Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa
File:                     2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa (raw, json)
Hash identifier:          2KIYd2MwTI3D0tUzDa+cZsmzIv2Uc0Mh98xAUzvn4qg=
Subject key identifier:   EB:8F:A7:71:AC:AB:81:CE:E5:C6:0C:92:24:0A:D3:24:F0:B0:99:2E
Certificate issuer:       /CN=17436076-857b-4889-82e9-22151c59a4b1
Certificate serial:       010D0C9F4328584D00B27C9C865797AFBB04ED00
Authority key identifier: 47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     46644
IP address blocks:        170.39.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:7c:9c:86:57:97:af:bb:04:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17436076-857b-4889-82e9-22151c59a4b1
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=2e1e020c-9843-40db-9f96-cb693f7b0697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:dd:17:ac:0a:c7:36:62:1c:0d:19:fd:6a:
                    bc:83:ee:54:a7:cc:d6:81:bb:52:c8:ea:8a:19:47:
                    3e:f4:5f:b6:7b:60:db:ec:e8:1d:68:4c:c9:69:fb:
                    19:06:75:1e:1f:2c:39:40:9f:45:12:99:d9:d5:06:
                    32:27:2b:77:b2:aa:ba:bf:6d:e9:c2:3d:2e:29:fc:
                    dc:dd:7f:45:0d:18:ab:d4:b2:4f:17:17:ff:ea:c0:
                    41:c1:1c:91:17:ea:ed:a7:2d:68:a0:13:d3:b8:cf:
                    2f:f6:c3:16:a7:e3:2b:f3:e9:ee:49:d9:95:8c:03:
                    90:6c:fb:45:49:75:de:aa:ce:2b:0a:98:7c:e8:dc:
                    1e:60:cb:d5:f6:6d:b8:2b:a5:ab:78:58:2e:08:f0:
                    2d:5f:27:9f:fb:21:e7:37:82:e2:f4:dc:90:11:03:
                    70:4c:00:54:53:bb:f8:84:d9:44:e3:cc:41:b9:c3:
                    f6:85:11:6b:fc:84:5e:aa:b2:de:40:ac:e7:05:26:
                    c9:33:e7:b8:94:e6:10:f2:62:af:25:49:ad:48:42:
                    38:36:44:61:03:1c:c2:30:7d:0c:d4:91:b9:cb:95:
                    06:f5:4a:dc:87:6b:61:ed:d9:dd:50:83:d5:57:33:
                    b3:89:f0:54:38:15:85:3e:db:f0:94:50:d1:87:81:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8F:A7:71:AC:AB:81:CE:E5:C6:0C:92:24:0A:D3:24:F0:B0:99:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/2d4d8cd7-4a16-3a5d-ae79-82a919086d58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl

            X509v3 Authority Key Identifier:
                keyid:47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:28:27:97:b2:18:1d:9d:28:a6:87:0c:32:fa:6b:09:0c:
         47:36:8f:9a:83:35:77:36:2e:56:da:bb:de:25:af:b9:7d:43:
         e4:30:ae:2a:55:e3:6a:89:c8:ec:4e:e8:bb:30:63:e6:7d:95:
         91:e0:c1:de:24:c6:ed:75:71:3d:d8:42:7f:71:cc:9a:e8:02:
         5a:2c:d2:3b:b0:1a:2e:3c:34:74:78:55:9d:94:8a:98:4e:9c:
         0b:cb:ca:e4:b0:f1:5f:c5:dd:26:73:9f:92:b4:55:fd:89:e5:
         7c:8b:c0:3a:ef:e2:b4:cb:f8:21:8d:50:8a:1f:54:24:cd:5a:
         65:c4:d2:7c:3c:0f:6f:e5:78:58:1c:24:f4:37:4a:90:e1:00:
         68:f4:c8:76:d6:90:7a:8c:81:d0:77:64:1a:17:72:3f:5b:4b:
         77:16:10:b4:ed:8b:49:ed:0e:a8:2c:74:b7:27:ec:7f:58:e3:
         7b:14:c4:b6:0e:1e:36:5a:e0:df:5e:82:a3:e5:14:1c:81:c9:
         82:0f:24:19:db:a0:37:2a:ba:93:e4:7c:4f:eb:ff:63:b1:6e:
         25:b0:ad:55:7b:dc:d7:ac:c0:57:c1:e0:aa:f4:23:21:e7:e6:
         b7:c2:09:47:92:2d:a2:9c:ff:ec:f0:e1:3b:03:3d:ef:01:8b:
         e6:92:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:40 2026 by rpki-client