Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa
File:                     2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa (raw, json)
Hash identifier:          BOYmslmjR5nUQqV3vcIRgphyIx4kYl3ohvTbuE9nniQ=
Subject key identifier:   37:35:64:52:06:9B:24:DE:FC:50:DD:F6:E1:A4:C2:3B:CB:FE:4C:28
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059C42010E5237A7F79DF680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        173.194.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:42:01:0e:52:37:a7:f7:9d:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=213c3af2-3378-42be-89b7-52b86cb70e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:33:f5:a7:13:ef:1a:87:0c:df:25:72:50:
                    df:00:49:ff:ff:ea:75:84:93:0b:d0:59:13:0d:71:
                    d5:60:95:bb:8d:06:fd:19:b1:5a:b1:83:a8:b3:35:
                    0f:89:6b:be:e0:ae:6c:db:ee:48:1c:31:a3:43:db:
                    10:f4:e7:67:a7:fc:4c:29:87:94:7d:77:5e:b8:69:
                    92:1f:14:89:7a:7a:c1:06:b1:49:be:52:fb:ad:0f:
                    e2:b8:08:7b:3c:01:e0:c4:23:85:dc:7b:1a:47:60:
                    1e:8a:2c:91:b2:4a:8e:f5:24:7e:95:c1:d0:58:f8:
                    3d:e7:15:98:f9:fe:90:1f:a3:2c:19:42:0f:5d:a3:
                    d5:63:bd:bb:23:ab:8c:d1:7a:de:48:00:76:7b:fa:
                    5c:e3:32:fd:12:c1:5b:77:af:30:e5:47:4d:02:39:
                    82:db:38:34:53:10:f5:f6:9d:7f:c3:e8:3d:8c:de:
                    a9:3b:29:4b:d3:ed:a5:11:be:8b:14:f2:ba:be:bc:
                    0e:c5:10:41:76:bf:e8:86:40:7f:2d:4a:7f:09:3d:
                    37:ee:47:92:8e:bf:8f:fd:bb:4c:9d:45:4c:13:c1:
                    50:88:87:7c:15:4b:8e:48:3c:d3:76:3a:4b:be:82:
                    33:74:fa:e7:84:47:2e:cd:21:12:c9:a6:60:48:62:
                    09:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:35:64:52:06:9B:24:DE:FC:50:DD:F6:E1:A4:C2:3B:CB:FE:4C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2892d5e2-d8b3-3eb8-ab81-972046fd2908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:26:c3:a7:bd:0e:cb:93:21:44:04:75:6f:fa:64:79:ba:91:
         01:1a:e2:8a:2e:c6:42:93:ce:56:90:e4:36:90:2a:e6:04:30:
         62:04:a6:32:8d:bd:57:8c:5f:04:d0:f5:5c:a3:86:e8:3c:82:
         f0:80:29:9a:dc:ab:d6:84:56:2c:ff:f5:49:d9:c2:6b:28:aa:
         74:88:b1:23:72:d8:b0:a3:e7:40:78:03:52:29:32:7c:05:cf:
         6b:00:47:93:57:d4:44:9c:9a:ff:89:c7:a3:4f:03:2d:ac:e9:
         0b:46:19:24:2d:41:dd:19:6c:0f:8f:9c:6f:63:74:f7:88:42:
         da:b4:98:4b:96:78:24:e3:5d:db:e4:75:68:4e:e5:ad:7c:b7:
         65:42:5b:2e:68:07:c2:76:44:4c:2c:9a:14:dd:be:77:89:36:
         ba:3b:28:69:9e:15:1c:89:a0:ff:7c:a0:67:91:e2:e1:6b:ff:
         03:f5:9b:5f:34:c8:73:87:e0:56:e8:09:f1:4b:e1:11:43:3c:
         5b:b8:6d:b5:2a:68:0d:0f:d8:e5:47:1f:ec:9e:88:6b:dd:54:
         8e:c3:15:e5:3e:35:12:00:a8:b8:2c:d5:37:0e:5d:4e:8c:5e:
         c8:ab:fb:d3:04:11:69:3a:e4:ad:a1:d6:86:f0:f5:fd:16:55:
         fc:a1:79:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:46 2026 by rpki-client