Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/9856a032-d7f7-3c87-ae49-250107114c16.roa
File:                     9856a032-d7f7-3c87-ae49-250107114c16.roa (raw, json)
Hash identifier:          1MB6AuMXJ3al9n37wizx64tk5r+qM+71kTSPN2+y5rU=
Subject key identifier:   C6:A6:CD:56:DC:70:F9:3A:33:B4:01:F9:A0:99:92:44:85:2E:93:87
Certificate issuer:       /CN=ee24f36d-faae-4b96-97ad-782fa99ddc29
Certificate serial:       010D0C9F4328584DBA3B1BB8FD40604904CA7F20
Authority key identifier: 1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/9856a032-d7f7-3c87-ae49-250107114c16.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     36032
IP address blocks:        168.161.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:1b:b8:fd:40:60:49:04:ca:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee24f36d-faae-4b96-97ad-782fa99ddc29
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=f4cf860d-4eeb-4c93-8e73-3dc148bcbcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:7c:a9:07:ff:5f:29:40:a5:76:0e:3f:de:
                    28:15:07:cc:41:9e:e9:47:36:27:2a:c7:7e:93:a3:
                    d1:60:02:42:65:23:6c:f1:1c:53:59:ad:ce:ff:33:
                    57:b3:ad:ce:d0:15:09:0c:7c:35:85:0d:22:d6:a3:
                    95:22:dd:eb:a9:22:36:66:06:89:03:04:6b:ac:60:
                    21:1f:31:f2:f7:ea:26:4b:d1:cc:5a:30:2e:95:b8:
                    67:66:87:44:3b:eb:d2:07:5e:ec:9c:05:32:7e:31:
                    25:f7:77:69:f0:f7:3c:e8:f0:6a:99:a4:4a:47:c7:
                    f6:48:45:cf:8c:21:be:84:07:dd:a6:59:61:1b:0a:
                    cc:6a:44:0d:46:4f:a5:f2:a2:fc:2f:c5:2d:4f:21:
                    ad:77:a9:84:51:b8:6e:1b:b4:91:ef:4a:34:c1:31:
                    c0:f3:51:ae:ca:d9:1a:c8:6d:f8:1c:42:df:5a:68:
                    b3:b1:dc:ea:ac:e9:67:bc:a9:75:98:ad:80:64:4d:
                    9e:6d:2b:53:b4:a2:12:8a:c9:2f:9d:6c:ef:71:5a:
                    2e:36:d6:80:cd:20:5f:ae:e2:d9:94:4b:be:83:37:
                    c0:17:86:7f:9a:68:74:52:04:3f:e6:dc:40:2d:13:
                    cc:57:d8:3d:bd:60:91:0a:58:6a:06:e8:db:8b:2c:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A6:CD:56:DC:70:F9:3A:33:B4:01:F9:A0:99:92:44:85:2E:93:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/9856a032-d7f7-3c87-ae49-250107114c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.crl

            X509v3 Authority Key Identifier:
                keyid:1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.161.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d5:75:88:83:ba:90:5e:28:e4:60:d9:48:04:f8:cf:25:e6:
         55:87:db:b0:b0:4f:96:cc:5c:0a:92:c5:6e:25:4e:43:64:3e:
         24:1d:45:6a:34:99:6d:ab:55:f4:c5:88:62:2b:72:84:07:56:
         0c:2f:62:02:e9:75:16:26:84:22:ab:81:5f:7e:09:96:bd:95:
         a0:40:24:d1:03:9d:40:68:8d:47:6a:37:97:e0:b9:6e:87:64:
         a8:ec:34:15:84:59:32:3d:f3:8d:46:4b:d9:0b:93:bd:d0:90:
         31:84:ee:39:c1:d3:49:79:fc:65:c4:f4:4f:fe:13:80:cc:c8:
         74:08:39:6f:b3:54:54:62:dc:38:6c:85:11:cd:83:16:15:54:
         10:cd:c2:3a:c6:f6:a9:09:d7:ad:61:ec:31:c2:50:96:3b:d5:
         75:93:b2:8f:94:b0:1e:fa:13:44:83:0f:ac:8d:4e:a4:1d:9b:
         cc:ab:2b:da:2b:a4:99:c5:d3:99:7e:0b:d2:40:3c:92:65:bd:
         ac:2a:31:b1:80:1c:cc:27:b4:3c:16:27:0e:a9:10:c4:1e:c9:
         59:42:3c:fc:95:68:66:0d:37:d7:e4:32:b4:65:34:06:96:34:
         29:a5:73:63:d3:20:de:8d:4e:d0:88:1a:01:41:c2:1c:8b:6a:
         28:06:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:14:28 2026 by rpki-client