Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ad10ff9-3703-3da7-886e-94a45f2537c8.roa
File:                     2ad10ff9-3703-3da7-886e-94a45f2537c8.roa (raw, json)
Hash identifier:          /N6WHDipyQPpQZhISpFDa6JlC3r5IR/a9KT+TcAnjaY=
Subject key identifier:   9D:3A:B0:E6:AE:68:E9:63:6F:D0:4B:00:D5:56:E0:FE:36:E5:AF:A3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D4D5A86D0261C7873B8E7F2C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ad10ff9-3703-3da7-886e-94a45f2537c8.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     36183
IP address blocks:        172.226.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:86:d0:26:1c:78:73:b8:e7:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=0304700f-4a8a-4925-893d-ecf5ef52b7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:b4:c9:77:95:1e:53:0b:40:39:c3:0b:4c:
                    11:1e:c7:25:53:e9:65:94:f3:6e:7e:b3:d3:68:6a:
                    50:73:89:79:2e:ad:66:88:44:76:c5:0d:03:33:6d:
                    9a:aa:63:1b:0a:e8:4b:2f:64:11:98:67:96:d2:17:
                    09:5f:d1:58:d3:57:0e:2c:bc:2a:23:5f:2e:74:76:
                    bf:69:77:45:f3:4a:58:49:9a:b7:44:e5:b9:c6:0f:
                    82:7d:8b:cc:8a:cd:13:c8:13:d5:d7:2e:47:77:80:
                    75:14:df:33:be:36:f9:cd:4c:73:da:42:e1:8b:23:
                    b3:85:9f:8a:98:7f:15:10:d2:76:1e:51:d9:86:90:
                    c6:2e:93:d6:c3:a8:46:1b:2f:9b:17:11:be:33:16:
                    09:69:91:c2:7a:42:1c:96:26:04:57:d3:38:89:af:
                    49:78:2e:c2:9a:1d:e5:6c:da:3a:65:de:24:21:ee:
                    ae:9d:be:64:fb:81:5c:14:b7:fb:e2:73:1f:b7:d0:
                    55:0d:cc:f5:60:c4:14:83:d6:72:7f:e3:9b:9d:97:
                    0d:16:52:0a:dd:ce:7a:a2:0f:63:b7:4f:46:61:04:
                    08:45:15:3c:62:a7:a4:d0:83:2c:d2:31:7c:66:48:
                    cd:d1:fa:b9:08:7b:2d:33:dd:e9:0d:ed:af:dc:5e:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3A:B0:E6:AE:68:E9:63:6F:D0:4B:00:D5:56:E0:FE:36:E5:AF:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ad10ff9-3703-3da7-886e-94a45f2537c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:af:e0:48:97:cc:2b:ef:92:44:3c:8b:ca:12:93:09:24:07:
         25:94:18:4d:3a:a6:08:bb:e9:b0:26:62:12:79:d2:8b:c7:93:
         5d:27:d7:0a:cd:5f:8a:7f:f8:2d:92:ff:6f:0d:55:1f:5b:14:
         b6:66:a7:87:28:0c:82:92:e9:6b:34:7b:41:d9:8c:24:9e:d0:
         98:49:f9:f4:40:f9:1e:65:23:79:09:61:0c:fd:2b:8d:cf:5a:
         42:78:81:ba:f3:1f:d2:27:9f:6f:ba:62:c4:62:2d:0b:63:c3:
         6a:3c:ff:2f:4f:52:c6:7a:37:92:d2:a7:e1:e5:3d:1d:3a:73:
         32:ba:28:bd:44:2e:ea:7d:b6:96:a1:c3:c4:b4:84:d9:f9:f2:
         f9:49:16:49:84:87:f3:0e:fc:ea:a1:d6:50:60:ac:9b:a9:3b:
         0f:31:ef:b1:61:1b:ae:ba:58:8a:cd:87:5b:3b:e4:19:73:f7:
         26:72:9a:f6:62:3d:5c:03:b1:ae:20:00:aa:5d:64:c6:01:e9:
         93:d0:4c:a4:4b:8e:64:7e:e8:84:b5:19:6d:19:31:b2:8b:7e:
         dd:a6:8a:99:7f:08:69:7c:52:e8:ee:3d:f1:70:d0:4d:6b:89:
         d9:6e:cf:45:1e:c6:f2:e9:3a:f2:ea:02:52:b9:da:7b:ba:49:
         b2:d2:02:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:55:51 2026 by rpki-client