Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa
File:                     6aa5ffe9-2c06-36ee-8129-d66c21390799.roa (raw, json)
Hash identifier:          B1Qf8P3RfSiawTzqC4YGgFwx2Ob9dFBU8cfQrWqnaFY=
Subject key identifier:   6E:4C:EA:D0:8C:6C:40:F5:91:32:77:B3:7D:55:84:2D:CE:CB:57:78
Certificate issuer:       /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
Certificate serial:       010D0C9F4328584D7A05319DECEDE15E185A8AE0
Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     26461
IP address blocks:        208.91.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:31:9d:ec:ed:e1:5e:18:5a:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=7013a552-5f65-46ff-b6a0-6ff4feaf2f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:bb:46:4c:84:99:b8:26:60:87:3d:78:00:
                    cb:87:79:b3:69:96:e0:62:00:ff:49:2d:ce:09:1c:
                    60:ad:3f:e3:73:47:bf:36:52:79:f7:4e:88:ea:c7:
                    fc:e9:2b:69:a1:1e:79:45:37:2e:d3:ac:45:02:a9:
                    42:c5:2b:8b:30:f3:6f:2c:18:27:20:bc:20:de:c3:
                    c8:63:4a:e8:80:bc:01:d7:1b:f2:84:d4:f8:75:5e:
                    a7:36:f3:1b:dd:0f:65:0e:7b:16:83:72:3c:69:3e:
                    94:f0:68:97:1a:de:a0:be:25:75:72:2a:ff:72:90:
                    a9:28:d5:38:01:51:13:cb:7b:a7:23:58:72:15:b5:
                    5c:e6:72:62:84:97:76:07:fe:b4:d0:d2:d3:e0:46:
                    3c:c4:ff:d9:d9:05:a5:a9:35:92:8f:e9:02:48:6f:
                    57:55:a0:3d:92:b5:bf:8d:9e:7d:ec:3d:44:da:cc:
                    7d:d9:94:96:27:62:db:6f:47:d8:6a:70:66:5e:11:
                    6b:3b:fa:ed:18:7b:ea:c5:0b:25:79:3e:b3:85:dc:
                    9f:4e:c7:58:55:3f:5f:91:24:07:9c:5e:65:76:bf:
                    29:44:8f:9e:25:da:f4:21:41:56:ca:60:38:81:a2:
                    d2:84:d5:e7:f8:fb:d0:55:b9:e5:46:36:ef:6f:70:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4C:EA:D0:8C:6C:40:F5:91:32:77:B3:7D:55:84:2D:CE:CB:57:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl

            X509v3 Authority Key Identifier:
                keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:cb:bb:d1:ba:e3:b6:c9:f6:92:e9:44:51:37:68:b7:8a:df:
         5e:04:6d:ae:c2:a1:94:bf:c9:f1:c5:de:27:43:92:75:fd:87:
         69:cc:ed:f4:6e:a2:e5:13:3a:fa:71:61:1b:40:e2:b2:21:96:
         7a:92:47:1e:f8:85:4a:49:bf:c3:ad:9a:34:5e:74:09:07:48:
         5b:de:0c:12:c2:1c:ee:d2:15:5f:46:af:a5:f7:2e:d0:c5:55:
         d8:cd:34:a8:27:0a:69:89:ae:a4:b4:cd:d1:2e:83:fe:4d:42:
         e8:76:b6:5a:68:15:12:49:b5:bd:8f:3b:63:c0:38:77:c0:9e:
         3a:2a:1f:31:15:08:3e:12:dd:62:51:91:5c:99:1a:f6:b9:37:
         d5:6b:5f:d6:a5:35:77:67:67:a3:50:cf:41:5a:37:e2:bc:97:
         90:35:f7:ce:be:96:46:d3:a8:ce:89:2b:8d:2a:db:16:78:c6:
         f8:6b:87:2a:11:ed:84:cd:b6:37:64:3f:1e:c6:ef:0a:a6:18:
         2e:70:b7:5b:d6:71:b4:ae:c3:9a:03:0a:c4:98:ab:58:30:d2:
         57:d5:2a:57:32:36:94:a7:fd:c9:ec:84:9b:b2:d9:38:ca:22:
         1d:b7:e4:0f:b1:cb:71:c3:24:7d:3c:c3:4a:2b:1f:e0:6e:f3:
         93:64:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:16 2026 by rpki-client