Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/341baf55-f72d-3c76-a1a8-98e45e858f4d.roa
File:                     341baf55-f72d-3c76-a1a8-98e45e858f4d.roa (raw, json)
Hash identifier:          Ln+ws/psBC85OMYaLH+tAe0dGI/zIsuWDqGXl4ra7aQ=
Subject key identifier:   42:09:B1:AF:93:00:83:24:98:E4:86:1A:B8:A9:87:33:3E:9E:A1:46
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584D3F64E1380C41BFDBA9B04F00
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/341baf55-f72d-3c76-a1a8-98e45e858f4d.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     26211
IP address blocks:        67.231.144.0/20 maxlen: 24
                          148.163.128.0/19 maxlen: 24
                          208.84.64.0/22 maxlen: 24
                          208.86.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:e1:38:0c:41:bf:db:a9:b0:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=f0c4ab53-f8b8-4d14-8e65-6c5a2694b4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:f4:cf:b0:95:53:85:8f:99:f0:c5:af:ec:
                    75:04:7a:e8:e5:81:50:98:73:49:b4:34:0c:27:02:
                    5a:58:18:40:46:a3:d7:f7:b7:76:73:f1:6b:a0:d3:
                    c2:d4:45:5e:c4:94:0f:c5:46:8b:c1:78:d1:15:b2:
                    bb:16:4e:69:b1:00:da:45:61:0f:19:d2:c8:8e:48:
                    db:2f:e7:8c:4b:33:be:ea:c0:be:88:cd:ac:0c:d0:
                    b4:b9:67:79:35:90:4c:54:a3:a8:05:f9:5e:6b:4d:
                    01:de:b1:59:8c:ba:d7:36:9e:11:c7:a6:39:26:4d:
                    3a:e1:56:24:97:e3:77:c3:d8:15:f0:c2:e2:f9:de:
                    c9:70:dc:d4:6f:eb:ae:1b:a7:bc:67:00:73:4f:ca:
                    c4:24:3d:b1:a7:b6:cf:fe:41:03:74:99:ed:18:3f:
                    b7:9c:4e:a0:c4:f9:5c:8c:30:ec:5f:6c:19:2e:a5:
                    ed:a9:eb:9f:66:94:7d:3a:ae:38:94:fe:e7:59:79:
                    a8:d2:65:4a:d3:17:f0:29:ad:6d:a6:4d:18:6f:44:
                    01:3f:4d:0e:63:8e:e8:bd:a2:d7:9e:d2:13:4c:c0:
                    02:c1:17:e7:24:84:d3:c8:ba:60:2b:0c:9e:d6:2c:
                    03:5c:82:4b:1c:92:6b:41:62:ef:17:ac:4d:0d:1d:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:09:B1:AF:93:00:83:24:98:E4:86:1A:B8:A9:87:33:3E:9E:A1:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/341baf55-f72d-3c76-a1a8-98e45e858f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.231.144.0/20
                  148.163.128.0/19
                  208.84.64.0/22
                  208.86.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:9b:6f:be:40:d5:f4:4d:09:4f:56:46:18:62:75:3b:c3:d8:
         bb:df:b0:1e:81:df:11:8e:f5:6b:29:d8:e3:5d:1a:0e:7f:e9:
         ad:92:6e:08:a1:df:58:7f:61:19:66:6c:e8:82:bc:a1:35:66:
         d1:49:c9:c6:96:93:22:ac:3f:8e:eb:7a:c4:bc:ec:c6:42:f4:
         ae:26:30:ed:90:56:d6:05:ce:ca:9e:f7:a8:98:ea:72:8d:48:
         a1:09:0f:10:92:1f:18:11:a6:f7:30:41:ed:d8:3a:8a:dc:37:
         e3:85:b0:7d:a6:02:16:00:72:41:22:ab:49:17:73:33:b9:c8:
         bb:fd:f3:1a:69:eb:81:43:b1:76:24:56:c0:42:ed:f8:30:e6:
         9d:5c:a5:a0:e9:9b:20:d6:7b:61:15:76:4b:a6:2e:3e:f0:06:
         58:9d:bb:55:72:a9:00:eb:f5:1b:6b:aa:d1:42:74:2c:d0:14:
         e1:6b:d0:f1:b0:99:5d:70:6d:cb:c9:70:4f:5a:95:f4:d8:e1:
         50:f0:34:f3:20:78:e1:41:13:b0:64:7a:94:75:8e:8d:35:2e:
         7b:ca:e7:46:04:64:e2:e0:e7:c3:8a:b0:ab:c5:e0:4a:18:21:
         97:66:fd:25:7b:ac:32:ce:75:a2:72:9b:ce:fc:fc:e3:08:9b:
         bb:56:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:50:42 2026 by rpki-client