Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d8595940-42d4-366b-9402-9f84a8a5c1b9.roa
File:                     d8595940-42d4-366b-9402-9f84a8a5c1b9.roa (raw, json)
Hash identifier:          7RsMayTtbJCmii2B5lVTv8gJeArP7T83K9/gIbuFM2c=
Subject key identifier:   A6:2E:41:71:39:1E:8B:9D:41:F7:33:BD:11:2A:47:55:92:74:9F:B9
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584CB981CE1D076018E18423D480
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d8595940-42d4-366b-9402-9f84a8a5c1b9.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     11300
IP address blocks:        207.241.174.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:ce:1d:07:60:18:e1:84:23:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=34731742-10da-45be-a6c2-0e427cba7ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:26:67:9e:48:65:d5:15:43:c5:93:e5:fc:
                    63:bf:ce:16:3d:3e:37:45:09:7b:60:b6:8d:1e:4e:
                    d0:a4:cf:10:0a:10:51:c8:4d:7d:08:f8:bb:c4:38:
                    b6:8b:77:ac:0b:b6:33:26:cf:5d:78:2c:1f:f8:a3:
                    ce:ff:32:03:12:8c:e4:ba:88:df:b0:92:96:79:e8:
                    50:cd:fc:0e:66:3b:5e:0c:66:c7:f2:ba:b8:ba:d3:
                    f6:10:71:4d:36:92:45:f6:79:bf:94:97:98:27:64:
                    53:2a:6b:f2:18:9b:64:67:5d:ae:20:f8:1d:3a:89:
                    bb:cd:30:a3:40:fa:86:19:df:79:d2:db:62:ea:18:
                    a8:91:6d:67:9f:8b:48:e2:0c:ba:de:e5:bf:b7:63:
                    78:7c:fe:36:87:d0:a0:0a:12:d9:87:97:0a:fe:39:
                    f8:fb:ef:43:82:b3:d6:c7:1c:32:ab:54:66:b4:bc:
                    05:01:d6:52:ad:40:4b:d9:5f:f5:db:8b:d8:43:2d:
                    70:e9:ed:3a:1d:35:ad:92:75:be:0e:4f:b8:8e:e1:
                    04:6a:b6:9b:15:77:a2:91:f2:ca:d6:09:c8:31:a1:
                    dd:12:33:3a:b3:9a:fa:13:39:0d:3c:54:aa:fa:dc:
                    fb:40:33:83:5e:9a:e0:dd:02:7e:15:63:6e:3c:b9:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2E:41:71:39:1E:8B:9D:41:F7:33:BD:11:2A:47:55:92:74:9F:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/d8595940-42d4-366b-9402-9f84a8a5c1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3d:8c:7a:b6:f8:7c:6e:51:d5:2f:e1:19:e1:a9:4a:e4:9f:
         f4:2b:b0:86:6d:60:12:f4:42:89:be:30:c7:5a:80:05:c1:df:
         2a:0c:12:d9:01:a5:f2:c7:87:f3:80:8f:9b:c2:ea:45:35:01:
         4a:3c:1e:3c:2b:c3:fe:84:b2:9b:8e:5c:0d:7f:93:ef:25:c0:
         e1:d1:9a:e3:17:51:e4:ec:66:b8:80:09:f0:57:8a:df:0c:13:
         7e:f2:5f:63:1e:cc:04:2e:29:17:bb:9b:ec:cb:f1:73:55:99:
         1c:14:e5:ad:33:71:f8:21:54:68:89:60:af:31:1d:95:01:ef:
         cf:93:db:90:50:17:03:41:5b:4b:5d:52:9e:e7:5c:07:0f:c3:
         70:43:49:c7:8a:aa:c7:ee:0f:fb:78:1e:6a:44:c2:ca:11:af:
         b5:92:6f:c3:24:a6:27:36:b4:bb:06:63:58:a7:f5:8b:b8:d7:
         53:47:b9:5c:dd:4a:d9:34:1d:53:2b:ee:04:27:e1:ab:0e:c4:
         dd:10:46:eb:c9:d3:2c:c6:d9:4c:fa:f2:4e:5f:7e:ed:3c:01:
         f4:dd:d7:49:ff:8d:00:0c:ec:56:29:ec:8c:80:d7:8c:0e:95:
         bf:80:60:f3:d8:31:db:e0:6d:44:03:92:f3:f4:25:db:be:1b:
         38:78:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:58 2026 by rpki-client