Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be131c0-9d45-3a78-86d8-bb9e1e654c54.roa
File:                     6be131c0-9d45-3a78-86d8-bb9e1e654c54.roa (raw, json)
Hash identifier:          m0MaiF22J1cj0rky60NOUXJtLu2afFfnmMEKEuETEvg=
Subject key identifier:   16:94:A3:12:66:8F:CE:DB:DB:87:F6:23:F1:1C:FC:A2:01:8D:57:AD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C6E219E3E9DB8678B96E4F780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be131c0-9d45-3a78-86d8-bb9e1e654c54.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     36183
IP address blocks:        172.226.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:9e:3e:9d:b8:67:8b:96:e4:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=c55c080e-1041-4d92-8e85-728a9893295e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f0:f3:59:69:70:1e:9f:44:1e:a8:4a:40:b8:
                    e1:8f:6e:c6:e8:0a:18:01:30:d4:2b:85:dc:5b:89:
                    7c:a7:84:fa:f5:61:82:d9:ca:55:6a:9a:f1:40:c8:
                    90:50:fc:a8:be:b5:ba:11:20:82:70:2f:ee:5a:e5:
                    8a:48:01:eb:6c:be:5c:75:98:69:de:ed:d2:3e:27:
                    63:50:8a:5d:ae:f7:ba:5d:83:04:df:59:04:51:89:
                    3c:54:59:9c:45:d2:07:85:1b:5c:67:d1:37:93:81:
                    90:02:26:87:73:be:eb:1f:d1:44:85:a7:29:18:5a:
                    9f:47:8a:a8:cf:48:33:8f:4d:64:94:c9:cc:6d:5c:
                    16:6a:26:a0:b5:d5:db:f3:ae:5f:cd:17:ed:09:a3:
                    4e:19:69:28:ba:c4:af:5c:88:15:55:aa:f6:6d:6a:
                    3b:0e:e3:83:4b:7f:fc:fb:03:ae:ef:46:6f:ea:4b:
                    f0:79:b6:fd:74:58:fc:bf:ba:4f:d7:52:a7:a8:f8:
                    37:89:9d:72:48:20:da:72:b3:e4:e3:5c:1a:3f:7a:
                    88:c9:3a:e8:4a:61:6b:a4:4d:4f:b5:0f:19:15:3c:
                    01:ca:2b:2d:ea:60:98:ba:f4:c8:30:06:7e:88:67:
                    97:aa:81:da:96:86:cd:32:64:91:9a:48:1d:76:6e:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:94:A3:12:66:8F:CE:DB:DB:87:F6:23:F1:1C:FC:A2:01:8D:57:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6be131c0-9d45-3a78-86d8-bb9e1e654c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:bc:bc:68:2d:a2:82:6e:ef:26:ad:36:80:78:04:94:40:
         49:05:77:96:9e:48:b1:02:1d:e6:6c:bc:b2:3e:6a:b9:b7:2d:
         4c:f4:0d:00:8c:18:70:4d:a9:1b:cc:00:c3:73:ec:50:61:f0:
         2d:ae:c1:47:91:67:ad:32:6b:92:3d:6d:cf:fa:34:27:4c:a4:
         38:46:aa:d5:17:ac:94:1f:de:d2:33:a5:f2:fb:4e:a3:75:d8:
         aa:fb:e9:a4:8e:46:ba:6f:a4:cb:f8:30:75:5c:7e:30:31:21:
         25:da:84:2d:fc:ff:02:a0:a4:4e:93:01:0d:bd:3a:c6:16:07:
         3e:f5:37:ab:74:2d:8e:33:c3:2b:11:6e:72:72:3c:e4:fa:46:
         ad:2a:95:ba:d4:21:5c:bf:65:09:92:c4:03:a2:e7:a0:b5:d5:
         3a:8d:d6:9e:78:9d:2f:8d:ca:be:3c:a5:fb:34:db:b4:00:85:
         44:a1:fa:b6:ae:44:4d:48:25:f0:69:0c:15:09:d2:12:8c:0d:
         22:04:3d:56:e5:49:79:07:cd:bb:51:d7:d1:b6:27:97:8c:25:
         6c:b1:1e:5b:bc:cd:46:e1:63:f9:2a:38:a3:0e:3c:12:42:32:
         61:8b:c9:8c:b7:e3:7e:d7:c4:fe:38:b6:85:af:93:b8:9f:4d:
         4a:05:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:11 2026 by rpki-client