Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39063804-8507-4062-9e09-d6aa55649ab2/2d0a7379-2398-345b-b335-159dcc055b37.roa
File:                     2d0a7379-2398-345b-b335-159dcc055b37.roa (raw, json)
Hash identifier:          ewLQ8bCrzRE8OlqIV3VHnip23bIxSjM6w72y9JeBitM=
Subject key identifier:   D4:77:B9:02:15:92:E5:63:C4:FA:EC:72:E3:5E:EF:A2:24:35:4E:EB
Certificate issuer:       /CN=39063804-8507-4062-9e09-d6aa55649ab2
Certificate serial:       010D0C9F4328584D44FA627984B6F5BFBA196690
Authority key identifier: D8:58:94:47:1C:EC:8A:B0:5D:31:13:6A:6A:A8:77:0D:CB:A9:F9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39063804-8507-4062-9e09-d6aa55649ab2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39063804-8507-4062-9e09-d6aa55649ab2/2d0a7379-2398-345b-b335-159dcc055b37.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     6461
IP address blocks:        173.231.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39063804-8507-4062-9e09-d6aa55649ab2/39063804-8507-4062-9e09-d6aa55649ab2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39063804-8507-4062-9e09-d6aa55649ab2/39063804-8507-4062-9e09-d6aa55649ab2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39063804-8507-4062-9e09-d6aa55649ab2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:62:79:84:b6:f5:bf:ba:19:66:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39063804-8507-4062-9e09-d6aa55649ab2
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=90530792-3e56-4d54-8220-96dfb3f4a7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6a:8e:0a:df:65:43:a4:fc:cc:10:ad:79:a2:
                    3f:0c:fa:9f:67:d3:d8:f9:3c:39:1c:a9:d3:a8:38:
                    e5:b0:90:66:d9:1b:67:80:fa:13:ff:f5:7f:02:e2:
                    92:86:8b:26:2c:ae:ac:2f:67:3e:8c:17:63:9d:46:
                    01:79:14:45:a5:be:b6:03:50:18:d5:62:ec:87:da:
                    c4:99:7d:91:14:6f:73:31:1f:94:b3:3d:91:89:96:
                    5f:e9:6c:97:b5:f6:50:62:c4:e4:a3:5e:05:20:07:
                    17:68:49:c5:1e:fc:2b:8b:61:5c:94:f3:bc:45:f8:
                    08:91:e8:68:21:14:91:67:8b:cb:06:de:ba:cd:48:
                    e6:fb:00:b3:0b:8a:8b:0d:df:1e:e8:90:c9:89:64:
                    d4:c3:b1:67:26:e0:3d:6e:51:d8:02:34:77:29:1b:
                    12:ce:84:ce:85:8c:61:29:8e:03:e9:ed:ce:0a:90:
                    a0:02:58:7d:69:34:d8:cc:3e:1a:f9:9c:06:de:98:
                    26:35:32:14:81:f4:d3:ab:bd:ad:98:9e:d1:c2:d7:
                    af:1a:d4:72:f4:4a:65:20:ce:f0:1e:9e:0c:34:6d:
                    61:92:28:71:af:f9:8c:c0:f6:aa:aa:75:53:94:d5:
                    e1:ef:ca:a1:53:e5:cb:98:95:03:7c:f8:f4:7e:76:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:77:B9:02:15:92:E5:63:C4:FA:EC:72:E3:5E:EF:A2:24:35:4E:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39063804-8507-4062-9e09-d6aa55649ab2/2d0a7379-2398-345b-b335-159dcc055b37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39063804-8507-4062-9e09-d6aa55649ab2/39063804-8507-4062-9e09-d6aa55649ab2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:58:94:47:1C:EC:8A:B0:5D:31:13:6A:6A:A8:77:0D:CB:A9:F9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39063804-8507-4062-9e09-d6aa55649ab2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.231.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:60:8a:5d:0b:01:50:3c:c8:2e:2c:6f:2f:12:62:4f:c7:
         1f:33:93:fb:51:75:f7:64:62:88:e4:98:50:01:ec:62:68:97:
         cb:85:b7:3f:64:77:be:dd:d5:aa:04:51:b2:4e:2e:95:36:cb:
         89:57:45:8c:41:06:c5:48:9e:42:94:ee:ce:82:37:34:3f:8b:
         48:3a:0e:33:71:35:e9:5f:a8:ca:c4:1a:f5:9e:7f:57:42:5d:
         15:82:8f:03:3c:c5:6a:eb:eb:22:49:55:2c:d8:f6:8d:9b:8b:
         61:04:84:ed:b0:64:6a:24:7f:12:c6:fe:1b:d9:54:a7:da:c8:
         46:41:e0:7c:13:99:78:af:af:31:0c:70:cc:0f:c0:38:dd:9a:
         86:fe:73:d3:bf:d4:16:1a:cf:03:95:9f:7d:4c:4f:95:58:de:
         5d:b4:25:ea:66:ff:be:5c:40:e8:46:3b:10:17:82:e7:fb:de:
         3a:f1:06:fe:d7:26:c8:35:11:7c:9b:c6:62:7a:30:4c:11:9e:
         72:c0:e4:5b:4e:57:73:b0:3e:04:4e:67:72:35:ba:2c:fb:50:
         c8:60:44:8c:5c:13:3a:78:38:74:c1:55:7b:72:d9:a7:ef:a4:
         e0:4f:42:a1:8c:50:96:08:90:b4:01:e8:31:d6:db:24:0a:c2:
         3b:b7:0a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:39:07 2026 by rpki-client