Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa
File:                     bd706a23-0d52-3069-8efc-b247735d9c39.roa (raw, json)
Hash identifier:          8aHeLyLaD0Z3yCUdjzONTC/OUkiPm/qyTkR5IGx6gqE=
Subject key identifier:   AE:5F:C3:E4:F1:B1:8D:73:6C:5A:98:35:6A:E1:F9:75:26:56:C6:9B
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584CCBA75BAA3D8D82D68CED4080
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     394285
IP address blocks:        174.137.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:5b:aa:3d:8d:82:d6:8c:ed:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=565fcb1b-9dd3-4181-9e6c-985d1f221c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:e4:e6:91:6d:c5:93:0b:7d:81:8f:43:15:
                    47:c6:39:16:2c:df:34:df:ee:cf:8f:95:bb:c1:a9:
                    2b:b2:71:35:44:22:e7:d8:5e:ce:0b:95:31:90:ff:
                    cb:1d:b9:6e:0c:8f:ed:80:e6:4d:b6:d7:10:bd:97:
                    18:6a:d4:fc:12:8a:93:12:3e:c9:5b:cc:df:ef:53:
                    c5:b6:5c:83:4e:a4:50:03:a9:ea:63:71:fb:07:98:
                    1a:57:17:4e:11:72:f5:f2:0f:c0:a7:30:5c:57:60:
                    c9:44:c4:c3:a1:6f:bd:e1:0e:8b:90:e3:5b:bf:81:
                    29:8c:31:63:35:99:4a:1e:30:29:a9:1e:85:2e:3f:
                    ca:73:cc:57:60:95:99:54:64:14:85:38:43:a5:15:
                    82:f4:2e:0c:00:4d:ff:4b:aa:b0:66:a4:cd:f4:93:
                    b5:f3:ea:7b:1a:ed:29:d7:fb:03:d1:9a:4a:c9:5e:
                    32:29:1e:6f:d4:37:67:7d:c3:d1:38:ec:7f:53:26:
                    2a:2d:95:6f:86:e3:91:6d:63:c8:c4:27:3f:e8:cb:
                    9f:a1:fc:f4:ad:c1:9c:e2:32:81:3f:7c:1c:48:91:
                    e1:5b:16:a0:5f:9a:a5:48:81:47:55:33:a5:fd:c2:
                    17:04:cc:c7:7f:0b:32:dd:d3:97:92:ca:c5:c1:61:
                    98:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5F:C3:E4:F1:B1:8D:73:6C:5A:98:35:6A:E1:F9:75:26:56:C6:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:10:ea:e7:b2:22:97:51:89:e1:4f:c5:5d:89:9b:05:9e:b3:
         52:a1:90:54:38:68:60:f0:72:ad:e5:66:12:7e:90:a2:1b:b7:
         ab:ab:f1:49:a4:83:90:40:e8:50:31:83:04:5c:82:c0:f4:e2:
         7d:a1:e2:30:9e:7e:39:9c:83:43:96:31:ef:6d:4f:a1:ec:2e:
         0f:31:7e:1d:d4:39:2b:54:43:86:6b:7a:2b:00:1e:b4:26:dd:
         7f:ca:2e:22:51:0e:c7:be:96:ee:de:53:50:04:7f:eb:38:ef:
         15:20:10:61:b6:66:88:ca:7a:00:a1:55:05:12:a9:78:f9:28:
         8e:59:57:12:d4:67:5e:80:f7:48:36:d0:1c:82:27:4c:80:70:
         fd:3a:f3:ac:f7:c0:0d:61:8b:c4:10:ae:07:63:0e:23:e8:b3:
         25:1f:76:33:73:53:c9:64:e7:87:52:d7:39:f3:c1:2e:44:cd:
         9e:4a:ae:5e:30:f4:d0:ff:f2:5a:78:72:af:e6:a7:90:df:0e:
         e5:45:71:cf:a3:9c:eb:3b:c7:3c:c1:91:60:09:1c:f8:f1:01:
         0e:c6:16:5f:11:62:4f:8d:3b:13:08:18:05:95:e2:f3:e6:0d:
         7b:74:92:cf:e9:72:5f:a8:76:18:cc:26:c5:22:6c:6b:64:5b:
         ad:69:72:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:45 2026 by rpki-client