:4c:b5:2d:
         78:ac:4a:6e:43:3b:77:1a:8f:cf:39:d0:eb:ac:e3:ee:3e:30:
         19:d3:a9:ec:8c:6c:2b:83:60:8f:da:3e:ec:9e:a2:30:ea:57:
         65:c9:2d:4a:ae:4c:08:e5:bd:c5:64:64:9a:89:f0:13:95:8e:
         ca:6e:bd:20:e5:db:9a:7b:b8:2b:c6:ee:b8:8b:c0:f3:e3:4f:
         5c:fb:b7:a6:10:4d:57:c3:f1:91:fe:33:32:54:01:91:ff:e7:
         da:18:41:30:93:58:fe:77:8a:7d:1e:f2:63:8d:2f:eb:d5:e5:
         7a:a0:31:8b:59:60:61:23:9d:7e:42:60:38:37:bb:4d:bc:a1:
         18:0c:ce:df:f7:1c:68:ff:7f:86:51:d6:d5:02:95:82:63:e7:
         7a:a4:86:bb:d3:f8:f8:e5:67:9f:1c:5c:ef:29:fc:aa:2d:60:
         b2:4b:7f:2b:74:6d:5b:8e:5d:3e:95:f9:e6:a8:d6:20:9f:f0:
         72:46:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:27:42 2026 by rpki-client