Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/2d1aa5c6-d9a0-36fa-8adf-a9c331089f19.roa
File:                     2d1aa5c6-d9a0-36fa-8adf-a9c331089f19.roa (raw, json)
Hash identifier:          OhymBJsFMrQ6jtvJXsiUg/I85SC7+heljtLI9SqmfHI=
Subject key identifier:   AC:71:A3:7C:E4:A4:81:F4:7F:02:F5:09:8F:73:F9:4D:7F:4F:3C:82
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584E11B42A48970047D408617600
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/2d1aa5c6-d9a0-36fa-8adf-a9c331089f19.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     25655
IP address blocks:        173.241.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:2a:48:97:00:47:d4:08:61:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=6e6ee70c-221c-413b-87ac-3c129ffda2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:ee:39:47:2b:53:10:ee:ef:4e:59:32:20:
                    03:77:da:50:ce:32:10:a9:e7:a0:21:92:cf:fd:1e:
                    ea:b4:4d:e5:fe:ee:67:bf:17:99:6c:4a:6c:3a:f0:
                    b4:02:79:a0:80:db:21:97:62:85:86:98:fb:6b:53:
                    25:45:4c:c3:c9:d1:0f:88:ac:31:bf:4a:c0:b6:49:
                    92:cd:77:3c:55:cc:06:7e:cf:e8:3f:37:4b:f1:5c:
                    8c:b4:99:3d:ab:87:a9:e4:64:ea:42:76:f3:48:1f:
                    ef:a0:f5:bb:7e:1c:1e:46:b7:c8:77:e4:b1:e4:96:
                    8e:ec:52:d3:0e:b3:3a:6c:aa:27:48:3a:b0:37:43:
                    35:08:68:67:0b:6d:21:80:5c:99:95:2d:d0:8f:07:
                    b4:8a:e4:69:87:0c:c2:ca:89:d0:1c:05:09:de:0a:
                    ef:4a:eb:79:4d:e4:f0:d7:ca:55:34:ca:48:bd:3d:
                    cc:1c:7b:b4:99:77:70:da:15:b9:e6:af:c9:ad:0d:
                    c6:cb:d9:6b:ed:f4:a9:87:aa:e6:15:cd:15:17:c2:
                    17:a2:bf:10:9d:00:63:55:64:a3:5b:8f:84:76:23:
                    4f:4f:16:19:c1:3c:13:3e:e9:35:b0:3d:72:de:03:
                    ab:a6:93:99:56:ca:03:b3:7e:64:69:cf:83:38:2c:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:71:A3:7C:E4:A4:81:F4:7F:02:F5:09:8F:73:F9:4D:7F:4F:3C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/2d1aa5c6-d9a0-36fa-8adf-a9c331089f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:c4:ba:9f:5a:fb:c1:31:27:2a:d8:d9:c0:9b:09:c0:c8:
         0b:b3:94:dd:da:ec:01:5f:9d:2a:18:d3:d2:81:8f:74:d4:32:
         23:f0:ba:e6:85:ef:65:30:a9:d6:d2:24:94:63:ba:a2:7c:25:
         54:4e:d4:a8:dd:25:b9:96:b9:e5:3b:05:8a:9c:33:17:a4:6d:
         b3:82:58:62:7c:1a:65:0e:41:13:1e:c1:e7:6f:49:77:f8:45:
         6a:ab:95:3e:d0:e8:37:5a:56:05:c7:26:23:15:1d:aa:21:a2:
         d4:fa:da:5e:d6:0e:4f:49:6d:24:1b:9c:ae:ed:51:74:44:d4:
         bd:6c:c5:db:1d:a7:74:90:6a:1d:2f:d8:5f:63:27:e7:a4:b8:
         57:8d:47:3a:47:67:2a:cf:8d:ef:b2:39:60:cc:9d:3b:05:57:
         89:35:74:fd:18:4a:37:b6:da:46:83:4e:b9:a2:d6:e1:cb:a2:
         7a:cf:c4:4e:2a:51:ee:cd:83:e1:02:c9:6e:e8:6c:92:4a:84:
         4c:e5:0c:d9:43:dc:2c:ae:c0:09:a4:49:81:4d:41:00:f1:ed:
         93:50:77:f1:52:04:ae:08:56:8d:b2:3f:04:96:2a:27:b8:df:
         aa:ce:9d:dd:91:1a:8e:83:10:3d:72:d5:6b:3a:a9:00:e9:21:
         93:4e:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:06:03 2026 by rpki-client