Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/2091e078-b342-3919-9562-359a473a7bb0.roa
File:                     2091e078-b342-3919-9562-359a473a7bb0.roa (raw, json)
Hash identifier:          uagDrHJzyvbu8C0hZ1kjUC/jNrdbQv4Hv7tMKopdZIo=
Subject key identifier:   E5:B0:11:22:67:F4:CD:F1:BA:CA:6A:53:9C:12:50:98:6B:06:F6:21
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584F7BB2F08D44EA21BCF74BE8B0
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/2091e078-b342-3919-9562-359a473a7bb0.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     25655
IP address blocks:        173.241.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:f0:8d:44:ea:21:bc:f7:4b:e8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=ca3b060e-ba75-413b-8502-aaf27488ee56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:b8:53:42:22:db:70:66:a5:67:9e:ac:27:
                    17:4c:79:ce:80:0c:6e:48:dc:72:30:3e:ef:9d:ee:
                    2a:77:77:d1:db:e1:c4:10:83:55:3f:be:9d:58:aa:
                    8b:a8:5a:3d:7d:10:15:b8:bb:51:95:e1:0d:cf:de:
                    d4:2c:42:6f:b7:e3:8f:b4:09:4b:a7:94:3a:e2:ca:
                    70:fd:b5:91:ce:32:65:73:df:8a:50:f7:75:79:c3:
                    21:50:bc:fb:4c:c5:3d:0a:02:30:d2:01:ad:a0:66:
                    07:92:5a:a5:69:fc:b4:3d:cb:4d:54:8e:72:76:9c:
                    f0:a7:30:fc:61:73:7c:c7:f2:d5:e2:18:d6:62:c8:
                    0e:55:13:11:a8:07:23:94:cd:f0:0a:a8:24:0a:3c:
                    23:f7:93:0d:85:02:31:a8:34:04:1a:f2:d0:5c:63:
                    c2:ca:fd:43:a2:54:e9:44:ae:14:13:f9:fe:13:80:
                    0b:27:1a:93:c0:ab:8d:0f:0e:b3:ab:b2:48:36:a9:
                    5d:c9:7b:c2:2f:35:46:60:cb:2b:97:bd:9c:1e:29:
                    7d:ee:d5:cc:1e:50:11:21:ce:9e:e8:13:17:b3:ea:
                    fb:8d:73:5c:bd:f7:a5:5d:c8:39:18:ab:2a:88:2b:
                    43:c0:a4:7d:a8:bb:f1:3e:72:0c:88:a6:be:00:cc:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B0:11:22:67:F4:CD:F1:BA:CA:6A:53:9C:12:50:98:6B:06:F6:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/2091e078-b342-3919-9562-359a473a7bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:6a:4e:7e:9a:ef:ef:b5:a2:be:96:1f:5f:70:36:a4:2c:41:
         08:28:bc:fa:f6:31:a5:3a:ad:c7:89:ee:82:eb:09:47:cc:66:
         e2:14:f8:c4:50:f9:f5:21:17:c5:79:21:ec:7e:5f:72:cf:2c:
         6c:01:da:38:69:24:4e:f2:92:bb:35:1b:82:c8:2a:51:6a:cf:
         23:c5:27:1a:c7:13:07:cf:eb:2e:0b:91:80:45:5a:60:8d:1a:
         6e:fa:e4:35:d5:2f:42:20:88:d1:9f:39:a4:fe:17:dd:4a:dc:
         0d:f7:3a:50:e6:87:a9:73:b6:26:b7:f0:95:02:29:a4:f5:be:
         65:0b:c7:17:42:99:cd:0b:ca:8a:65:f1:cd:6e:d3:a3:aa:99:
         a0:83:7a:de:0d:3d:53:ad:a3:42:b2:04:e4:c1:55:31:cc:f8:
         b8:0c:9a:f0:5b:f5:13:ed:ee:18:93:b7:93:54:72:c9:55:54:
         a6:67:80:b6:bb:5d:88:da:b6:bf:71:1b:b0:76:00:b5:95:3b:
         56:70:6c:03:33:cc:c5:2d:48:0a:7c:54:d2:fb:7d:0e:ce:57:
         aa:3b:d1:e3:22:da:ea:1a:73:ea:86:4f:b8:47:cb:25:5f:dd:
         2d:11:52:ee:46:f7:04:46:cd:88:bd:5f:96:b9:ef:29:41:0e:
         18:6d:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:25 2026 by rpki-client