Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9bb2fff3-21e9-37e2-a45f-c078f363340e.roa
File:                     9bb2fff3-21e9-37e2-a45f-c078f363340e.roa (raw, json)
Hash identifier:          VEjbHU79glkR4nLDgrji+KSVrr8G7sGr1yl9sw4/4WU=
Subject key identifier:   03:80:08:3E:41:6F:65:48:39:E0:8E:E3:33:65:61:6B:43:7C:FE:08
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E5084B479997CE231CD9A7F80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9bb2fff3-21e9-37e2-a45f-c078f363340e.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     3257
IP address blocks:        173.44.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b4:79:99:7c:e2:31:cd:9a:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=9d471ca4-dea2-4ead-8209-07fefce5f235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:58:06:c9:5e:58:20:60:f8:9c:4f:69:ac:
                    ce:c8:13:d8:55:16:cf:bb:d3:7d:4a:fd:9b:01:59:
                    8e:1e:d2:c6:21:77:b4:e8:69:be:56:e3:ba:4e:66:
                    80:86:31:7b:a9:e5:25:8b:ed:63:e1:b2:78:ba:be:
                    c2:77:69:95:4c:db:52:05:a0:eb:2b:aa:e7:35:18:
                    6e:db:6c:8f:76:ff:41:64:2a:e7:36:f9:62:c7:1d:
                    67:95:58:2a:2e:ad:a6:d6:2f:c3:77:7f:ac:95:79:
                    78:69:2b:ab:75:98:f4:08:14:bd:5d:38:22:c4:3e:
                    bb:a3:5b:56:e8:66:41:5d:c6:77:18:25:c8:3e:2e:
                    77:42:4a:73:1d:7d:dd:fb:54:e9:66:26:8c:59:8a:
                    1d:df:1d:6d:99:77:14:5c:b5:4b:1b:f6:c6:a4:94:
                    86:e2:be:a6:53:80:bc:f9:3c:14:1e:ff:5a:5b:6f:
                    a5:03:27:24:ff:59:f3:1d:cb:f7:bb:46:25:16:91:
                    8b:ff:f4:ee:67:89:ae:8f:84:2c:99:9b:c9:8c:5d:
                    4b:ae:46:2e:3e:37:89:6d:ae:3b:5d:c4:57:b1:8e:
                    89:5c:a6:43:12:8f:8c:e1:67:a6:18:dd:89:de:1d:
                    f0:f3:64:91:23:ac:d8:df:a9:12:4e:2d:ba:54:09:
                    1c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:80:08:3E:41:6F:65:48:39:E0:8E:E3:33:65:61:6B:43:7C:FE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9bb2fff3-21e9-37e2-a45f-c078f363340e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:60:9a:5a:f1:69:db:20:3e:29:5a:5f:49:2a:33:f1:14:89:
         aa:1a:f4:08:5b:ab:fc:e6:3c:6d:e6:15:e8:38:d0:37:d6:07:
         7a:09:ee:cc:1f:d6:19:76:cb:9d:7b:40:b4:8c:e9:c1:77:6e:
         b5:91:e6:2d:6d:67:68:67:23:4d:9a:d7:93:e0:fb:07:42:10:
         dd:97:e5:42:c1:26:5c:42:f2:e9:c7:5c:ea:eb:dd:4e:6b:bb:
         ad:d1:67:1c:a9:89:05:99:a8:c8:db:c0:a5:4e:19:1e:58:ab:
         9e:e1:36:e6:25:be:ec:69:66:9e:92:4d:7a:69:6a:2c:e9:b6:
         b3:2b:6f:c6:53:ac:76:dc:c3:b4:b9:c3:75:cc:7b:0f:2c:05:
         57:fe:2f:39:71:4b:a5:77:e9:59:71:2f:43:63:bd:ec:aa:4f:
         2e:6e:e6:95:de:7b:04:1c:7e:14:70:1f:1e:24:5e:ff:2a:3b:
         e6:2e:4d:34:8b:f2:16:7e:c9:60:3f:8b:00:ff:28:76:5a:fc:
         ac:58:97:a8:22:28:4e:f9:e4:8b:03:0e:47:dd:43:3a:c9:a6:
         d5:90:03:e5:4c:29:9d:23:07:2f:3b:92:f1:a2:c1:b7:d6:b8:
         88:bf:e2:88:95:ab:25:6c:e7:4c:41:c6:07:1a:98:e4:1d:3b:
         31:a2:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:50:42 2026 by rpki-client