Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa
File:                     9137315f-e06c-3852-8f0f-5067ab5e516a.roa (raw, json)
Hash identifier:          teQKc3Osd4ieMRnZpCiuehO72TncfDSIwblkrNJDLiA=
Subject key identifier:   DC:CC:57:B6:97:F0:5F:62:C3:0E:94:6F:32:51:D8:1B:DA:AF:AB:DA
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F4328584DCF2B1A9A96CCA2BC9282F240
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     174
IP address blocks:        167.253.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:1a:9a:96:cc:a2:bc:92:82:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=3ae0b433-3742-403e-9443-7eab01456cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:c8:ef:b3:36:a2:da:41:d3:94:3c:e6:f2:
                    d1:aa:2b:31:e3:7c:55:84:70:a7:5d:63:3e:8f:e5:
                    7b:7e:b2:ab:6b:dc:19:69:61:3f:6d:dd:89:9e:54:
                    58:da:b4:0e:13:cf:be:8a:25:03:9b:1f:60:d5:3a:
                    ef:7f:4b:52:a1:4f:67:41:7f:a8:3c:7a:f5:24:a2:
                    b5:83:30:a0:29:61:e6:53:19:18:47:87:ad:1e:1e:
                    9d:e6:08:61:da:51:22:f8:3b:6d:e5:71:8b:3d:08:
                    6f:cb:18:33:fa:8a:6c:99:7a:4a:c4:5e:50:5d:13:
                    ec:9c:e8:51:ae:c2:e6:d7:5f:a0:d8:b3:ae:50:2c:
                    28:b2:cd:80:3d:03:1c:0b:07:cb:12:87:a8:74:7f:
                    98:86:0e:16:a6:2e:73:53:ae:cf:77:8c:c7:bf:31:
                    da:7a:f7:8a:aa:76:21:fe:e7:a9:1d:4e:d9:60:14:
                    ca:9e:76:31:4d:62:3a:0f:ff:c9:42:8f:c4:d3:cd:
                    bc:4b:18:e9:e5:c2:5d:1e:2b:69:42:43:e0:4e:b8:
                    0c:2c:f2:dd:bf:7c:54:7e:20:21:d3:76:f5:cc:5c:
                    0b:19:11:08:4c:97:6c:cc:dd:81:6c:4b:3c:e0:9b:
                    78:7f:6a:b5:13:95:cf:8d:ac:61:96:b2:36:20:e2:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CC:57:B6:97:F0:5F:62:C3:0E:94:6F:32:51:D8:1B:DA:AF:AB:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9137315f-e06c-3852-8f0f-5067ab5e516a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ef:26:b1:32:bc:56:2a:ef:51:c9:52:a8:f4:b1:7d:7a:98:
         72:56:82:52:67:69:28:32:97:e4:f2:a9:2f:e8:72:41:0a:4b:
         c4:8f:2b:b1:35:b0:e6:a5:a1:e3:ad:ae:ef:c9:a0:54:a1:75:
         b9:c7:9b:ec:2f:36:70:00:cf:27:48:c3:92:94:ce:1d:05:48:
         40:91:e4:84:34:4b:ff:73:fb:26:e9:84:2e:f1:0a:00:4f:04:
         64:a1:5a:bf:bc:0f:ee:b8:7d:49:c7:30:ab:e0:b0:13:de:e4:
         e3:48:18:57:28:a5:f2:9b:1e:be:81:52:93:6d:5d:49:b9:3a:
         80:c2:81:41:e7:b9:ae:c1:64:35:59:1a:e2:87:b3:f8:b2:75:
         90:f3:c9:14:d0:34:42:7d:bc:20:b3:f5:c6:a7:a3:91:ed:eb:
         05:75:2d:64:a0:ee:96:17:3c:91:0f:f8:3d:33:72:54:8f:c8:
         3c:1c:8b:1f:d9:0e:9a:10:1c:fa:93:e9:2e:16:0e:52:7e:ba:
         8c:0b:01:b0:e7:d6:c4:89:04:a9:4c:70:05:ae:1e:8f:1d:26:
         cc:44:77:cd:7b:b9:7d:01:91:be:81:88:37:e2:1b:d3:8f:d1:
         cb:4f:92:d1:5e:21:e3:10:4c:d9:5e:96:ae:d8:05:bb:8e:7a:
         1c:0e:04:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:13 2026 by rpki-client