Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa
File:                     955a609a-42f8-316d-a938-27d1ede991ad.roa (raw, json)
Hash identifier:          JIrUrO8lGsb1InPBTl0aQcMgVS4MSChJhgNGPj+xXsw=
Subject key identifier:   6C:D8:C1:9C:0E:7D:CD:DB:83:07:48:A2:F6:4B:7B:71:FF:3F:CF:67
Certificate issuer:       /CN=4b0cf977-e8ab-492d-bd1d-e7b11385e631
Certificate serial:       010D0C9F4328584E043605AB23452E2D0A684C80
Authority key identifier: 31:2D:BC:40:C8:98:37:68:4D:D7:DF:28:3F:A8:DC:28:EA:73:99:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     3477
IP address blocks:        192.94.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:05:ab:23:45:2e:2d:0a:68:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cf977-e8ab-492d-bd1d-e7b11385e631
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=abf04a17-3748-42f7-aed8-a227e88e7322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:81:39:6a:dd:86:bc:47:e4:19:20:2a:b6:
                    ac:8c:fe:62:24:dc:20:1d:94:40:ed:9e:b7:01:d0:
                    fc:f8:42:d6:bc:58:6f:9a:33:6a:e5:c9:71:d0:30:
                    d5:76:b6:70:05:9e:96:76:20:31:17:0f:19:68:f2:
                    b6:1e:76:1a:cf:c0:08:3b:3d:d9:6c:30:e1:25:92:
                    18:ad:15:51:4c:12:8e:6d:03:46:f8:1b:53:aa:b9:
                    43:f2:97:bb:92:c1:67:95:25:6e:ff:b1:e2:21:24:
                    a1:fd:60:61:87:84:1c:0a:24:f6:c3:bc:96:53:72:
                    d7:76:8d:a4:4e:f4:5e:23:09:fc:49:d4:71:6a:d8:
                    7d:98:5e:cf:06:59:44:8d:cc:96:f4:f4:db:f2:33:
                    0c:4b:3a:25:18:9d:a4:0e:f7:7d:26:1c:95:fc:f9:
                    d2:3a:57:ca:98:e3:c8:dd:a9:fd:f1:2f:be:72:13:
                    11:c6:37:fc:a4:22:76:99:cf:e0:1d:0e:f3:18:09:
                    51:e5:ec:43:71:b0:79:a9:da:fd:93:15:9a:22:a2:
                    ed:50:5f:91:75:39:59:92:b2:1e:45:3e:5f:44:b2:
                    96:53:c6:45:b8:3d:2c:a5:2d:c6:b5:88:7d:33:48:
                    a5:a9:8f:11:31:c9:05:8f:02:f3:af:50:63:7f:f5:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D8:C1:9C:0E:7D:CD:DB:83:07:48:A2:F6:4B:7B:71:FF:3F:CF:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.crl

            X509v3 Authority Key Identifier:
                keyid:31:2D:BC:40:C8:98:37:68:4D:D7:DF:28:3F:A8:DC:28:EA:73:99:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2c:a8:d1:e8:ca:f3:8f:9c:a9:c2:42:60:87:88:ab:c2:c6:
         c1:b4:9c:85:b7:69:9f:ae:fd:74:37:e0:2f:69:6d:a4:78:d3:
         52:d2:15:35:e8:30:9e:5c:20:f8:96:c5:03:a8:a2:d0:ae:07:
         1e:01:19:cb:98:79:2d:69:4c:ce:51:9a:a1:9b:6d:e5:91:e4:
         27:bb:49:da:2e:2a:ef:49:35:61:26:0f:34:7b:af:92:c6:8f:
         48:cb:9c:23:3d:96:a0:63:e2:72:cf:c2:dc:9e:23:d7:fa:68:
         f9:da:8b:17:b9:61:d4:6c:d8:ae:6b:55:39:5b:2a:23:11:46:
         d5:e5:c7:25:ab:8a:43:7f:f6:2d:e7:c8:35:63:f7:44:19:d2:
         04:78:22:02:6b:65:88:28:1d:5e:8f:c6:d9:d6:9b:9b:1b:de:
         6a:fb:bd:09:30:f9:7b:98:70:cb:e2:17:91:6a:39:9e:4c:e1:
         34:b5:80:e0:1b:32:62:94:27:52:c2:be:05:84:85:99:83:5c:
         97:73:e6:60:81:61:4e:40:0e:77:dc:a5:11:08:c0:81:28:97:
         74:11:54:d7:fa:a2:e9:1d:20:04:5a:ca:c1:86:5a:5f:0e:a9:
         40:4e:11:95:9f:55:08:50:ba:e4:1b:c1:61:dc:f4:f2:a1:2a:
         d7:19:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:38 2026 by rpki-client