Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/248e7835-27d0-3d5f-b348-cb4fe200390b.roa
File:                     248e7835-27d0-3d5f-b348-cb4fe200390b.roa (raw, json)
Hash identifier:          jG+V7HoZC8lqsmjqr6STnTPRpivrISzaeAkSd4dq6P0=
Subject key identifier:   AE:48:83:AC:E0:38:21:16:B8:CA:41:D1:2C:06:8F:55:C3:57:F2:7C
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EF9F5244C316CDF239E987678
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/248e7835-27d0-3d5f-b348-cb4fe200390b.roa
Signing time:             Thu 27 Aug 2026 13:38:43 +0000
ROA not before:           Thu 27 Aug 2026 13:38:43 +0000
ROA not after:            Wed 25 Nov 2026 14:38:43 +0000
asID:                     2914
IP address blocks:        173.44.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:f5:24:4c:31:6c:df:23:9e:98:76:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 27 13:38:43 2026 GMT
            Not After : Nov 25 14:38:43 2026 GMT
        Subject: CN=3e758bfc-39a2-4eb3-8d49-c240359c2497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:14:e0:58:19:71:80:cb:ed:12:8e:55:ac:
                    9b:a3:13:3a:30:ec:a7:f5:5d:a5:98:4f:66:39:ee:
                    f8:d8:bb:c7:08:27:39:e4:47:41:f9:0b:24:f2:19:
                    cf:ba:bc:1c:b7:88:9c:72:60:a8:89:bb:ec:69:bd:
                    43:4d:74:e1:6e:6b:5f:85:30:c5:e9:0c:4d:75:b5:
                    b6:a4:2d:14:ec:69:27:58:3a:4f:cc:5b:a2:20:bc:
                    6d:23:02:d9:0d:2a:52:39:f7:e8:89:62:9f:27:6c:
                    f5:71:30:37:66:80:28:f6:3a:f1:52:ea:98:75:2f:
                    d7:61:45:c3:09:94:bf:e8:c3:4e:cd:d5:6f:df:0d:
                    47:a4:9e:05:e9:f4:bb:ff:a0:ef:17:f8:07:71:7d:
                    07:94:41:66:22:bb:22:a9:2c:af:15:62:e5:da:76:
                    6a:35:66:cf:3d:b2:64:5d:9f:50:f4:19:98:ab:03:
                    2c:09:b5:ce:d0:06:7d:64:3d:f7:ab:22:5a:77:d8:
                    b0:d2:ed:d3:13:71:f8:e3:e7:44:b7:eb:8c:65:a3:
                    17:36:57:81:74:aa:f5:d2:d2:e2:b9:52:82:c3:f6:
                    a4:e4:62:80:23:c4:03:74:22:8b:a0:03:9a:cd:a9:
                    08:94:fc:45:f3:a5:82:48:ee:7b:5b:9d:b3:ba:a3:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:48:83:AC:E0:38:21:16:B8:CA:41:D1:2C:06:8F:55:C3:57:F2:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/248e7835-27d0-3d5f-b348-cb4fe200390b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a0:1c:a0:fe:03:ca:a5:d9:94:22:11:b8:ca:ca:c4:89:4b:
         d8:e2:f1:f9:eb:77:df:a1:32:67:58:53:b0:f8:00:29:94:73:
         a4:a2:e8:04:d8:c7:07:9e:e6:a1:5e:66:53:7d:91:3d:9c:47:
         5c:18:de:b3:e6:6c:50:5e:32:f8:8f:ef:09:19:28:d3:bb:b9:
         3a:59:18:90:fb:8a:b9:6b:d2:6f:f2:13:3d:dd:82:31:23:2a:
         c6:2e:5f:5e:35:9a:21:fd:f1:d0:f2:5b:ba:8b:ec:2d:d0:ff:
         63:f9:3c:ee:1b:58:41:3c:f1:2b:3c:a2:46:af:2d:6f:0f:dc:
         d6:ae:d3:86:65:f8:5b:e9:f1:27:d7:94:9b:f9:80:79:c1:56:
         a4:5e:f6:d9:af:11:04:d1:72:0f:21:a2:25:d8:e7:2f:c9:c7:
         7f:68:a6:d6:ee:40:a6:b7:dd:11:0e:e6:a1:2b:37:1e:7b:d8:
         a0:12:ce:b1:78:12:6a:ff:5c:1f:b6:b3:fb:61:7d:d6:0f:d3:
         04:d2:0b:55:0e:da:78:fb:d8:53:23:ed:79:6b:66:64:1b:61:
         a3:03:d2:5f:62:18:be:cf:2d:fe:2f:f2:96:ee:ff:5e:c3:7f:
         43:4d:dd:c6:a3:09:c8:41:d0:ce:f7:1d:3d:d9:d5:91:c3:7f:
         30:4d:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:00:03 2026 by rpki-client