Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3d2a834f-e742-3e66-8438-6e30665d9978.roa
File:                     3d2a834f-e742-3e66-8438-6e30665d9978.roa (raw, json)
Hash identifier:          nV1d3PTfKYCRP5u4kEY+Po3yhLQojhLwwkuwC9dUBo4=
Subject key identifier:   B8:F7:98:A3:8C:40:12:91:44:58:E5:43:42:8D:EA:CC:FA:7E:4E:60
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584F156D32D840D75FA79215A600
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3d2a834f-e742-3e66-8438-6e30665d9978.roa
Signing time:             Sun 06 Sep 2026 09:47:27 +0000
ROA not before:           Sun 06 Sep 2026 09:47:27 +0000
ROA not after:            Sat 05 Dec 2026 10:47:27 +0000
asID:                     60404
IP address blocks:        173.249.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:6d:32:d8:40:d7:5f:a7:92:15:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Sep  6 09:47:27 2026 GMT
            Not After : Dec  5 10:47:27 2026 GMT
        Subject: CN=44b33e1d-f4be-498e-aa8c-0096ba19ecf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:08:30:9e:63:ca:8e:f7:d2:33:48:34:f1:
                    e9:df:02:8f:54:50:50:be:03:8f:41:57:b1:c9:0e:
                    12:2c:f6:46:cb:06:0d:84:30:c5:80:07:77:d0:ac:
                    0e:46:5e:c0:ba:25:25:5b:20:d3:d7:45:c2:45:39:
                    fa:f9:d5:2a:58:0b:4b:37:c4:a9:69:57:82:97:10:
                    96:ce:f9:77:74:e2:5c:c5:e7:40:7b:a1:e2:91:a0:
                    7f:4b:b6:80:04:8e:b3:21:bd:a4:80:c9:3c:97:56:
                    30:f7:af:3f:db:88:8f:ec:66:08:b5:ff:ea:65:87:
                    cf:83:43:8a:9f:9e:08:a4:15:15:b0:e3:68:6f:b0:
                    2f:dd:3d:a2:5b:0c:d9:32:54:c6:80:6a:da:59:9e:
                    0a:88:d9:91:f9:37:4d:83:dc:79:5c:03:35:b2:4d:
                    1e:af:2b:3f:5e:f2:88:9a:6b:2b:c3:13:24:b3:01:
                    51:de:ee:72:3a:d7:8b:f7:d2:84:49:66:09:eb:46:
                    68:64:14:00:f7:10:b4:87:ff:e4:5a:59:ce:eb:0a:
                    22:7b:d8:75:5b:85:49:11:8d:dd:82:bb:27:4e:c2:
                    56:ef:60:d3:b9:33:68:65:85:20:ec:e1:bb:84:4e:
                    66:19:0e:b4:fa:1d:f1:4e:ea:e6:b7:87:5d:cf:26:
                    5d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F7:98:A3:8C:40:12:91:44:58:E5:43:42:8D:EA:CC:FA:7E:4E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3d2a834f-e742-3e66-8438-6e30665d9978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3a:6a:9f:aa:7a:3c:cc:58:61:62:29:bb:0d:bd:00:2f:3a:
         8f:7f:0a:7d:f4:92:14:32:aa:09:34:06:d8:89:60:8e:9a:0b:
         70:29:6d:86:7b:a2:62:30:f2:84:67:ff:91:2e:0b:aa:03:5b:
         0f:7b:7f:90:15:8a:ca:96:ec:02:94:42:08:46:b4:bb:62:6c:
         1b:5c:08:87:55:b3:3e:8c:39:4f:87:11:01:99:1c:2d:13:4d:
         57:fa:2a:71:a8:6b:59:23:47:e1:54:91:e9:2b:90:5a:56:d6:
         c5:4c:4c:f8:74:03:a9:8f:f5:80:4d:02:43:36:69:f1:a5:60:
         ef:e2:9e:40:9e:9c:8a:3e:24:29:50:b2:39:16:17:d2:6b:76:
         35:57:00:91:96:35:bd:22:a4:f5:51:81:91:f9:c1:7d:18:19:
         6a:46:a6:83:40:ce:9d:51:09:32:9f:f1:ea:08:68:09:ef:c4:
         12:8e:b4:9f:88:41:ed:17:fa:21:4f:ee:fb:ea:65:d0:58:2c:
         9a:f2:29:e9:28:3a:7e:eb:73:bd:58:c5:ba:09:0f:d6:db:ed:
         54:b2:45:7c:0b:ee:d2:e2:29:20:5c:9c:81:56:9a:c0:23:e7:
         1d:8b:28:f8:65:3d:30:6b:fa:88:17:d6:6f:0f:d5:cd:44:11:
         86:91:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:07:32 2026 by rpki-client