Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/dc45fae9-5ad3-321c-8049-0bf016f07538.roa
File:                     dc45fae9-5ad3-321c-8049-0bf016f07538.roa (raw, json)
Hash identifier:          9tek7Tc8G0WI0fuQCjyiUTk8nKFQc306RWpZN8v2+SA=
Subject key identifier:   CD:4C:FB:DE:9B:9B:93:94:BE:66:90:DE:0E:00:E8:6D:69:7D:1E:E3
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F4328584F31B7BC8B27C7852CF4DEB700
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/dc45fae9-5ad3-321c-8049-0bf016f07538.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     394625
IP address blocks:        185.240.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:bc:8b:27:c7:85:2c:f4:de:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=1bad4964-723c-4887-9509-61b15c4f16e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5f:e0:71:61:f5:b0:8a:b4:75:f7:72:95:62:
                    ae:4a:8b:46:ca:19:fe:d3:7e:4c:6e:36:40:4b:ee:
                    7a:20:19:d8:c1:a0:89:70:6c:25:43:00:df:e8:ca:
                    a9:c1:5f:61:fa:2a:2e:03:fd:6f:7d:28:83:24:5c:
                    a0:d7:97:1b:33:57:7a:c9:92:84:af:33:c4:b4:7c:
                    30:5a:4f:c2:3d:2b:8e:f1:db:06:8d:7b:f6:93:26:
                    16:00:86:55:e7:7d:02:93:6b:5d:dd:e2:d7:e6:73:
                    7b:ef:2e:45:5e:06:bc:a1:cb:31:be:cf:11:8b:5b:
                    37:52:9f:ed:b1:2f:02:62:2d:6e:13:f1:8e:fb:01:
                    89:bc:28:f4:4d:99:29:1c:61:15:c8:dd:6f:66:5b:
                    5d:b0:cc:c3:dd:33:c4:a4:66:1a:d3:c0:d3:37:bc:
                    15:8f:bf:01:ca:5c:33:0e:12:75:11:cb:66:4e:65:
                    9a:ab:ab:8c:de:0a:c5:77:ce:bc:fd:38:a6:c9:07:
                    49:33:5b:62:7f:5a:3a:d3:a9:18:db:c3:02:38:3a:
                    1f:a9:91:f2:c5:03:01:d3:91:46:ad:d9:87:b5:81:
                    c0:a8:c3:1d:cc:bc:28:c9:94:2f:1f:78:d1:5f:4f:
                    d9:b4:fe:b4:46:d0:0d:15:9c:b5:6a:c5:ce:a4:c9:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4C:FB:DE:9B:9B:93:94:BE:66:90:DE:0E:00:E8:6D:69:7D:1E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/dc45fae9-5ad3-321c-8049-0bf016f07538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:af:92:e2:37:48:2d:f2:87:a5:ff:54:91:da:24:a4:4b:5a:
         78:73:0e:47:4d:10:b4:30:5b:0b:5e:c3:1b:5d:ec:14:e3:e2:
         19:eb:1d:75:b8:c5:76:c2:38:dc:94:2f:6a:14:c1:82:a7:bc:
         09:c6:f8:7a:e2:da:51:7f:59:0e:b5:10:0e:8f:54:02:07:f9:
         12:4f:4a:76:9d:cd:8f:e7:1e:2c:44:21:ee:95:5e:f7:14:d7:
         e6:00:3e:71:f2:ab:bb:33:45:4e:b4:73:bc:a9:18:b2:7b:71:
         b9:fe:1c:c0:0e:bd:fb:35:d2:d4:62:83:04:18:46:62:ac:2c:
         f2:2b:23:d0:42:cb:4b:d2:5c:07:33:70:c1:42:ec:41:bf:a2:
         4d:2c:ab:c6:cc:97:bf:08:79:40:0f:5b:d4:1e:8a:48:54:ce:
         74:8e:b9:4f:67:1c:1b:1b:ff:57:8a:5e:bb:fe:24:45:7b:44:
         eb:1a:e0:19:15:27:e3:40:4a:f9:2f:51:45:5f:c6:64:02:6e:
         53:4c:32:bc:69:51:bb:cf:fc:c1:a0:db:f4:0e:32:60:1b:ab:
         3e:78:dd:2d:12:ec:25:fc:02:3e:a9:6d:04:93:38:90:48:66:
         60:27:bc:87:0b:e7:cf:2a:01:df:6f:85:27:67:f9:13:e4:0e:
         60:46:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 05:29:04 2026 by rpki-client