Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a6b0fc63-790c-3d06-9b98-527c4eaa4586.roa
File:                     a6b0fc63-790c-3d06-9b98-527c4eaa4586.roa (raw, json)
Hash identifier:          wUoW1aNhXAHbTnvvTlcjSK2nR/umh02XqdrkKNlnb5Q=
Subject key identifier:   BA:A9:2B:0B:A3:15:AD:B4:4E:0C:6C:06:53:4D:AB:2B:74:95:4C:20
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584D07AD1B0C5354C5E43D26C980
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a6b0fc63-790c-3d06-9b98-527c4eaa4586.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     11273
IP address blocks:        209.211.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:1b:0c:53:54:c5:e4:3d:26:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=d11006a6-a6fc-45d3-8ff3-1fd4f469c915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:96:69:0d:07:26:77:bd:84:b6:98:b5:b8:
                    08:33:1e:1e:c6:83:33:a1:65:ad:09:a4:83:9b:c6:
                    27:ad:83:80:14:02:89:c2:f0:83:9f:24:3e:fe:e0:
                    bf:47:f2:59:96:f4:fd:94:fe:27:a9:d8:dc:60:2f:
                    06:6d:41:90:77:0b:22:3d:9f:80:f4:58:8a:05:8c:
                    63:72:7b:63:ce:61:e6:f2:ea:e3:66:b9:94:2a:2b:
                    f4:2e:c0:08:7f:16:7d:43:3e:a3:5a:94:44:82:0c:
                    a3:12:1a:44:df:53:aa:9f:be:f3:62:0c:96:a1:fa:
                    1d:45:dc:90:7c:c5:97:0f:cc:d2:4b:84:56:2e:79:
                    07:9e:ef:40:e4:c3:fd:13:1a:4d:ba:1c:b0:fb:ec:
                    0b:5e:6a:9f:4f:2c:a2:ce:da:89:39:2d:2e:31:3e:
                    2a:95:54:29:7f:32:1d:cf:d0:37:a0:1e:3f:0a:e5:
                    86:48:8c:12:2b:ac:dc:59:14:04:36:d0:8c:d7:d8:
                    b5:fd:82:c1:ac:de:c3:9b:8e:c2:8e:9d:80:45:8b:
                    e4:51:b7:ec:73:11:46:a3:09:81:8c:fa:59:cc:87:
                    7d:cd:69:93:6a:f2:42:dc:31:54:0b:c9:92:a2:33:
                    9e:d0:e9:aa:6d:43:97:23:5f:fa:08:65:16:16:ee:
                    fe:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A9:2B:0B:A3:15:AD:B4:4E:0C:6C:06:53:4D:AB:2B:74:95:4C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a6b0fc63-790c-3d06-9b98-527c4eaa4586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.211.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:3c:0b:b9:3a:40:c8:cb:cc:c1:13:8b:4f:2a:cb:9c:40:
         cc:1d:7c:7c:a8:48:88:ab:04:53:04:57:03:6c:35:ec:9f:58:
         5d:aa:b0:7b:4b:ec:c2:e7:91:0d:8a:b2:81:45:af:c0:2e:97:
         ac:b0:9d:3f:58:08:d8:02:86:29:23:4b:96:90:67:fe:ca:ca:
         de:69:37:09:fa:ac:e5:d5:cc:ed:c0:95:23:da:67:ce:7e:96:
         bf:40:b1:98:0a:50:b9:f9:9d:6d:b7:9c:ef:5c:97:a0:b9:c7:
         00:62:7f:63:8f:d8:d9:f9:98:35:aa:28:4f:ab:9f:11:c5:ef:
         ac:9a:89:76:19:1f:e0:ef:c8:5c:3d:b0:45:bf:b9:18:62:0b:
         57:c9:98:c5:98:f0:de:1b:a1:ad:c7:b8:a9:8c:eb:57:54:5c:
         be:b8:ca:c7:f7:46:f7:e7:30:99:b9:2d:ca:e8:58:06:ad:69:
         ce:74:ae:e5:a9:4f:4f:62:89:a8:8c:0f:7b:c1:67:2c:73:02:
         df:44:b6:ed:10:50:95:6a:6b:cd:8d:05:8f:c1:02:0a:d7:eb:
         ba:63:d5:04:d0:c0:06:7d:3d:b3:07:c5:32:68:e1:d8:d9:2a:
         44:51:e8:ae:7f:17:b5:fe:66:36:c5:1d:57:12:96:02:16:3a:
         c5:f1:89:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:31 2026 by rpki-client