Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/2b44fd08-b57d-3410-85f3-919317bfb40c.roa
File:                     2b44fd08-b57d-3410-85f3-919317bfb40c.roa (raw, json)
Hash identifier:          LEAsniUimIugPiTrK+0WJnJ66pcj1bGrh7UspnYjY5E=
Subject key identifier:   B7:6B:15:20:C4:ED:3D:57:12:47:7A:EC:25:DB:94:AA:CC:05:89:ED
Certificate issuer:       /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
Certificate serial:       010D0C9F4328584CF4223EBE4D13B2BC00533700
Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/2b44fd08-b57d-3410-85f3-919317bfb40c.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     2562
IP address blocks:        192.153.240.0/24 maxlen: 24
                          192.153.241.0/24 maxlen: 24
                          192.153.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:3e:be:4d:13:b2:bc:00:53:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=63ec96d6-30d3-4d70-b230-5ff908757194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bd:80:42:67:8a:6a:8e:48:02:4f:16:fb:e2:
                    6a:58:8e:59:df:ec:da:9c:9e:da:6b:6a:6d:4f:01:
                    e1:fa:28:a3:30:fc:bf:49:a4:26:06:72:aa:a9:67:
                    1b:db:80:dc:99:d6:a8:21:81:06:b4:e1:bc:28:6b:
                    f7:08:2f:23:63:37:dd:ef:fe:ff:e9:d4:1a:b7:64:
                    57:82:75:de:36:bc:f1:82:74:62:08:b0:13:2b:54:
                    da:c3:c3:81:27:34:9c:d3:61:8a:36:17:90:7b:ec:
                    84:45:a9:3b:1d:db:b9:21:03:29:66:1e:6d:2c:78:
                    19:2f:80:83:62:27:d1:ce:77:c3:d7:9d:c5:20:4b:
                    c6:db:01:d1:c1:03:56:57:fd:69:91:2f:78:04:43:
                    a7:af:aa:00:0e:26:16:b7:a0:a1:8a:c1:bf:87:02:
                    fe:af:2b:c1:e0:69:25:75:73:73:8e:42:3d:1f:d7:
                    09:e2:02:25:cd:a9:9d:32:27:60:ff:e7:04:77:f3:
                    17:0b:cb:db:06:f3:63:00:46:a6:fa:18:21:d7:30:
                    6e:36:88:55:d2:25:5d:9e:23:f4:65:de:67:e8:ad:
                    a3:6a:81:34:c4:7a:e3:04:d1:a8:36:5c:7a:16:f5:
                    c9:be:b4:c5:6c:66:19:30:28:88:5a:b8:60:e4:48:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6B:15:20:C4:ED:3D:57:12:47:7A:EC:25:DB:94:AA:CC:05:89:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/2b44fd08-b57d-3410-85f3-919317bfb40c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl

            X509v3 Authority Key Identifier:
                keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.240.0-192.153.242.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:c0:14:1b:21:4b:b8:4a:2a:bb:fa:22:a9:8b:cf:14:3a:
         6f:da:36:10:53:4d:f9:a2:df:9b:9c:a5:3e:56:65:f0:96:44:
         2d:d3:56:2d:0a:61:90:f9:1e:ad:41:2c:37:65:3f:c8:70:d0:
         61:bb:92:40:0c:5e:83:67:ef:a6:ca:9c:68:2e:23:3e:30:72:
         61:4c:ff:7a:b7:ea:e6:e1:8a:5f:ab:12:fc:d2:52:a4:03:25:
         21:9f:d1:b5:bf:7d:e2:aa:16:92:a9:83:14:f4:0c:d0:e5:30:
         6a:30:d1:b1:a5:32:09:c2:19:b2:36:5d:63:12:48:76:0e:6e:
         a0:e8:a1:0e:69:08:57:53:a8:81:22:45:56:89:9e:b7:bc:1e:
         af:97:03:c4:7c:aa:fa:94:1c:1d:cf:33:de:03:80:cd:af:5c:
         7d:ab:42:e5:46:15:63:bc:ac:ef:75:bf:5b:58:11:81:45:cf:
         4d:f5:99:4f:5f:9e:80:f2:de:c9:3c:e5:fa:0e:0e:c8:c9:49:
         43:fa:1f:4c:c3:2a:47:9d:6a:1a:7c:fc:49:8e:98:e7:67:b9:
         03:46:b9:14:89:73:bb:f5:f0:a1:bb:bd:57:66:18:1a:4c:83:
         c8:ce:bb:43:78:7e:f2:cc:ad:d7:51:0a:c0:d9:92:05:a4:e2:
         7e:cb:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:36 2026 by rpki-client