Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9411b785-4038-33d4-9dd1-c69173f72935.roa
File:                     9411b785-4038-33d4-9dd1-c69173f72935.roa (raw, json)
Hash identifier:          wRrHK52n5H/dkV1s7KZ93MNaguq870HUeM5ss95Lrho=
Subject key identifier:   F1:8F:CF:DF:44:8E:17:86:2A:2E:F1:94:1F:32:96:A6:54:17:5B:6C
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584CF6ECD8B739A3752B23A7EB90
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9411b785-4038-33d4-9dd1-c69173f72935.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     3738
IP address blocks:        192.250.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:d8:b7:39:a3:75:2b:23:a7:eb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=109a860c-30ad-4473-a3a4-617793bd6ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9b:e0:e2:3a:3e:25:05:e6:91:72:9e:a3:8c:
                    e4:90:aa:2b:cb:fa:cb:da:0f:e2:ec:43:3f:aa:02:
                    c0:b1:a5:6a:b9:76:e4:f7:46:e0:d5:62:b6:b5:1e:
                    39:5d:d7:82:68:eb:0d:b3:ae:ab:47:f6:c2:41:eb:
                    41:e8:88:3d:59:7e:49:2d:87:52:70:fa:29:7d:8d:
                    7d:c3:6d:8b:f1:40:99:33:57:28:d7:bb:5f:6e:cc:
                    ea:42:8f:bc:c7:98:23:b7:2a:1f:4b:f5:ba:1a:5d:
                    46:6a:0e:22:4c:b2:48:bf:c6:fc:41:4a:04:25:4f:
                    8e:5b:c5:7b:36:6f:7a:6a:7b:46:f8:62:78:21:6a:
                    94:84:d0:63:40:b3:bd:0b:b6:b4:cd:b1:5e:a8:b9:
                    1d:23:14:48:a7:82:c5:ed:bb:61:a6:59:e4:54:d5:
                    57:e3:e0:d6:49:03:48:cf:0d:6c:0a:dd:b8:0d:a7:
                    85:4f:62:e9:25:43:76:b2:3a:e0:c7:55:53:db:5c:
                    bf:72:84:94:b1:45:bc:7d:7d:92:05:e4:a0:0a:50:
                    9c:76:9f:8d:f9:fe:1f:37:6c:35:2d:00:98:5a:5c:
                    52:5e:95:17:f8:24:12:db:77:37:57:17:86:21:ec:
                    fc:4e:b2:83:e7:15:e7:a7:d4:34:7f:a5:c6:ab:cf:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8F:CF:DF:44:8E:17:86:2A:2E:F1:94:1F:32:96:A6:54:17:5B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9411b785-4038-33d4-9dd1-c69173f72935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:a0:93:09:4a:ba:4d:90:86:39:22:e6:22:e7:e9:29:05:
         6a:6d:eb:a5:63:02:45:b4:5a:98:ac:f3:36:d2:c2:25:ad:68:
         13:bc:b2:34:94:a4:b4:d7:f0:91:b6:f3:13:8c:bf:4d:a6:79:
         47:42:69:72:4b:47:7a:48:a2:2c:4f:34:36:e9:93:ef:c0:98:
         77:52:58:95:bc:8d:d6:d0:eb:40:09:47:8c:fe:fe:06:89:a2:
         40:9c:20:b5:89:56:75:09:8a:e3:62:e9:57:b8:3c:20:c6:95:
         8c:35:bd:9a:5a:2a:c9:62:1a:10:e7:3a:1d:19:0b:80:46:d8:
         88:46:84:e5:1e:b6:e3:e9:5f:83:32:2a:aa:9c:76:60:68:bb:
         b9:b8:cd:c4:87:af:5e:13:03:fa:e6:52:41:02:cd:57:ae:cb:
         ca:a3:94:b7:9b:7f:44:1c:f3:10:d0:83:b2:1d:e5:b6:62:56:
         28:7c:1e:df:df:bc:40:f3:b3:45:f8:61:41:cc:e0:63:f0:cc:
         9f:d6:63:eb:6f:48:aa:a9:2d:d5:0e:9f:f0:15:c3:9b:29:1b:
         b2:a8:ba:5b:c5:78:17:93:65:a6:03:d0:40:7d:ee:8d:56:46:
         06:1a:3d:31:b7:c4:f9:c6:31:8a:fb:e9:1d:13:d2:f8:48:a7:
         8d:94:67:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:27 2026 by rpki-client