Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa
File:                     33886230-909a-3c78-8a7d-882d456f43a0.roa (raw, json)
Hash identifier:          CY08w/K5jmamr1ZNXcLESmhBKXDGYr3PeMhOEbN1WLM=
Subject key identifier:   C4:E1:7D:01:8B:82:D7:A4:FD:ED:EB:9A:4E:48:BD:66:E7:2E:18:59
Certificate issuer:       /CN=3506dd4b-c904-4daa-9013-78c3d05bbcce
Certificate serial:       010D0C9F4328584CA491ABDC37AA64FD33965100
Authority key identifier: 38:0F:6F:65:C3:DD:EB:FC:45:AC:6F:0A:2C:FB:47:BE:7C:E0:E0:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa
Signing time:             Sun 25 Jan 2026 14:00:40 +0000
ROA not before:           Sun 25 Jan 2026 14:00:40 +0000
ROA not after:            Sat 25 Apr 2026 13:00:40 +0000
asID:                     399105
IP address blocks:        172.99.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a4:91:ab:dc:37:aa:64:fd:33:96:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3506dd4b-c904-4daa-9013-78c3d05bbcce
        Validity
            Not Before: Jan 25 14:00:40 2026 GMT
            Not After : Apr 25 13:00:40 2026 GMT
        Subject: CN=9bd827fb-10fd-48a7-9dca-4fbe1f487310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:25:1b:0b:0d:2f:90:55:4d:a0:11:84:23:54:
                    d1:c9:c5:20:06:d3:bc:f3:ba:1c:94:89:85:a5:28:
                    7c:d4:c2:ca:db:57:fa:fb:15:f5:5d:81:71:ba:90:
                    9e:50:06:63:05:44:cf:7d:01:e6:d3:60:a2:52:26:
                    45:95:f1:b3:09:ef:05:91:08:cd:f3:0d:c6:a4:b8:
                    05:c0:b2:f3:b3:41:c8:64:b9:07:3a:a0:f0:eb:eb:
                    6b:cc:e6:99:52:cb:19:4c:19:e3:ab:ea:56:75:04:
                    b8:1e:00:45:31:c2:5c:a5:18:52:a5:40:f9:64:16:
                    36:8f:9b:8d:15:6c:48:9a:61:c6:5e:2d:4e:69:5c:
                    d1:08:c1:c8:01:fd:31:94:a1:6e:e8:9c:ef:e8:7a:
                    0a:9c:d8:2d:85:61:1d:1f:1c:7b:2a:f0:f3:26:bb:
                    3f:e0:78:1e:c2:ba:42:d1:1d:c8:c4:a0:1c:98:13:
                    70:95:2b:a6:1b:82:a1:89:e6:59:7c:a1:82:85:b4:
                    f6:0b:ab:65:b0:b6:0e:e4:5d:3c:7c:a8:b5:e1:93:
                    11:70:86:fd:9b:f7:39:60:38:3c:33:3f:7f:95:d1:
                    d3:24:f5:10:3d:e7:1b:4b:15:e9:79:2a:7b:6f:9d:
                    2e:ca:53:85:27:c1:3f:d4:15:c1:cc:0d:4c:c0:fa:
                    fb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E1:7D:01:8B:82:D7:A4:FD:ED:EB:9A:4E:48:BD:66:E7:2E:18:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.crl

            X509v3 Authority Key Identifier:
                keyid:38:0F:6F:65:C3:DD:EB:FC:45:AC:6F:0A:2C:FB:47:BE:7C:E0:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:11:34:c0:ff:96:ac:f1:5e:4a:fb:63:e0:b0:2a:bc:09:
         63:58:c1:f0:a4:f3:1c:2a:41:da:d5:9a:b4:7d:8c:42:f2:56:
         df:d2:d1:fa:c8:72:4b:7f:b7:c7:34:be:f2:ce:ec:02:66:4a:
         78:aa:11:00:19:94:0a:fb:37:5c:5d:6f:bc:85:32:2a:dc:9a:
         4f:bd:6f:1d:6b:cb:17:13:3d:17:ac:4e:c8:3c:d4:94:fd:72:
         00:50:a5:4c:ff:64:3a:84:34:b7:91:2e:9c:a1:e2:3e:f6:7f:
         b3:d0:b5:9f:d2:a8:6e:8f:7b:97:72:12:ef:9d:37:e7:90:92:
         4e:f4:1a:60:c7:c1:5e:c6:87:da:c2:0d:42:09:74:41:22:4c:
         fd:2a:e9:05:84:78:f0:05:93:2d:a2:79:67:68:88:8b:9e:25:
         1a:e2:21:2d:e9:88:fc:c2:e9:8f:63:82:b9:01:ee:ab:42:99:
         8b:91:d3:e9:48:84:fd:21:e9:10:b2:51:ec:70:2a:09:d6:44:
         49:5f:3c:c1:73:f6:93:e7:20:95:84:45:32:df:6d:4d:24:6b:
         5c:10:4c:9f:2a:40:2d:14:1e:52:c5:91:dd:69:48:0d:91:e4:
         fb:27:e8:f4:e5:dd:ba:fb:d2:67:e3:7d:91:44:53:85:3e:4f:
         1d:73:b9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:21:57 2026 by rpki-client