Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa
File:                     2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa (raw, json)
Hash identifier:          YVImcGL4a3F+Al+i5N50ldWycarlRmsLrpLlPh27IDU=
Subject key identifier:   DC:67:1E:16:A2:59:61:2C:E5:13:A3:74:6D:C7:6F:BB:3D:4B:A9:8D
Certificate issuer:       /CN=261c40d7-8712-472b-8c28-a09b3f549365
Certificate serial:       010D0C9F4328584D86955C23929792F723BE3C00
Authority key identifier: FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     32564
IP address blocks:        142.216.174.0/24 maxlen: 24
                          205.210.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:5c:23:92:97:92:f7:23:be:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261c40d7-8712-472b-8c28-a09b3f549365
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=76787d4e-baa8-4b5c-8f43-113b911f0586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f3:23:42:bd:91:9a:08:d6:a3:d1:f7:e0:97:
                    1b:eb:f8:78:50:87:65:c0:05:bf:98:1e:49:b4:a9:
                    e3:71:55:2a:a6:81:90:89:51:90:94:e4:72:50:a8:
                    f5:23:1e:a8:b1:d9:41:c3:4c:c0:0d:c1:2d:90:2d:
                    95:9b:1d:53:3f:92:b6:0d:d6:91:55:91:5e:ed:48:
                    51:45:29:8f:7b:02:60:d1:84:b8:50:22:29:a9:9b:
                    7f:e8:da:2a:57:fa:d1:ab:da:16:0d:81:54:ff:c4:
                    6a:38:15:49:88:63:d9:8b:0e:b8:02:42:fd:27:7e:
                    e9:74:ad:ee:5d:cd:27:72:2d:8e:1d:fc:1b:3a:01:
                    a3:97:ed:0c:fd:e8:e5:31:db:af:63:04:e7:4d:65:
                    3b:8f:09:be:d0:69:5d:e1:a1:64:06:65:03:bb:c1:
                    18:da:be:81:41:94:67:b4:09:48:ce:14:d1:7a:03:
                    26:96:50:22:71:fd:88:bd:09:aa:40:54:69:ee:23:
                    9c:dc:75:2c:63:86:7d:01:21:a6:13:b9:de:de:da:
                    2f:96:7b:e1:82:1c:f7:ed:3e:40:c8:78:90:1d:98:
                    28:61:15:0d:93:57:52:60:e0:fa:17:41:08:9f:c4:
                    78:48:45:6d:17:9f:37:5e:b8:40:e5:37:d8:c3:17:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:67:1E:16:A2:59:61:2C:E5:13:A3:74:6D:C7:6F:BB:3D:4B:A9:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.216.174.0/24
                  205.210.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:81:ea:8d:16:0c:8e:69:b2:a9:8e:54:37:aa:b1:0e:d7:e1:
         0b:be:0a:9b:70:86:37:39:e4:91:1a:22:c5:f5:05:74:b6:35:
         9d:97:33:5e:54:07:b5:0c:13:c2:cf:17:81:fd:b3:18:70:f1:
         ae:05:86:55:04:a0:93:5a:86:45:bb:e7:77:de:49:01:b8:9b:
         1c:99:b9:b4:a0:38:69:d5:2e:80:dc:6a:f3:00:ff:c6:8d:52:
         3e:2f:f1:3f:91:51:eb:dc:fb:28:de:98:7c:18:83:fb:46:8f:
         81:e1:8d:19:34:eb:64:f5:2d:56:bc:85:e1:7c:2b:72:94:80:
         a7:f4:0d:ef:4d:94:db:9d:f1:0f:51:78:a9:3f:ec:f1:f0:03:
         ad:c3:71:8f:8e:7a:13:c0:f6:79:c4:a9:7a:70:d9:58:ea:1b:
         7e:f6:08:44:40:f0:e6:76:e2:0d:3e:b6:10:f4:0c:9f:e3:6a:
         46:80:0b:65:78:dd:ec:1f:3c:c4:fb:9b:b5:d0:b9:22:1e:88:
         22:b8:6a:a2:59:5e:c1:3c:82:ae:68:d1:ff:82:8a:84:f3:67:
         c4:1a:ba:49:20:0e:bd:c5:e8:28:69:1d:52:77:e6:99:d1:54:
         03:a2:a4:d0:a0:bb:9d:97:f2:7b:57:ee:57:b9:ee:4a:dc:78:
         03:4a:5e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:50 2026 by rpki-client