Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/746e7d39-1265-3e5d-a005-f37a06e69f45.roa
File:                     746e7d39-1265-3e5d-a005-f37a06e69f45.roa (raw, json)
Hash identifier:          FrM+QdoYioGBSmncGHuvqYJuTEZhTDjjDWR0A7s5O5c=
Subject key identifier:   9F:23:97:D1:F8:8E:9A:3B:03:F7:F9:42:A7:A9:5D:AA:BB:D9:14:EE
Certificate issuer:       /CN=9753e726-64c1-48a7-af77-48b8031adfe4
Certificate serial:       010D0C9F4328584CE8F76E9893E68A008D1D8640
Authority key identifier: E8:F9:63:21:AB:42:45:98:40:07:29:D7:6A:10:2C:FB:E5:D2:E6:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/746e7d39-1265-3e5d-a005-f37a06e69f45.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        204.69.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6e:98:93:e6:8a:00:8d:1d:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9753e726-64c1-48a7-af77-48b8031adfe4
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=e5566606-ffbe-438f-bde1-e1b3192219c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:6f:10:c7:9c:0f:94:c2:14:3f:f1:01:63:
                    4a:7d:37:72:87:ff:4c:91:f2:c0:f2:52:5b:d9:35:
                    e1:09:49:c1:ba:3f:9f:d4:a2:79:23:51:4f:ce:cf:
                    73:3e:ba:f1:00:b6:96:d1:95:46:98:0b:9b:40:88:
                    7a:e0:56:90:b9:bd:38:07:4b:37:3e:d2:20:d5:dc:
                    dd:2c:a4:b4:22:ef:65:3e:6c:76:1d:a7:6b:fe:4d:
                    17:80:16:c0:ef:25:7d:6b:55:ef:73:8a:e7:2a:e8:
                    eb:a9:00:01:41:c5:b0:a2:53:24:d9:c4:6c:41:6b:
                    23:4f:c5:e0:d7:1f:af:57:9c:c5:ec:cf:31:32:41:
                    ad:1d:27:af:48:ac:ed:7e:68:a5:02:ad:1d:ea:73:
                    d6:39:a9:64:2e:b3:6e:50:c5:26:6c:63:8a:44:db:
                    ff:6d:d6:21:d8:36:06:7c:13:19:81:39:dd:c1:dd:
                    62:00:5f:ba:b0:16:36:71:a6:4d:89:0a:64:85:4a:
                    9a:f1:8b:00:bb:ce:e3:57:37:04:47:96:fb:53:8f:
                    f5:fa:df:44:c1:e3:a4:b8:95:c1:b8:c1:d9:a5:70:
                    cb:f9:a5:aa:fe:9a:bf:21:97:e1:04:e6:bd:ba:a5:
                    6a:8b:16:48:9e:f7:9e:7b:cf:49:7d:5e:38:81:5b:
                    a3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:23:97:D1:F8:8E:9A:3B:03:F7:F9:42:A7:A9:5D:AA:BB:D9:14:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/746e7d39-1265-3e5d-a005-f37a06e69f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4/9753e726-64c1-48a7-af77-48b8031adfe4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F9:63:21:AB:42:45:98:40:07:29:D7:6A:10:2C:FB:E5:D2:E6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9753e726-64c1-48a7-af77-48b8031adfe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:9d:e8:5f:6b:c1:fb:4f:81:2f:dc:3f:06:86:e1:86:13:67:
         cb:d8:5b:62:ee:4d:0a:b9:e4:11:e5:fd:b4:b6:a3:1b:c3:dc:
         67:1d:34:50:83:c2:c6:c0:0a:c8:93:4f:ca:64:84:5a:82:80:
         15:ff:5f:a4:6f:d7:e5:97:7b:5c:07:37:94:fc:89:b2:43:9e:
         6b:08:47:19:9f:bf:99:5b:84:af:40:f3:21:00:1b:b6:82:9c:
         e1:26:2c:8a:5f:a6:f8:97:56:dd:e8:8a:18:89:5a:7f:69:2a:
         02:e5:ee:06:10:bd:e0:a1:0f:42:c2:f5:22:ae:34:b9:6e:57:
         59:5e:26:c6:88:d7:dc:a9:9a:fe:5e:8e:ea:56:23:3d:13:e4:
         91:42:83:23:b2:f2:47:52:11:17:84:8d:e6:71:80:bc:aa:13:
         97:3c:de:c3:8d:a0:53:e0:d9:44:ab:17:16:dc:94:73:66:cb:
         31:04:f1:9f:b3:de:62:ab:e3:cc:e8:4e:3c:59:8e:4d:06:b0:
         9a:04:7b:60:8f:4f:25:e0:9b:8b:0d:86:8d:79:01:bc:a6:6d:
         7f:10:ed:61:68:11:0f:d2:cf:44:be:6b:e7:5f:6f:c4:f0:d5:
         90:fb:b3:f6:b0:61:aa:d3:c0:81:10:47:59:c3:60:9f:07:32:
         e1:14:dd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:26 2026 by rpki-client