Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa
File:                     dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa (raw, json)
Hash identifier:          IJJH6w68q4VB/wjKzuIVnXQ4L9XZtz9SnG/M3Q51X8E=
Subject key identifier:   B7:2F:7B:D8:EC:28:5B:C8:05:9C:C1:DD:06:87:42:11:8E:1A:E7:3A
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F4328584E2AD4530B5D105312D96A8880
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     52347
IP address blocks:        192.34.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:53:0b:5d:10:53:12:d9:6a:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=9dfd87fa-3573-4ba1-999a-9efb0822a208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:f9:9a:49:5f:74:c7:bd:c2:32:ab:0d:b6:
                    39:c0:25:12:54:3a:5b:9a:ad:50:c5:bb:c7:b9:eb:
                    6b:b6:a8:61:e4:0d:8f:d4:bc:55:df:42:f9:9b:09:
                    0e:c1:50:2c:d7:9a:f1:31:46:b6:7c:d0:84:fc:66:
                    e2:e6:34:16:56:3e:34:c3:6b:03:bf:99:82:1b:6b:
                    d9:b0:32:79:64:3d:68:74:8f:29:06:e2:40:e7:03:
                    c4:72:e7:07:cc:03:d0:0c:03:60:9e:3a:a0:7f:07:
                    10:50:d6:8b:40:a1:1b:25:07:69:51:ee:b4:4a:c3:
                    d3:5a:50:8d:2e:71:34:4a:be:51:9b:91:ca:84:14:
                    20:68:d7:ee:b8:21:1b:96:3a:e5:01:59:03:7f:06:
                    5d:bc:b6:06:03:3c:67:df:f3:cc:35:22:f5:2a:19:
                    d4:80:fd:94:6f:6a:50:7c:90:d7:93:29:51:98:9a:
                    c3:54:95:67:aa:39:d8:b0:79:91:0d:fc:fa:9e:a0:
                    f8:ec:a1:fc:fd:33:07:e1:1a:a2:72:5b:0e:26:42:
                    6e:27:77:07:0b:af:cf:4b:9c:ed:bd:27:71:9f:4c:
                    19:f7:2f:b5:b8:9a:6d:3c:eb:a1:c5:d7:b9:ac:06:
                    31:da:dc:b6:19:d5:df:1d:4d:bb:3a:7e:c6:7b:50:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2F:7B:D8:EC:28:5B:C8:05:9C:C1:DD:06:87:42:11:8E:1A:E7:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/dd4d4e00-eade-321d-a6a4-b773ea2c5458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4b:3c:24:db:45:87:10:39:4d:ad:4f:be:f2:5c:9e:33:54:
         dd:d4:06:73:c4:bc:be:18:7a:66:15:6e:a1:7d:7a:86:c1:d1:
         c8:01:43:d6:b2:ad:b1:67:64:29:45:7f:55:10:77:31:1b:2b:
         46:aa:78:da:d8:a6:20:f0:58:b6:bc:e0:70:0c:da:53:fb:20:
         c7:64:4f:10:d3:47:ed:08:7d:85:40:b7:63:f2:27:fb:af:89:
         ce:30:e0:87:0a:b8:8c:f9:77:61:0d:e7:ab:3b:ca:2c:4d:b5:
         ef:90:02:1a:6f:43:2a:de:27:64:17:94:0c:c7:42:a5:6d:5d:
         dd:cb:47:a0:7b:2e:d9:67:96:61:21:e1:a1:83:00:2f:30:b6:
         fd:bb:5b:e0:9a:f4:67:55:b9:14:41:fd:13:d0:0a:fc:7d:ad:
         1b:e7:4d:73:1a:b4:c2:9e:bf:c4:b1:e1:89:9c:05:eb:7f:56:
         25:4d:3a:33:d8:0d:9a:97:86:dc:e0:e7:6d:c2:63:36:8d:ad:
         c0:b1:c3:82:ba:b1:6a:a1:d1:24:ef:1c:6a:62:ef:81:9f:a1:
         19:4f:35:90:19:bd:8e:66:7c:ff:c6:c3:c4:99:51:39:6c:1e:
         01:70:8d:1e:fa:cd:5b:b3:16:e9:e3:6c:84:b1:2c:e7:ee:c1:
         73:4b:ef:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 11:29:30 2026 by rpki-client