Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa
File:                     8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa (raw, json)
Hash identifier:          9Wr3snx1mUa7ZjnayVWls+gAZo0LZrMssc3QkG2Nyo8=
Subject key identifier:   D2:1A:E0:7E:28:7F:36:A0:20:09:A4:9C:A8:37:6B:C8:67:79:67:73
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F4328584D71A50D9E13C4F1CF82957800
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     19198
IP address blocks:        209.178.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:0d:9e:13:c4:f1:cf:82:95:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=8d245790-c2ed-4ef3-98cf-9398b22fc558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:13:eb:b9:92:5a:d2:e4:37:f1:e3:c8:2e:
                    dd:89:87:64:96:b7:a4:29:39:1e:49:d9:12:d9:82:
                    35:8b:26:c9:95:3f:a4:52:c4:0f:5e:a9:bd:3c:61:
                    1f:96:f4:3a:24:b1:43:46:58:57:b9:70:32:dc:6a:
                    64:cb:95:69:5c:d8:b3:a5:08:80:d7:f3:7e:83:dc:
                    d3:10:2f:7e:ad:5b:4a:99:27:8f:c7:e9:ad:ca:74:
                    2b:d4:12:df:94:ef:ce:c1:34:a9:10:a9:8e:75:81:
                    1d:df:ed:13:2d:4a:ec:c6:70:e1:12:95:4b:17:ec:
                    04:f9:4f:7f:58:e1:22:71:ad:0c:a0:76:a4:f7:84:
                    c6:fe:6f:f1:f9:48:3c:e1:ff:05:8a:27:3a:92:47:
                    b9:16:a6:91:90:f8:5c:34:95:e2:28:82:ac:67:21:
                    44:88:f2:c5:8b:4e:d9:03:70:07:2e:a1:7a:dc:f7:
                    20:4d:d0:ca:6e:db:ad:7c:1b:56:60:46:b5:e8:a4:
                    df:7a:70:8e:82:26:e5:13:cc:02:09:d1:d9:f9:92:
                    12:5c:85:65:86:f1:62:31:38:e8:7f:eb:b8:dd:f4:
                    50:aa:04:e9:2f:ca:59:25:31:3c:99:77:a4:b9:d2:
                    84:41:35:84:69:a1:b5:dd:37:6c:bb:d3:7a:03:f6:
                    67:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1A:E0:7E:28:7F:36:A0:20:09:A4:9C:A8:37:6B:C8:67:79:67:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:56:65:62:6f:11:8a:d1:c0:46:e7:d5:41:f5:65:d7:7d:
         a9:25:14:78:0e:19:dd:3a:3c:12:63:0d:8e:c8:9a:8a:be:14:
         c8:21:92:5a:ee:d0:c0:53:74:73:41:45:bf:b5:a3:2e:da:57:
         11:f4:e3:5e:9b:18:bf:16:08:35:dc:7b:8e:2a:85:f8:43:04:
         99:16:45:76:94:a0:1b:c6:e8:89:5a:9e:f1:c8:ca:8f:1d:65:
         f7:ba:4b:a1:52:b6:a9:4c:96:1d:27:15:bd:09:b2:27:d9:9e:
         76:c6:26:b9:c5:bb:d8:39:79:f4:3a:c1:90:4c:1e:50:75:63:
         c8:1d:94:f5:f9:3e:ad:b5:9b:cb:f8:26:50:03:fb:51:da:2d:
         54:e4:73:fa:5e:72:05:45:e9:88:c5:98:cf:26:ed:d0:80:4f:
         be:df:46:ac:4e:2b:2a:2e:ea:ab:95:58:c8:dd:44:2f:31:19:
         a3:71:be:e1:cd:62:85:d1:b2:fe:9e:dd:f0:95:26:2e:aa:e0:
         a8:98:0e:59:20:5e:33:d5:c2:4d:a6:0b:5f:5d:47:e4:ce:27:
         39:08:69:12:80:8b:4d:18:1a:89:1a:28:ea:83:11:34:fb:fe:
         3a:33:f9:4f:c8:6d:43:a5:e8:59:25:d9:f1:97:ff:8d:b7:0c:
         7c:b8:85:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:25 2026 by rpki-client