Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/1442eb44-36e5-3a45-b766-4e0d8247c860.roa
File:                     1442eb44-36e5-3a45-b766-4e0d8247c860.roa (raw, json)
Hash identifier:          9ZlwNhBIAm6aKtaibK8CL0rDAptWgdv0pd/MWbBNrKE=
Subject key identifier:   02:A5:94:7B:55:FD:DE:95:06:6C:B9:EC:45:E7:27:22:40:B7:A4:3E
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F5CC0028DA081B1065EBF5940
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/1442eb44-36e5-3a45-b766-4e0d8247c860.roa
Signing time:             Thu 01 Oct 2026 22:56:42 +0000
ROA not before:           Thu 01 Oct 2026 22:56:42 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     40934
IP address blocks:        189.25.39.0/24 maxlen: 24
                          189.25.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:c0:02:8d:a0:81:b1:06:5e:bf:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Oct  1 22:56:42 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=b9a537f2-baff-459d-a7a1-28ed0b1dd3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:6e:a1:3e:34:5e:f6:b4:34:f1:43:6b:c6:
                    7d:d3:52:96:e9:c3:ba:e6:b1:89:6c:6e:e3:3d:cc:
                    d3:80:25:3d:24:d5:dc:7b:e0:d8:6b:3b:31:e6:2b:
                    91:66:48:06:b3:14:76:df:19:6a:1b:5f:44:71:9a:
                    ff:4a:e4:52:37:9a:d9:77:5d:82:b9:17:54:04:37:
                    7f:a3:ba:d6:38:05:cc:13:54:44:80:64:b0:b9:83:
                    d8:cd:d0:c5:91:14:8a:14:95:be:d7:53:e8:d7:88:
                    b7:56:4a:67:b9:db:eb:48:b4:de:21:f0:ab:b3:31:
                    24:1b:b6:3a:6f:86:76:65:57:f2:2d:5f:2e:25:24:
                    6b:83:bf:78:a3:cf:f0:64:6a:f2:b4:28:0e:3f:50:
                    c9:b3:16:07:82:8c:af:42:41:67:bd:d3:81:17:19:
                    7c:57:3a:2d:08:ea:6b:e9:87:18:de:d6:ea:53:8a:
                    fa:cf:d8:d4:1e:79:3a:d7:34:56:83:7e:0b:0b:25:
                    90:6b:f1:40:e0:47:b1:7b:e9:70:cb:7b:e1:a4:58:
                    96:13:b4:39:0c:52:3b:8a:ce:21:7f:4f:a7:a3:e0:
                    23:b6:6e:a1:61:d7:69:1e:10:e6:f6:18:50:66:8d:
                    e2:be:75:1d:bf:29:12:ee:4c:f3:31:75:ce:d9:cb:
                    10:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A5:94:7B:55:FD:DE:95:06:6C:B9:EC:45:E7:27:22:40:B7:A4:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/1442eb44-36e5-3a45-b766-4e0d8247c860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.25.39.0/24
                  189.25.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:74:1d:cc:38:95:46:13:13:43:c3:ae:33:21:49:31:08:06:
         d9:e5:4a:49:80:b4:3e:2f:1b:d9:d6:fc:c1:12:5a:aa:e2:ca:
         fb:71:fa:bc:9e:63:0f:3d:5b:c2:68:23:f3:43:dd:95:40:71:
         1a:da:66:92:32:37:cb:d9:25:7c:05:5b:1c:e3:d8:24:84:88:
         da:5a:87:c5:18:df:6c:9a:d0:e3:77:ff:a0:0b:18:c3:55:a3:
         01:8b:38:1e:f1:44:99:6c:c0:d7:e6:bd:cc:b4:0b:ac:6f:93:
         f6:83:53:85:40:f8:a3:f7:41:24:01:f5:3e:fe:e7:81:b0:ae:
         66:d1:d3:80:4c:63:49:a8:32:6c:59:83:c7:f2:6f:ae:1d:8f:
         d8:16:be:80:9e:8b:2e:ef:a8:37:24:61:1f:0b:e7:49:8e:c5:
         e0:f2:84:5f:8d:26:c9:01:29:6b:5c:c0:50:55:de:13:61:0f:
         cd:b1:6a:ca:59:45:f7:eb:31:71:76:95:65:37:5e:dd:f3:22:
         96:f2:5b:30:af:4f:dc:91:26:20:e0:5e:b9:0e:94:b4:65:de:
         d6:cc:8f:28:3e:b4:e5:e7:b1:ee:5b:70:b8:14:a8:24:5a:21:
         52:7b:28:43:3a:6f:7d:db:22:b5:af:13:a9:da:6b:28:88:dd:
         c7:80:f3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:19:19 2026 by rpki-client