Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/35013b0e-b5c2-3488-9c84-d9993038fd98.roa
File:                     35013b0e-b5c2-3488-9c84-d9993038fd98.roa (raw, json)
Hash identifier:          l0lFxCAU4OxswNKXMo4RXW1QTPgo+5hC3Hx6DphK7Og=
Subject key identifier:   2E:0B:C3:38:F8:A9:98:45:91:37:A2:8B:32:91:D8:63:53:4E:E4:D5
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584DE9B0C1417978CA8E5AAFD900
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/35013b0e-b5c2-3488-9c84-d9993038fd98.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     3738
IP address blocks:        192.250.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:c1:41:79:78:ca:8e:5a:af:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=09e78293-e19d-4c30-8366-e412402c7026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:ea:5b:4f:ea:1d:ab:6a:7d:db:6c:27:e4:
                    43:fd:11:3d:2b:46:9d:f6:d4:d1:11:c8:aa:18:71:
                    47:09:39:c6:6c:53:82:66:75:92:e1:5a:d2:9b:5e:
                    65:9f:94:8f:06:61:38:f7:dd:a1:ef:81:a3:4b:81:
                    d5:b0:d3:7b:e9:8e:95:3b:3a:5a:9b:d2:99:d4:05:
                    f5:40:5b:93:4e:7b:0a:de:27:32:e3:12:53:2e:e0:
                    1c:e2:52:ff:4b:a4:cc:3e:3d:1d:a9:74:78:39:49:
                    31:3b:bf:13:8b:12:92:ca:cd:7c:0e:56:68:ed:c0:
                    16:95:b9:38:a3:bd:b4:60:dc:d1:f3:af:66:d9:ad:
                    c2:86:01:9b:c2:3a:c7:fd:95:d0:a5:98:6e:71:6a:
                    81:98:14:60:bf:31:21:9e:cf:76:de:62:7a:a6:80:
                    51:01:df:92:dc:15:55:b5:7a:41:15:1f:9a:20:a2:
                    8b:0c:ab:b2:bb:12:68:b7:38:77:5c:ba:84:61:bc:
                    d7:fe:e7:59:ae:34:2c:a6:7a:84:a1:3a:f8:c3:6b:
                    99:3a:1d:ab:1a:03:28:78:57:3a:11:3a:57:c5:94:
                    3f:46:27:a4:a3:24:df:7d:16:ae:10:48:a0:31:69:
                    ff:d8:e3:cd:d6:91:80:a8:bb:87:19:e8:12:d7:91:
                    ab:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0B:C3:38:F8:A9:98:45:91:37:A2:8B:32:91:D8:63:53:4E:E4:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/35013b0e-b5c2-3488-9c84-d9993038fd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:33:fd:9e:0f:be:c0:1c:df:bb:65:87:b5:da:8d:0e:63:a1:
         29:48:11:77:ca:f8:46:20:fc:8c:61:a7:f6:e6:dc:af:ec:9c:
         94:14:bc:30:9e:8c:fa:f7:fa:93:95:ee:1c:48:5a:19:67:22:
         84:89:7d:56:80:f7:2c:23:e3:86:97:ff:c3:2c:55:49:6d:7a:
         39:95:8e:a8:e6:9c:78:25:86:62:09:a2:8a:8b:94:be:ef:96:
         53:7c:9c:34:3d:4c:c4:78:5e:c9:fc:e8:76:71:05:fc:03:d9:
         85:a7:c6:1d:18:84:f4:3d:8f:d5:8d:e1:d8:b9:f2:75:8b:e5:
         2c:0d:d5:1a:bf:d7:3b:e1:e6:79:42:5b:d6:57:2d:4c:4a:fb:
         f7:32:54:35:ba:08:02:ff:94:1f:20:0b:43:cf:70:e4:88:6b:
         a5:69:8b:65:d3:31:14:9f:d3:24:f7:5f:24:ad:80:cc:e1:1b:
         47:d5:dd:fc:89:6c:e3:84:cc:63:f1:09:05:49:12:ff:4a:96:
         fd:29:76:7b:8a:e4:75:37:70:93:c5:f0:df:3e:31:be:fb:ab:
         ff:a7:91:24:77:88:d6:eb:bb:d1:83:be:4a:35:a9:57:2e:46:
         7a:07:70:f0:e4:ef:68:8f:aa:eb:e9:f2:32:9f:b9:8c:6b:89:
         80:f1:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:13 2026 by rpki-client