Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ed29ca5-02c8-387e-91fc-23f824c72f78.roa
File:                     6ed29ca5-02c8-387e-91fc-23f824c72f78.roa (raw, json)
Hash identifier:          ZV7vyjZtJs8IAeoilK73T236V1airXTdpcRKu0KALbU=
Subject key identifier:   0B:52:DC:D9:40:62:BC:D1:F3:2A:99:03:02:AF:7D:36:BD:6A:88:9D
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584D83CAAC6BC42C613A21E50380
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ed29ca5-02c8-387e-91fc-23f824c72f78.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     2924
IP address blocks:        209.176.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ac:6b:c4:2c:61:3a:21:e5:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=1d6d129f-ed96-474c-9122-06cd6def889e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:bf:9e:77:1c:7b:5a:5a:35:c6:f1:ef:d4:
                    3c:46:cd:8e:2f:e5:0b:67:04:69:8e:fd:93:32:58:
                    6d:a4:62:b2:5b:30:fc:27:1c:fe:95:78:3e:e0:38:
                    f5:ba:d6:71:87:34:b1:df:8a:eb:03:fe:29:55:bd:
                    15:a1:34:0e:fd:62:d3:22:d4:ef:8a:96:4f:b5:6c:
                    65:23:8b:15:99:92:28:87:62:de:3d:0c:0b:53:57:
                    9c:e8:dc:2a:b5:f7:d7:1f:c0:ce:83:11:3f:a2:4a:
                    df:c2:51:4e:d4:dd:ab:71:25:f1:6b:f2:31:1e:85:
                    46:68:aa:1c:80:cd:26:d8:6e:ab:cb:fd:9b:7c:b6:
                    37:64:9f:51:18:b0:d1:55:cb:4a:de:2a:67:81:73:
                    11:cc:d6:8f:16:4c:a7:80:3d:bd:6b:61:73:3c:e5:
                    1b:fa:80:38:1e:9a:0d:42:7b:e1:89:7b:fd:f6:62:
                    be:25:bf:76:eb:4a:d6:66:69:2c:24:ab:3a:ca:63:
                    2f:72:e9:8f:a9:d4:da:2a:7f:82:db:2c:84:9f:2a:
                    b7:10:7c:70:6e:d2:55:e8:42:2c:04:4d:0c:bc:12:
                    98:da:42:23:48:d7:14:1a:9e:a5:01:6a:76:88:0e:
                    00:8d:bc:df:38:4f:99:63:f0:88:bc:85:18:b7:64:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:52:DC:D9:40:62:BC:D1:F3:2A:99:03:02:AF:7D:36:BD:6A:88:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/6ed29ca5-02c8-387e-91fc-23f824c72f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.176.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8c:f3:d6:fa:ad:80:63:88:4b:1b:5f:5b:a2:96:1c:78:8a:
         e0:82:6b:fa:13:5b:c9:70:05:81:7f:a3:6b:24:7f:ea:b8:20:
         43:8f:96:a8:92:02:32:6c:95:2a:b3:b4:76:44:eb:6c:b1:6d:
         98:95:de:1f:a0:50:55:06:89:a3:37:ab:a2:4a:03:bb:6e:0c:
         b9:fc:19:24:07:bd:53:7e:a7:ee:0c:43:49:56:97:f1:17:21:
         fb:34:79:2c:d7:b8:b0:93:80:ba:0e:4e:c7:87:c5:f8:ea:50:
         5b:48:d2:66:25:3f:c0:c7:4e:d0:48:58:6c:da:15:06:18:0e:
         b9:f3:53:9b:39:dd:4d:10:b3:02:5e:3e:4f:99:4f:8e:d3:48:
         30:00:99:88:b0:3d:76:5d:21:c2:91:b6:a4:11:24:d7:c4:1d:
         6d:4c:c1:1c:c0:79:3e:22:52:af:b4:7d:c1:78:0c:3b:2c:84:
         b3:e2:cf:01:5b:6e:ac:a8:ee:5b:9b:50:68:e2:a1:63:c4:8b:
         29:8d:ec:e8:18:6a:8b:d5:69:14:f6:fb:23:89:eb:76:d9:61:
         d5:9f:7a:bc:db:85:f9:45:9a:d7:0b:b0:88:b0:c0:ef:c7:18:
         c6:6f:3e:f5:31:7a:3c:45:89:c6:32:43:54:9d:76:30:b6:22:
         63:6b:02:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:58:34 2026 by rpki-client