Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/348e95c0-6288-38e0-a538-00570502d31d.roa
File:                     348e95c0-6288-38e0-a538-00570502d31d.roa (raw, json)
Hash identifier:          Epd67HDul7C7whQ7gy6zUipLV/VlBLcF2jgmXM1n7S0=
Subject key identifier:   89:A7:C6:1A:78:3B:69:68:C0:09:39:9A:A7:75:13:29:06:F7:E7:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58AE912D2AEA411451D340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/348e95c0-6288-38e0-a538-00570502d31d.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        174.160.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:ae:91:2d:2a:ea:41:14:51:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=1480b409-bb0e-43e8-a09f-e4ea40ba16f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:68:0e:ff:03:c3:b2:f9:a0:d8:9d:31:bb:
                    99:09:1f:41:0b:21:a7:fe:bb:4d:b6:44:97:1b:68:
                    57:ce:91:ac:90:46:e7:76:2c:c9:e6:b1:ed:be:85:
                    a0:61:f0:22:e7:b3:72:53:69:5f:6a:fb:1b:12:e1:
                    35:b4:79:4b:67:dc:37:89:32:34:6a:cb:55:81:27:
                    06:da:7d:32:52:51:1d:3f:d0:a2:c2:b8:9f:b1:ff:
                    00:24:b1:75:01:29:97:c5:9f:60:e5:a1:75:49:68:
                    8f:2d:ac:8c:47:2e:fb:4c:e8:19:17:d5:87:f9:e5:
                    2e:cf:5d:49:3a:69:00:86:2f:e8:68:a7:21:34:f0:
                    ca:59:ba:17:f6:31:37:1c:59:7b:0c:75:ca:aa:44:
                    0c:49:26:45:65:89:0c:98:8d:f3:46:25:46:16:df:
                    27:8a:55:d9:d9:24:8d:f3:fc:f1:4c:79:1b:cd:29:
                    62:82:d8:c3:d7:af:83:d4:fd:3d:5d:50:18:75:16:
                    ec:d6:60:fa:e4:ff:5b:b8:c4:f1:de:8f:9d:1f:3f:
                    54:84:90:fc:7b:33:9d:ab:c4:8c:41:d3:fd:6f:8a:
                    7b:78:8d:15:b8:1c:53:cb:6a:01:6c:ca:61:1f:2c:
                    04:84:9d:3d:f6:64:4a:14:0d:75:f9:03:e9:0f:a6:
                    5f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A7:C6:1A:78:3B:69:68:C0:09:39:9A:A7:75:13:29:06:F7:E7:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/348e95c0-6288-38e0-a538-00570502d31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.160.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e0:fd:f2:21:56:fc:5d:21:83:51:9f:2d:ee:ef:e0:4b:07:
         c9:94:da:41:4e:cf:e4:21:d3:f3:c7:cd:3e:7c:da:1f:16:85:
         8e:18:41:9c:a3:f1:94:81:2d:8e:53:6a:63:c5:d2:3f:10:bd:
         89:c9:4e:b4:f7:cf:39:db:cd:75:ef:94:54:5d:07:67:2e:bf:
         14:5c:04:49:4c:01:c7:e0:3d:0a:28:c6:82:e0:25:1e:03:fb:
         c5:5f:34:69:5c:ac:d5:b5:e5:7d:c9:4d:62:82:4f:d3:6f:74:
         53:18:28:74:33:8c:c9:82:8f:45:bf:54:99:d8:c5:79:a9:b7:
         6d:19:77:6a:37:b3:4c:ea:0d:17:db:46:8a:95:06:1a:05:76:
         6b:85:8e:c4:02:37:49:cc:f7:37:3c:c8:50:f6:3f:38:46:a0:
         40:02:c0:36:65:83:a6:7c:14:c6:2a:a2:48:b9:25:7c:75:f0:
         2b:ee:e9:85:e8:96:fb:12:f8:44:e9:8a:e6:f3:92:c3:b6:41:
         76:0f:63:fb:26:51:1b:83:97:6b:19:cf:35:33:68:25:b5:65:
         0e:9a:30:5a:40:6d:5b:2e:86:18:2d:01:7b:6b:9f:64:51:64:
         52:07:13:0e:4d:51:db:51:ce:94:f1:da:06:54:a2:b0:c2:2b:
         9b:21:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:07:40 2026 by rpki-client