Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f4c086bb-e891-3faf-bef5-485126574471.roa
File:                     f4c086bb-e891-3faf-bef5-485126574471.roa (raw, json)
Hash identifier:          jACviTlDt7mPYADgq1gX5t0dbmeU6i2CBwoJp3jxyZ0=
Subject key identifier:   51:F6:3A:77:F0:2D:16:D8:5E:9A:EE:DC:95:1B:44:57:59:F5:16:75
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBC29CBD81D496BC49F4347B8
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f4c086bb-e891-3faf-bef5-485126574471.roa
Signing time:             Wed 05 Aug 2026 10:24:42 +0000
ROA not before:           Wed 05 Aug 2026 10:24:42 +0000
ROA not after:            Tue 03 Nov 2026 11:24:42 +0000
asID:                     27411
IP address blocks:        173.234.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:29:cb:d8:1d:49:6b:c4:9f:43:47:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  5 10:24:42 2026 GMT
            Not After : Nov  3 11:24:42 2026 GMT
        Subject: CN=d1350d04-bb2c-4bba-92c7-4b0d5381426d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cb:16:3c:6b:61:cd:3e:c7:06:df:23:ce:a0:
                    a3:1e:41:b4:38:9c:3a:e7:27:37:a1:94:e3:64:e3:
                    4a:4b:94:6a:af:fd:91:d9:c0:55:ec:d4:9f:b5:fd:
                    51:42:d7:30:8c:be:bc:a9:8f:0b:dd:9e:03:70:85:
                    1a:0f:12:0c:59:de:51:be:ca:74:18:46:3a:f1:26:
                    c1:8c:cd:61:36:6b:5c:55:06:dc:5b:98:dc:17:e6:
                    90:6a:20:8b:72:54:c8:11:c8:16:12:f7:62:9e:00:
                    6a:f3:a6:2f:cd:80:3c:13:91:22:4e:b8:39:55:5f:
                    42:cf:ec:9a:45:c0:34:f0:05:04:b5:fc:95:48:3e:
                    2a:77:33:ee:61:e6:ae:c9:af:bc:0a:36:e9:ac:e3:
                    48:9d:00:ba:17:0e:67:1b:34:94:88:69:82:4a:a9:
                    c2:75:fa:c8:8c:0a:bb:b5:d0:45:70:45:2c:92:82:
                    f9:f0:17:ad:76:ba:cf:92:fc:bb:b6:15:8f:11:b8:
                    4f:8b:69:f6:c9:98:04:39:aa:d0:74:39:ce:97:59:
                    c9:f4:4b:c9:59:6b:6b:f5:4b:92:47:34:37:ea:ea:
                    3b:c9:3e:33:c2:6a:bc:ac:0a:aa:f6:38:bd:85:1e:
                    9c:27:b6:66:b5:52:39:a8:1f:c4:12:59:46:21:7c:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:3A:77:F0:2D:16:D8:5E:9A:EE:DC:95:1B:44:57:59:F5:16:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f4c086bb-e891-3faf-bef5-485126574471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.234.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:97:cd:2c:c7:a2:e2:7f:8f:16:1c:b0:ca:b8:2a:0d:20:c5:
         e8:12:d5:a5:ce:33:71:1e:b5:aa:17:90:b0:4d:1b:76:c1:1c:
         ec:46:1c:18:d8:cb:dd:9e:1a:ef:80:dc:ed:6a:5d:77:86:ea:
         25:b9:dc:fa:f4:7c:e5:74:df:83:17:d6:62:0c:df:a2:75:52:
         43:b5:60:8c:28:52:3a:fa:1f:de:94:a9:37:d3:de:c2:a2:66:
         89:7f:d6:8b:72:a2:ff:ae:8b:76:7d:1c:5e:6c:3b:44:07:6f:
         31:72:aa:97:f5:10:89:7f:f1:64:26:e6:89:00:49:48:23:21:
         ba:50:38:a3:78:bc:2d:66:e8:b0:23:f0:ac:65:04:1b:b7:5e:
         ba:c7:a9:d6:60:99:26:15:ee:70:ed:f0:5f:da:0c:57:22:1b:
         8c:e1:7e:62:1e:a5:be:7e:29:af:22:42:a9:02:85:45:cd:24:
         5b:0b:42:10:28:80:ab:be:4f:cb:7b:eb:64:8e:1f:97:97:6e:
         53:fd:41:f0:d2:51:0f:55:96:6c:91:be:c0:61:a9:c8:23:ac:
         6d:ed:ee:60:29:48:ba:6e:44:6e:b2:09:ce:9b:74:03:6a:36:
         8f:6c:58:9f:53:4a:e5:68:df:6f:d8:d8:67:70:9e:be:a0:48:
         44:73:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:01:35 2026 by rpki-client