Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/82aa7469-b46a-3167-8e78-9245178a8cee.roa
File:                     82aa7469-b46a-3167-8e78-9245178a8cee.roa (raw, json)
Hash identifier:          TAHZVCi28GmlSJri9bkIbB2RJcUZfMnuX7b8Y4T53v0=
Subject key identifier:   85:6A:1A:E8:13:A5:7A:E8:2A:4F:9D:03:6B:CB:D3:A1:DF:D8:F0:0C
Certificate issuer:       /CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae
Certificate serial:       010D0C9F4328584DFA707C45BFAC203F0B437300
Authority key identifier: 5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/82aa7469-b46a-3167-8e78-9245178a8cee.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     400202
IP address blocks:        170.39.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:7c:45:bf:ac:20:3f:0b:43:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=61304186-0b66-4d54-a582-2f212c3dfe00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b8:40:6a:0c:ef:38:ac:c3:a3:26:90:90:1a:
                    47:ec:b0:2f:70:04:f9:a6:a0:51:0b:ca:1d:4e:63:
                    79:59:c7:79:36:77:50:fb:96:74:5c:55:7e:5a:8c:
                    e2:87:78:e2:df:67:74:5d:72:3b:5a:22:c9:41:88:
                    f6:25:9c:6d:67:37:7f:d3:f1:35:f1:d1:71:f3:0e:
                    1f:c1:d0:7c:fc:9a:20:22:90:23:65:88:98:16:05:
                    7c:58:1a:85:69:39:01:1d:2a:d7:ad:98:e9:72:c9:
                    e7:01:31:93:a6:ef:96:da:33:80:b1:17:5e:cb:7f:
                    94:f3:f1:68:a1:63:6d:d0:e2:f0:55:0d:47:cb:57:
                    35:64:03:6f:c6:91:e1:26:59:59:ba:83:88:71:1a:
                    b1:8b:21:c4:5f:0d:b8:28:50:d7:c7:07:a7:de:07:
                    a3:f8:6b:9c:34:4a:c7:e7:18:35:23:92:f1:0e:a0:
                    a0:05:8f:98:ba:4c:ad:dc:48:0f:4d:b8:01:3a:3a:
                    df:32:d8:eb:c5:cf:00:40:85:11:8d:67:8f:45:1c:
                    fb:6e:b9:73:f1:91:35:48:f6:36:f2:9b:18:9a:4b:
                    8a:8e:50:e2:65:9a:d2:79:74:b7:75:5d:98:37:63:
                    b9:94:45:7f:d5:d0:61:e8:f3:ef:c3:f3:82:c7:0d:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6A:1A:E8:13:A5:7A:E8:2A:4F:9D:03:6B:CB:D3:A1:DF:D8:F0:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/82aa7469-b46a-3167-8e78-9245178a8cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl

            X509v3 Authority Key Identifier:
                keyid:5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f5:73:28:da:20:d0:0f:0f:7a:df:8a:f4:f8:cc:5f:1f:dd:
         1c:cb:16:5a:37:af:42:c8:cd:e9:d8:53:ff:d0:f1:87:55:58:
         22:55:ea:71:fc:6c:71:8f:37:f5:b9:a8:e2:27:b6:d7:3f:60:
         13:2d:27:fa:56:33:d3:7a:9e:0e:9f:9a:72:c0:7d:92:88:d4:
         f0:34:a8:9e:9e:2b:a3:63:a5:ae:01:45:5d:73:6a:78:63:d8:
         66:78:81:a4:d0:ad:8f:f1:f8:ea:21:be:72:f1:10:b3:8a:4b:
         ea:37:f2:79:67:76:80:cd:79:fd:67:1a:8a:df:cd:78:6d:9c:
         8c:a6:03:1b:08:06:40:e6:f2:5b:30:da:10:8f:f7:31:a8:54:
         d9:1d:9f:7e:65:e9:60:d4:43:8e:12:38:4c:01:ca:21:4d:3e:
         d4:71:01:a2:03:1b:7d:9c:5e:33:aa:b2:bb:3f:02:fe:a2:5e:
         15:bb:f7:0f:4f:9d:fc:5d:16:43:9e:ba:8c:82:2a:6d:fe:af:
         f2:90:b6:e5:0d:ab:bb:ef:75:cc:a3:79:1f:16:59:c7:67:3d:
         9d:3f:e3:95:a4:7b:d3:c4:67:bf:1d:99:28:4a:2b:a1:68:1e:
         9e:31:5e:7b:7d:49:a2:b1:5a:16:5a:f1:33:0c:64:0b:b6:7d:
         44:f7:13:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:09 2026 by rpki-client