Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/c0b2d916-b232-3a0b-9970-3b58b6b50557.roa
File:                     c0b2d916-b232-3a0b-9970-3b58b6b50557.roa (raw, json)
Hash identifier:          RAwr46vk5D/rzk5YaiJERthrg4uj9rxYaajyuZ21OE8=
Subject key identifier:   9F:E3:4F:17:77:A9:54:B5:F0:0B:D4:AB:F7:7A:77:8B:5A:9E:64:44
Certificate issuer:       /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
Certificate serial:       010D0C9F4328584DF21082D2D09204702D712490
Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/c0b2d916-b232-3a0b-9970-3b58b6b50557.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     32402
IP address blocks:        173.242.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:82:d2:d0:92:04:70:2d:71:24:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=11f04ac4-4fe4-456b-b612-1058e2bdbcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:34:f3:02:a5:d3:d5:82:16:ed:16:bd:5e:
                    f3:2d:00:db:d6:48:90:50:ef:e9:86:c5:f7:ca:4e:
                    23:18:e0:1f:a1:ea:b7:e5:c2:ba:ae:72:6b:35:99:
                    97:9c:f2:22:e0:e3:73:3a:83:11:9d:3f:41:f0:1f:
                    d3:0f:a0:e2:8b:ab:ca:c8:5e:f2:fc:b9:78:ce:46:
                    fb:40:2e:c2:da:63:cc:8d:86:34:a3:e5:87:bd:86:
                    0a:fd:3c:b3:19:16:57:de:88:67:01:21:33:74:fc:
                    8a:8a:f5:4b:c7:53:8f:b0:4e:98:fc:ec:ca:29:3a:
                    ab:03:6d:2a:1e:76:7e:ea:0a:68:bf:6b:e9:fb:ff:
                    6f:6d:10:19:ac:6c:6e:60:53:dd:47:b7:f5:bb:3e:
                    51:4b:31:30:d9:2d:c8:6b:f6:d9:27:a3:d8:f9:50:
                    5e:cb:d6:5a:4c:07:1b:6f:da:9e:f8:c7:63:47:b7:
                    19:4f:0e:64:71:2a:ac:ed:16:fd:f3:78:f3:21:d3:
                    11:1f:57:a8:86:a5:7d:56:fa:ef:9a:a6:32:bb:d4:
                    17:49:e2:d7:71:0b:1c:4d:1c:2b:e8:f2:7f:38:4e:
                    38:c7:8d:68:db:42:3a:e4:22:3c:c7:28:d2:58:50:
                    cd:ef:e5:de:30:ba:d8:b0:22:fd:44:a4:7a:5a:77:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E3:4F:17:77:A9:54:B5:F0:0B:D4:AB:F7:7A:77:8B:5A:9E:64:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/c0b2d916-b232-3a0b-9970-3b58b6b50557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:77:f2:b3:dd:1e:97:49:8a:4d:df:de:a9:0e:59:f4:a8:ce:
         3e:6d:c2:10:22:03:37:6c:e9:dd:02:6e:10:30:52:1d:2c:af:
         37:94:bd:a2:cc:f8:af:7c:04:4d:9e:c0:19:1d:cf:72:fd:69:
         06:ea:dd:80:6a:c5:b2:e7:11:8f:df:90:0d:88:c5:4b:39:f5:
         55:11:66:2d:bb:5b:16:b6:26:26:b7:1a:85:d0:f0:7e:ff:84:
         91:54:80:1d:60:97:62:5b:89:4d:fb:4a:b0:fc:52:98:d4:b3:
         cb:35:ca:1a:87:e9:14:81:08:24:a5:b3:87:9f:dc:21:02:b5:
         09:0e:88:98:51:ea:3e:5b:e0:ff:e5:8a:cd:3c:d0:d4:d5:63:
         54:c1:44:42:00:aa:1e:59:d6:e2:3b:a8:79:ea:66:b8:88:28:
         2a:70:c3:61:0d:e4:d1:cc:09:cd:ea:c3:b4:23:36:f6:97:95:
         c7:63:a6:ee:1e:74:df:48:a8:e7:b1:72:76:8b:9f:3f:ad:b5:
         41:d1:8e:7d:96:e5:ed:0a:c8:7c:f7:60:e5:1b:70:0d:f6:6f:
         6d:5c:c9:08:48:39:7b:68:5a:be:26:3e:3d:b8:31:ca:02:83:
         cc:a2:46:d1:fa:9d:61:aa:c6:fd:83:db:b7:33:7f:a7:a0:30:
         17:8f:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 12:59:23 2026 by rpki-client