Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2ef8761f-1bb5-326a-9244-993d7d906f89.roa
File:                     2ef8761f-1bb5-326a-9244-993d7d906f89.roa (raw, json)
Hash identifier:          n45rG/30KO1cp43rEnUaN06VSgL/N4k2avUmhbpKi6U=
Subject key identifier:   89:A9:5A:35:77:D0:5C:08:77:DD:7A:2C:1C:98:BA:0E:FE:22:EC:2B
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584D6EF1572662593041C4A8B5C0
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2ef8761f-1bb5-326a-9244-993d7d906f89.roa
Signing time:             Wed 08 Apr 2026 01:46:46 +0000
ROA not before:           Wed 08 Apr 2026 01:46:46 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     4913
IP address blocks:        207.241.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:f1:57:26:62:59:30:41:c4:a8:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Apr  8 01:46:46 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=e208814f-d5c9-4483-ad82-d11c7d2e07f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:50:d5:be:0d:08:93:99:6d:a5:b3:66:26:a9:
                    dd:0b:80:6a:f9:d1:1b:77:f0:74:5a:cf:0f:97:3a:
                    44:72:87:2c:23:0d:1e:16:31:34:1f:b9:b0:08:5d:
                    73:4d:31:c9:7c:3d:a1:5e:aa:85:a0:dc:6a:97:55:
                    7c:8b:b5:b6:d7:8e:08:a7:09:f9:ac:13:4d:e8:67:
                    60:56:8a:30:44:61:b6:f9:d2:77:78:8a:a9:6b:24:
                    88:7c:a1:17:08:87:29:b3:b2:97:49:1e:09:12:41:
                    da:84:b7:40:78:ee:f7:a7:a7:35:18:5d:6b:9e:fc:
                    3b:c4:4b:e3:71:0e:05:35:ad:ce:38:56:ad:89:0b:
                    bb:7c:9d:65:75:b1:ef:db:16:e1:bd:a3:e7:2a:33:
                    34:c1:d4:8e:e7:e9:ca:5b:3a:fc:30:17:f9:5a:3b:
                    1a:34:8b:e4:a5:ff:ab:6d:90:24:29:49:8f:2c:01:
                    c9:d4:4e:90:de:80:77:7e:d0:9f:4a:01:71:91:21:
                    09:69:98:93:59:cf:c6:4e:34:87:36:ed:5e:f4:b1:
                    02:29:23:f1:dc:8e:54:1e:04:98:d4:a3:60:ed:60:
                    b9:46:54:ba:df:28:2b:d9:db:51:e0:1f:0a:7a:f1:
                    59:38:e8:3e:df:63:fc:7c:3e:42:9f:e0:0d:27:13:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A9:5A:35:77:D0:5C:08:77:DD:7A:2C:1C:98:BA:0E:FE:22:EC:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2ef8761f-1bb5-326a-9244-993d7d906f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d5:7b:f1:b9:f9:87:37:db:1c:98:de:81:aa:be:27:f2:bd:
         98:5c:62:e6:92:f8:5e:6b:5d:75:f5:14:89:4f:a8:ae:c2:12:
         95:6a:be:d8:f0:9b:ff:d4:3b:0a:97:f2:74:cb:92:26:06:f9:
         df:75:78:ed:d4:55:12:b4:0d:1c:37:f0:b6:fb:ec:f1:4a:84:
         2f:4a:53:b8:de:f6:34:17:ad:6d:eb:ce:e3:a2:ce:48:ed:51:
         a8:65:90:7d:8a:4a:82:43:5e:c4:cc:30:9e:0b:b7:3b:aa:c5:
         58:33:52:5f:bf:72:fe:82:d0:42:04:bb:83:a9:ab:e4:a5:f7:
         52:eb:d2:61:0f:4a:84:bf:f1:63:86:f1:cf:18:00:e6:a8:d8:
         f4:e5:71:bf:c2:ad:0c:f2:7a:77:07:f5:b8:7e:43:5e:78:5d:
         b3:c6:21:54:06:29:b8:cf:b1:a0:0e:4a:fe:45:aa:8b:f6:26:
         f5:d9:de:5b:e6:4b:f2:52:59:71:b7:52:81:07:a7:57:54:b1:
         ab:d5:19:e4:b4:42:36:c2:99:04:4c:88:40:15:ff:b9:61:27:
         2f:29:c7:45:a0:16:8b:7c:66:40:e2:64:19:4e:95:db:82:b3:
         44:fd:38:1d:a8:4d:fb:6d:15:08:e6:b0:06:10:06:f9:5c:27:
         52:30:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:27:19 2026 by rpki-client