Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9669435f-4845-342b-9856-e288866e77cb.roa
File:                     9669435f-4845-342b-9856-e288866e77cb.roa (raw, json)
Hash identifier:          1nlMIvKx/h2bjieVFDnolRsSnG8x/6jmBYDXi7yC4Vs=
Subject key identifier:   0D:30:DD:6D:60:C8:00:C1:73:68:37:B3:CD:A3:63:32:39:CB:35:76
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F4328584DC400612470E75F32E31E72C0
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9669435f-4845-342b-9856-e288866e77cb.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     2914
IP address blocks:        167.253.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:61:24:70:e7:5f:32:e3:1e:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=47eca940-993f-4036-ba12-5c48baeeb6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:41:4f:30:40:18:7c:9e:65:4f:41:d0:0f:
                    90:da:59:0a:03:bc:79:8e:a4:31:bf:e2:41:14:c9:
                    08:a5:8a:77:b8:2a:5c:30:2f:e6:1a:4f:9f:44:bc:
                    2f:52:d3:57:06:05:8c:68:c1:a4:90:45:d4:eb:2e:
                    f2:17:fe:c7:12:05:66:3b:76:23:7f:ab:6c:ab:d1:
                    1b:c3:e0:6f:6b:ba:67:4b:c0:1d:51:5a:c1:f4:c6:
                    82:09:03:9f:01:72:96:e4:6c:3d:9c:4a:0b:02:85:
                    47:b8:f8:0e:63:2c:ff:18:4f:7d:92:5c:34:bd:15:
                    a9:82:89:9b:39:e5:97:d7:db:dd:d3:cf:50:fb:fb:
                    2e:1b:fc:54:89:d2:e7:7c:cb:ad:e9:04:13:f9:7d:
                    aa:cd:e2:b6:25:e1:a9:64:9a:d9:56:4f:5a:fd:52:
                    a8:c8:30:d9:58:d5:1e:de:9f:7d:7d:c8:f0:08:59:
                    a7:64:85:27:46:af:a4:92:c0:cd:49:dc:30:fa:24:
                    79:ff:c3:e7:11:61:8e:99:b6:cf:bf:09:df:52:bf:
                    d1:a6:d3:ed:ff:b4:1e:2d:7b:a9:61:ae:53:32:b3:
                    43:17:81:a3:12:3c:1f:9e:13:78:48:4a:84:65:c0:
                    0c:c8:a6:ca:72:63:e9:8c:93:aa:c5:22:98:d2:c8:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:30:DD:6D:60:C8:00:C1:73:68:37:B3:CD:A3:63:32:39:CB:35:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/9669435f-4845-342b-9856-e288866e77cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:69:a3:c9:f8:f8:34:b7:4a:51:49:b0:4c:7b:7b:92:46:
         78:d2:8b:57:29:15:74:85:87:06:87:8a:c8:9f:24:c9:27:25:
         00:2c:03:db:14:b6:fc:50:e5:76:e0:1b:25:1b:48:48:e4:47:
         88:d4:4e:04:d8:31:fa:fc:da:20:69:77:50:bd:18:de:19:e9:
         69:82:6a:bf:8b:0d:13:64:eb:38:a4:88:92:9f:3b:b8:15:44:
         d8:28:aa:7c:3e:e5:28:d5:fa:6e:12:6c:29:88:05:d6:f5:7a:
         86:77:c7:58:ec:59:6b:84:6a:55:f5:cd:11:21:26:1d:a5:27:
         19:08:ab:6f:35:f4:c8:97:0d:01:eb:2e:32:6a:df:a1:18:a7:
         40:90:8b:26:14:03:4d:f3:cf:31:39:2f:51:f7:cd:d4:f3:4e:
         d8:8e:90:3f:1b:83:ea:1b:e4:56:67:b3:14:03:bc:fc:22:e8:
         6f:64:c6:68:8b:c0:72:ae:84:09:35:47:5f:ad:b6:58:79:1c:
         d1:49:39:66:47:41:51:e4:db:9f:7c:4f:2d:9b:5c:26:b1:9e:
         fc:23:6d:7e:b7:59:3e:e5:e2:2a:98:e8:96:aa:75:ff:3f:4a:
         69:d9:e6:25:16:4f:cc:70:c8:50:73:39:cf:eb:67:13:69:06:
         57:a9:58:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:05:05 2026 by rpki-client