Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa
File:                     f1d32fb4-228c-37d2-9751-57a3f0746694.roa (raw, json)
Hash identifier:          iCAlrr5S0nuPjaJf6X/fJND/Bo4aSc6y7SFcmCxKHjc=
Subject key identifier:   36:E5:BE:7E:E6:52:5B:2F:F2:2C:CA:5E:D8:64:56:A9:B0:1E:95:DC
Certificate issuer:       /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial:       010D0C9F4328584DC83048B3070ECA623A72BBA0
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        209.114.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:48:b3:07:0e:ca:62:3a:72:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=f4513c99-2cc1-4a8a-9695-7c02b9262c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8a:3e:31:e7:1b:1f:a3:91:74:1b:12:ad:c5:
                    9a:31:ed:e0:f9:2d:85:22:59:24:b6:a7:41:60:89:
                    11:b0:0d:21:dc:37:f8:ad:cf:ec:4f:11:fc:fa:63:
                    84:c4:2f:7a:45:41:7e:48:cb:4c:82:d9:36:60:f8:
                    95:8f:7b:d0:ed:fe:17:32:66:63:dd:e1:31:ec:3b:
                    c5:01:93:b4:28:d9:f8:93:82:04:31:bb:6f:8a:3b:
                    3f:3f:1b:db:af:b9:a8:66:81:89:d3:c8:b6:73:6c:
                    13:02:76:d3:fc:d4:65:70:6d:c5:aa:a2:e9:18:9f:
                    2d:b5:7f:34:ca:2a:b3:68:3a:32:d4:82:3a:44:f3:
                    1b:cf:66:71:a1:54:65:78:87:20:4c:14:96:f1:26:
                    7a:a1:b9:92:2b:a3:71:c3:d5:dc:e2:51:ca:0f:17:
                    f7:0a:9c:9d:8c:e3:d0:a1:55:fc:28:f4:b6:70:fb:
                    64:78:92:6c:2b:1b:7a:b1:67:83:05:c4:2d:0c:f2:
                    ac:c5:ca:c1:b3:28:5e:ad:59:30:53:b5:dd:50:a4:
                    44:aa:c9:45:9a:0b:c0:da:55:cb:76:6a:27:ca:a9:
                    35:35:f4:84:9d:18:e0:ce:ed:17:cb:13:9c:b1:7d:
                    0e:af:ff:09:b8:34:08:69:96:53:22:0a:19:f7:8c:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E5:BE:7E:E6:52:5B:2F:F2:2C:CA:5E:D8:64:56:A9:B0:1E:95:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl

            X509v3 Authority Key Identifier:
                keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:b3:0a:39:44:00:21:d9:96:3c:51:09:b5:88:72:a1:74:ba:
         61:2e:21:2d:a8:de:40:ca:a7:f9:ac:52:86:36:c0:e2:c5:ad:
         8e:ba:db:a7:3a:ae:b2:bc:1a:97:b8:51:78:bc:6e:94:25:12:
         7a:9d:cf:ef:1b:87:3c:3b:81:a4:fe:f5:c6:38:64:cc:4f:15:
         6d:1c:e3:cb:c4:71:91:e1:d8:fc:c9:74:fa:7f:bd:23:a4:43:
         1c:49:da:45:37:68:bb:da:b2:bf:28:61:6f:55:fd:52:db:9e:
         48:c7:bd:ae:bc:f8:06:fb:f8:2b:1f:c3:f5:78:4b:d8:ed:1a:
         42:80:84:25:8d:d8:e2:85:a5:31:6d:ed:f7:1b:96:7c:b6:0c:
         ae:0b:93:a7:40:bb:0e:f9:fb:53:fd:64:a0:aa:dd:06:d1:78:
         70:0e:18:c6:e8:d5:a3:69:51:9c:00:fc:7b:1e:14:7a:56:69:
         24:61:5e:16:70:23:64:43:58:7f:fb:47:86:8e:61:5b:f3:26:
         de:8f:6a:30:11:c6:e2:bd:56:9a:c6:8f:f5:61:f1:eb:87:6f:
         18:8e:bc:5c:2b:07:e5:2a:9e:69:bf:60:c4:24:0a:6c:a6:a6:
         2a:f3:28:88:63:b0:2e:e1:31:65:dd:a9:f6:5a:4a:c5:e8:6f:
         17:6d:d8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:59 2026 by rpki-client