Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/2b353968-5efa-351e-8488-659bf2f14591.roa
File:                     2b353968-5efa-351e-8488-659bf2f14591.roa (raw, json)
Hash identifier:          oq+1ZJyxEs2MH2PoYDduKVQgBvd3n/OXfBTL7SbSd9U=
Subject key identifier:   4E:18:95:FC:B2:7C:B4:60:BB:51:E5:FB:F6:B2:07:16:73:C5:AC:BA
Certificate issuer:       /CN=377e4354-e598-4193-9abf-39ee1b89fc13
Certificate serial:       010D0C9F4328584B6A229E2FD2188625D3C0FA00
Authority key identifier: 2C:9A:B7:B9:A7:A5:D4:D5:20:EF:04:E9:EE:27:3E:1C:38:EC:DC:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/2b353968-5efa-351e-8488-659bf2f14591.roa
Signing time:             Sat 04 Oct 2025 22:53:08 +0000
ROA not before:           Sat 04 Oct 2025 22:53:08 +0000
ROA not after:            Fri 02 Jan 2026 23:53:08 +0000
asID:                     400758
IP address blocks:        209.205.226.0/24 maxlen: 24
                          209.205.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/377e4354-e598-4193-9abf-39ee1b89fc13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/377e4354-e598-4193-9abf-39ee1b89fc13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:22:9e:2f:d2:18:86:25:d3:c0:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377e4354-e598-4193-9abf-39ee1b89fc13
        Validity
            Not Before: Oct  4 22:53:08 2025 GMT
            Not After : Jan  2 23:53:08 2026 GMT
        Subject: CN=860df161-eb69-4cd2-9201-eeb74889b616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b9:ab:da:c6:ad:c4:8a:4d:5e:9a:2f:f0:b2:
                    a0:43:66:48:68:b3:69:ad:52:ac:7b:88:48:a2:7d:
                    df:10:22:4e:ae:35:43:95:2c:45:81:52:3c:18:b3:
                    1f:51:95:0e:6e:38:01:26:94:27:53:99:5a:ac:df:
                    6d:f8:61:e3:ad:2b:08:98:68:ac:8a:27:e2:a6:33:
                    2f:06:dc:a3:34:c9:d6:8a:f2:c7:87:0b:2e:33:ef:
                    3c:cf:f5:3b:45:1d:80:68:d5:ec:9f:1e:80:d2:0b:
                    12:8f:90:82:2c:b6:3c:7f:3e:c1:95:82:33:11:33:
                    fd:71:f8:30:d8:8f:fd:24:21:14:38:08:c5:1e:91:
                    07:1d:a8:7d:c3:72:f9:2c:82:2b:17:06:8f:d7:ef:
                    f5:18:69:c3:f4:37:3c:56:fa:78:e8:7a:94:45:da:
                    7d:7c:c8:c1:6b:e1:a2:79:04:77:e1:a5:70:34:b4:
                    96:4b:1c:d0:03:82:de:a7:64:05:43:d1:ad:e7:10:
                    30:81:7f:40:d3:72:5a:f3:59:d2:07:e9:05:f4:54:
                    2b:5c:7f:62:4e:bc:a3:16:d4:b2:93:16:9b:81:8d:
                    1c:ee:9f:9d:e6:8e:73:59:6f:49:61:a6:65:26:8c:
                    96:ab:d3:83:3d:e1:a8:c9:26:6b:42:87:22:41:d8:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:18:95:FC:B2:7C:B4:60:BB:51:E5:FB:F6:B2:07:16:73:C5:AC:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/2b353968-5efa-351e-8488-659bf2f14591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13/377e4354-e598-4193-9abf-39ee1b89fc13.crl

            X509v3 Authority Key Identifier:
                keyid:2C:9A:B7:B9:A7:A5:D4:D5:20:EF:04:E9:EE:27:3E:1C:38:EC:DC:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/377e4354-e598-4193-9abf-39ee1b89fc13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.205.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:24:74:5a:3b:96:a4:0e:e6:07:57:5e:30:2d:7e:36:90:e5:
         67:38:38:18:44:dd:2f:12:40:4d:b8:14:a4:81:f7:73:38:e2:
         c5:79:3c:65:c3:2d:b1:69:ac:d6:ce:e5:e0:ca:87:e7:53:93:
         8c:d5:60:c8:14:aa:9f:0f:b5:aa:d5:21:9e:76:36:3f:e8:01:
         f7:cc:94:d5:ba:6c:ec:bc:1b:ba:0a:fb:24:e7:2e:2b:7c:2c:
         48:e1:64:61:d9:47:74:5d:39:9d:0b:7e:ba:4c:86:df:06:ce:
         66:db:35:a2:7f:5f:b1:1f:9a:53:88:e7:8b:ed:6f:d6:75:fc:
         8c:ac:f8:c3:7b:a6:fb:ab:ed:82:e5:63:a5:68:cc:0d:be:91:
         f7:af:9e:03:72:c5:d2:0a:e0:41:8f:cc:c0:62:47:d2:9b:ed:
         53:8b:fa:14:5a:34:ac:58:4c:4f:de:a7:2b:5d:c6:52:ee:32:
         96:da:ac:7e:e9:18:30:4c:9c:ce:70:f7:c8:01:6f:24:ed:c0:
         48:24:f9:a4:1d:62:f6:14:a2:8f:21:d6:c7:9e:df:c7:03:bd:
         13:94:f5:88:ef:40:d9:a5:b6:63:c9:42:43:41:f0:34:39:54:
         48:f2:e0:04:0f:5a:1b:29:02:55:d8:50:a3:f7:78:57:29:9c:
         9a:b6:4f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:57 2025 by rpki-client