Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fb9d5598-6b55-3ced-843c-aa052d7659be.roa
File:                     fb9d5598-6b55-3ced-843c-aa052d7659be.roa (raw, json)
Hash identifier:          XpRKfr6ltNaFmneV41SOL7b22BNuzYU5iEzV22ymP9o=
Subject key identifier:   DC:F2:E4:5C:32:70:F5:3D:08:F0:0A:DA:A7:D5:29:5E:F1:D3:D3:6C
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584DFBD628F4023FF1DD8EA74DA0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fb9d5598-6b55-3ced-843c-aa052d7659be.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     174
IP address blocks:        173.44.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:28:f4:02:3f:f1:dd:8e:a7:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=962b44c3-743d-448c-b1e5-2c46156d1797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:b7:5b:ea:2c:9a:30:c5:09:1c:d8:d0:f2:
                    fc:03:26:07:cc:ad:80:fc:1f:bd:e4:ad:0f:a6:b5:
                    02:9c:d5:8c:78:63:83:41:f9:7d:7c:76:ab:c2:e9:
                    6d:00:f5:e8:62:6e:5c:42:7c:6d:11:d8:34:0f:fd:
                    11:34:f1:9b:9a:46:35:7c:3d:87:c0:85:4a:07:f8:
                    86:21:78:9b:23:2d:5d:31:60:5c:58:63:00:0f:44:
                    fa:aa:06:17:0e:85:0e:81:d3:cd:bd:14:cc:b2:99:
                    5b:81:83:9f:52:51:ef:8f:99:af:ee:91:7f:31:c7:
                    87:6e:43:55:a0:3f:9f:4d:d1:94:60:0d:be:89:f8:
                    0f:b4:f2:fe:64:df:ee:10:bc:44:1b:9a:8d:5a:02:
                    ba:42:c1:f5:5b:01:ef:db:be:19:81:fc:04:67:64:
                    4a:cd:48:e9:ca:78:17:b0:6b:6a:d8:2e:1b:84:2c:
                    9d:1f:f4:18:eb:a0:a3:ca:91:23:0d:5b:96:21:1e:
                    2e:65:86:4b:63:d7:57:3e:b8:ac:80:a3:c8:05:2b:
                    37:c0:e5:88:ec:d0:b8:91:15:4b:5d:05:4b:d9:28:
                    3a:96:99:ae:27:4e:80:1a:d6:5d:93:18:df:d5:c9:
                    7a:62:98:87:bc:64:a3:bf:93:50:13:54:e5:d3:f5:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F2:E4:5C:32:70:F5:3D:08:F0:0A:DA:A7:D5:29:5E:F1:D3:D3:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fb9d5598-6b55-3ced-843c-aa052d7659be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:15:b8:68:99:d6:46:ad:d0:fd:5d:8a:c0:e8:93:7d:fb:74:
         71:82:5e:e9:39:7f:d4:28:d6:2d:80:56:42:3b:3e:3d:00:9e:
         97:4c:ed:ed:2d:f1:a4:c9:a7:5b:58:5f:d0:f8:b2:e5:c0:d8:
         69:b5:04:28:4b:d0:e5:61:0e:ae:4f:22:f7:35:50:db:29:cf:
         dc:3e:fa:1b:c2:11:8e:45:35:f4:85:47:85:9a:be:c4:f6:05:
         7d:3e:6a:a6:02:c6:40:69:31:6a:c5:fd:d3:12:37:1d:68:c2:
         1b:2a:4b:c0:5f:15:bd:5d:5a:12:39:9f:af:96:35:ea:23:2a:
         30:08:25:c1:c9:42:54:82:1b:99:c5:f7:1b:d4:e6:b2:0c:21:
         5f:12:bf:2e:8f:65:98:c2:34:9c:51:43:71:79:1c:a7:6f:11:
         23:51:72:b4:61:48:68:fe:1e:54:2b:a8:c0:4b:f6:2f:c0:93:
         1f:0f:ab:37:2b:e3:ee:7e:75:8b:2c:25:36:5b:8e:8f:6f:35:
         7d:de:4d:5b:47:a8:f5:5b:94:f0:02:18:a0:e2:06:3f:5b:85:
         78:f5:df:6e:a6:06:9f:ec:38:c2:5c:0e:10:14:db:53:c8:d4:
         9f:1f:dc:01:aa:00:94:91:25:50:55:e2:7a:1e:e9:9c:a5:a3:
         7d:a3:37:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 17:51:45 2026 by rpki-client