Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/665f224c-3d37-35a7-9c76-d9b506123e74.roa
File:                     665f224c-3d37-35a7-9c76-d9b506123e74.roa (raw, json)
Hash identifier:          999TC4HDAz23HWwdZxmB9KHy1Bp5Uj01ruH1/fj6+Nk=
Subject key identifier:   92:1A:8F:73:55:B3:AD:31:92:80:27:F3:1F:80:A6:D1:3D:C1:F8:93
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584DB4A574EA66417083C068B860
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/665f224c-3d37-35a7-9c76-d9b506123e74.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     14352
IP address blocks:        209.209.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:74:ea:66:41:70:83:c0:68:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=e646fe1a-3064-46a0-bcfb-934d8c9c22ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9c:20:2a:75:b5:9b:16:8f:fb:8f:ff:e8:5a:
                    f8:1c:74:f3:57:e6:7c:f9:c0:6c:13:ac:43:a6:bb:
                    b6:1e:8a:b6:11:d0:a8:54:7d:6e:49:b7:9a:bb:ba:
                    c5:9b:23:10:02:95:37:ec:9b:2e:5e:af:d4:6e:00:
                    82:1d:0f:44:72:25:7c:3c:93:f6:f4:3d:22:7f:bc:
                    71:41:be:e4:2c:d5:f4:ce:9b:ff:67:f4:b4:89:95:
                    81:f9:4b:22:3b:b0:b3:8d:80:70:0b:37:e8:96:6e:
                    86:5b:0b:f2:e8:3e:f7:c7:09:e7:8e:a0:e7:3e:51:
                    2f:d2:c9:9a:2d:97:5c:56:07:e7:5d:3d:b5:ae:38:
                    f6:3f:df:e4:c4:51:c1:14:25:3b:50:3f:bd:b9:cb:
                    ba:51:a3:7d:57:97:15:77:1c:a0:7e:5a:6b:13:97:
                    1a:1a:35:1a:50:af:24:8c:cd:ee:18:64:29:c7:fa:
                    a7:01:06:06:d7:de:42:ca:9d:39:f0:7b:08:4a:45:
                    92:28:25:17:2d:fd:4e:16:97:f7:91:26:b4:42:b1:
                    b5:24:34:49:3a:a0:5d:f5:2c:37:7e:8c:47:ba:0e:
                    e3:6c:ce:fd:eb:9e:41:54:f7:ef:c6:5e:84:1f:5b:
                    5f:22:f0:ae:e0:1d:77:e2:16:d6:fc:c3:62:a3:11:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1A:8F:73:55:B3:AD:31:92:80:27:F3:1F:80:A6:D1:3D:C1:F8:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/665f224c-3d37-35a7-9c76-d9b506123e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:f8:5b:9a:e5:a1:50:ab:c7:73:22:f2:c8:e4:3b:a9:c2:
         b2:ac:2f:67:0f:69:18:39:41:64:d8:e9:c5:f4:7c:f8:6f:c5:
         0e:2f:d1:e2:56:75:4a:84:59:78:d2:54:16:52:6b:0c:70:8f:
         26:22:11:23:f2:69:e3:84:62:21:25:7a:5a:7b:de:50:81:60:
         6a:62:7b:6a:c7:e3:03:19:81:44:8b:8c:b4:29:de:74:e5:23:
         88:0f:d7:f0:fb:46:16:ea:94:61:90:50:fc:fc:ec:f9:81:59:
         85:a5:eb:cc:c1:10:45:34:62:b3:af:ec:46:03:0f:25:64:0b:
         da:81:ab:49:ab:fa:fe:98:ea:85:2d:82:eb:66:9a:ce:dd:ad:
         8f:48:f6:a3:67:d8:ed:89:d5:44:c2:36:25:82:a0:50:8f:8d:
         0f:5b:ae:08:aa:cf:ab:61:5d:bc:d6:8b:bd:9b:bd:fe:d2:9a:
         15:8b:25:11:61:74:98:8b:f5:41:aa:e5:5c:8c:fa:73:99:7d:
         0b:8c:cc:1e:80:c7:c8:4d:74:36:60:8b:f2:16:ab:2d:37:fb:
         b3:6f:1f:01:a9:fa:f3:8a:70:42:ee:98:d5:f2:59:d2:a1:4e:
         d7:85:f8:27:92:bf:f2:2e:fc:3b:0b:83:b8:a7:d5:05:c9:b3:
         22:10:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:23:07 2026 by rpki-client