Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d34d5564-b96a-3c3d-a395-e46ba3b0872d.roa
File:                     d34d5564-b96a-3c3d-a395-e46ba3b0872d.roa (raw, json)
Hash identifier:          g+UAWl8cUPWTVx29tKkmYNMgcfvSXtZ/obwIQM1rnb4=
Subject key identifier:   F9:CC:A7:2C:0F:CC:97:8A:16:43:B3:90:1C:B8:C8:14:B9:7F:AF:09
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584D300A4608C3DD404DA8D3C800
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d34d5564-b96a-3c3d-a395-e46ba3b0872d.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     2914
IP address blocks:        204.237.144.0/22 maxlen: 24
                          204.237.148.0/22 maxlen: 24
                          204.237.152.0/22 maxlen: 24
                          204.237.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:46:08:c3:dd:40:4d:a8:d3:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=3b91e37e-4bce-4e9a-90ac-8b67162a9dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:d0:32:4b:02:e7:99:04:89:69:96:25:90:
                    6d:38:49:f8:15:2c:4f:24:6e:af:29:55:99:1b:98:
                    dc:b9:e0:3f:9e:b4:70:ea:81:67:cc:b5:1b:7c:17:
                    ed:cc:07:5f:a6:ef:4d:10:c5:5e:73:83:51:56:0e:
                    cd:58:23:2c:f4:74:28:a8:12:be:73:8c:a2:fb:6a:
                    1c:ae:17:3b:9f:e5:67:fe:4a:89:63:a0:9f:f0:b4:
                    1d:99:7b:c2:dc:68:2d:05:df:d9:06:81:5b:20:c9:
                    28:85:ae:4b:d1:51:7b:3d:bc:bc:36:c1:2e:1e:ab:
                    0d:5a:22:2a:9b:cf:a6:9a:10:33:6c:dd:a3:0a:9f:
                    43:16:0c:10:d6:67:e7:ea:8f:d2:c4:0b:40:11:26:
                    f7:42:f3:5f:a4:88:7b:48:f7:e1:24:6e:dd:a4:a3:
                    ba:61:a4:37:4d:2e:83:66:b1:4c:84:98:b0:16:55:
                    3e:59:3a:c4:62:82:df:c7:8d:ce:db:fb:ca:d6:38:
                    b5:fd:39:24:4b:0d:2f:90:a4:c2:44:c5:17:1e:37:
                    95:be:b1:5d:cb:91:57:56:9b:b1:f7:4d:54:f7:da:
                    2c:22:ad:aa:84:44:0e:8b:09:ec:cf:6a:2b:99:c9:
                    ab:b7:b9:bc:a9:ec:f6:b2:b7:a6:f6:61:9b:3c:42:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CC:A7:2C:0F:CC:97:8A:16:43:B3:90:1C:B8:C8:14:B9:7F:AF:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d34d5564-b96a-3c3d-a395-e46ba3b0872d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.237.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:77:a3:36:bf:16:ac:ed:08:ce:58:fb:0a:05:ea:f2:da:
         14:57:dd:4a:77:71:c7:49:36:a1:d4:54:0c:9b:6d:49:e8:2f:
         01:55:16:a3:01:82:b0:ff:b1:c7:42:c0:0a:4d:46:14:e5:b4:
         a2:b5:e6:69:0a:e0:1f:d7:f3:4e:4b:e3:4a:bb:a9:df:47:22:
         02:0c:90:5d:f2:c3:ce:71:11:e9:f1:c6:4e:da:6e:86:49:fa:
         6a:6f:e9:4c:1c:50:31:3b:7d:bc:c1:b6:43:b9:53:2c:68:f8:
         21:ff:15:63:14:a4:30:48:f9:41:e5:b8:12:d5:4f:cd:86:90:
         5f:eb:1c:51:c8:e5:ad:51:9d:44:20:a6:e9:dd:93:23:6d:21:
         0c:ce:fe:28:50:7e:3e:a7:46:af:f1:04:71:a0:fe:2c:c7:ec:
         69:0b:9c:af:b6:2d:10:2e:98:f8:d5:52:3f:d3:14:c7:89:34:
         68:e5:cf:5d:7a:c9:98:b4:9f:90:82:4d:e1:ff:aa:f1:42:9d:
         33:9f:24:63:17:51:d5:43:57:db:6f:84:d9:b2:08:0b:7b:8d:
         46:b3:c0:ea:90:90:04:39:cd:fd:b1:8d:a9:f6:14:d4:6c:31:
         fe:e8:a1:96:2b:77:42:36:38:aa:6e:28:d5:7e:4d:30:d8:da:
         6b:ec:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:53 2026 by rpki-client