Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/3f441421-d975-3868-bacd-9228067fffb0.roa
File:                     3f441421-d975-3868-bacd-9228067fffb0.roa (raw, json)
Hash identifier:          sBI7MCMARf2X04mC/1mSFLNrTzhu3K2LsGQUHTa0Wig=
Subject key identifier:   2B:0D:F2:D1:CA:B9:17:07:E7:2F:C1:D1:AB:7F:EE:71:DA:25:F0:52
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584DB4A58102566E9C6B00836620
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/3f441421-d975-3868-bacd-9228067fffb0.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     23470
IP address blocks:        185.150.189.0/24 maxlen: 24
                          185.150.190.0/24 maxlen: 24
                          185.150.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:81:02:56:6e:9c:6b:00:83:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=040c8ff8-33a6-4985-a082-8c2054524626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:64:cc:05:6a:ff:6e:5e:f0:ed:87:ba:ff:
                    3d:f0:4e:39:11:71:fb:76:09:9b:bf:e3:9f:5e:82:
                    a7:83:29:77:7f:7a:9e:47:17:e1:06:c2:8d:4c:d7:
                    f7:db:e6:57:9f:5a:f7:f3:46:dd:bc:0c:ad:77:4a:
                    17:12:31:6f:4f:83:00:c1:87:7e:8b:ed:94:df:b6:
                    eb:8e:ab:80:5e:45:1d:1a:7c:7e:f7:c3:76:9c:9b:
                    9b:6c:8e:f9:bb:9e:f6:3f:34:40:ed:6a:b5:0f:6f:
                    94:04:9e:8a:90:12:f7:4d:88:de:7e:5b:7a:c5:f3:
                    51:0b:91:6d:a9:b4:46:48:da:85:d0:c3:df:c0:2c:
                    44:5d:6d:72:6d:c8:9d:f3:e9:94:0d:90:6a:27:ee:
                    1e:79:6f:f7:af:e1:85:be:91:2e:fe:1e:1e:38:e6:
                    dd:92:ef:4b:4c:ec:ed:a2:87:c4:3e:fc:36:ee:56:
                    94:3d:6d:03:a7:a3:bd:f0:41:07:4e:c2:f6:ed:42:
                    17:8f:f6:59:68:ba:69:1b:69:dd:00:de:73:52:92:
                    9a:00:ca:9e:16:f3:39:4d:d5:b6:a1:b8:72:30:06:
                    dd:bb:2b:56:4c:68:4c:19:74:10:dc:a9:e9:52:5e:
                    55:76:63:90:f6:2b:a6:cb:e5:ec:31:98:47:02:8a:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0D:F2:D1:CA:B9:17:07:E7:2F:C1:D1:AB:7F:EE:71:DA:25:F0:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/3f441421-d975-3868-bacd-9228067fffb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.189.0-185.150.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e6:98:ea:ae:b7:46:ce:ad:eb:d7:2f:c7:d4:c3:df:5d:b9:
         db:57:bc:b4:55:50:ee:2b:37:3b:b6:8d:70:0e:3d:61:3a:fe:
         df:f7:88:62:b6:ad:05:fd:56:6c:b8:5f:7b:d4:3a:ea:f0:b8:
         48:c0:97:9a:4d:bc:56:c7:67:06:48:8e:3c:a2:f5:8c:0f:67:
         36:ea:2e:fd:d0:b2:60:3a:81:52:b7:fe:7f:b1:ac:f6:f6:f0:
         81:e4:f0:f2:b2:23:06:fd:47:ec:33:5b:92:42:a8:32:40:0a:
         9d:2b:3d:65:64:5b:66:8d:93:99:9c:c3:90:0b:37:dc:50:26:
         15:26:61:bf:62:5a:7d:aa:f4:a9:56:37:55:62:65:a4:5a:b5:
         40:f8:fc:6e:0a:11:25:94:d5:54:11:1e:11:61:6e:39:24:81:
         ab:ad:68:d6:9e:12:0a:1b:5d:66:56:24:41:5e:bd:63:01:72:
         0f:bd:b8:ff:68:4a:dd:be:c6:e4:52:15:56:74:73:1d:e6:7e:
         a1:a5:4a:37:4f:ea:51:1d:1a:70:3b:c0:6c:ee:2c:8e:b0:22:
         72:97:72:5b:3a:fc:21:d7:2f:2d:f3:44:1d:2c:c8:dd:bd:04:
         05:6f:23:e9:e0:ea:0d:f6:bb:62:47:a5:73:03:4e:05:91:d4:
         40:62:b2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:22:27 2026 by rpki-client