Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/2383a987-7584-3a26-891c-3c54bc00eebe.roa
File:                     2383a987-7584-3a26-891c-3c54bc00eebe.roa (raw, json)
Hash identifier:          2jwIlkULow6VWMBSZj7N62wF/8bNqQarCTvIehDL5Ac=
Subject key identifier:   F0:ED:D2:76:71:14:62:BB:30:B5:FD:28:68:95:F0:97:DA:38:D5:A6
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584DC6CB017A7354F6124AF23780
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/2383a987-7584-3a26-891c-3c54bc00eebe.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     30337
IP address blocks:        170.194.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:01:7a:73:54:f6:12:4a:f2:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=4e3736ec-fd3b-43a9-88a1-2d6a38486d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:78:1f:f7:eb:8e:6c:fc:2b:15:95:c6:25:
                    a4:fa:05:46:f5:71:a5:88:f9:e3:04:c6:57:24:1d:
                    5f:c6:18:f4:d5:77:3b:fb:e3:b3:ec:ce:da:66:9f:
                    c9:a2:da:07:ad:a5:99:0e:42:dd:0c:8f:a4:d8:0a:
                    ba:c7:68:03:a2:12:76:f8:9c:e9:00:b9:95:bd:78:
                    85:24:bd:1d:4b:d7:b8:45:90:43:7d:df:9a:86:05:
                    cb:39:68:5b:f6:b9:56:0d:de:f1:69:74:be:77:c1:
                    a6:2e:8d:00:e5:21:61:00:4b:a8:00:50:7e:ab:33:
                    4d:b4:f6:dd:e2:ad:ba:10:28:68:57:75:ea:50:4f:
                    c8:1e:68:d0:c2:6f:02:f5:d9:0f:16:fa:5a:c4:42:
                    3d:ee:a1:a6:74:c0:82:d5:0d:3f:0b:6d:7f:55:49:
                    33:b8:6d:a5:b9:d9:ed:f9:5a:ff:2f:2c:84:76:34:
                    02:0f:f4:12:26:42:8d:a3:f7:06:04:cb:ba:88:5c:
                    be:2f:2f:ef:76:18:6d:0d:11:2a:27:03:5d:f8:e5:
                    a0:ce:5f:55:21:f4:73:06:87:24:48:ea:12:dd:1b:
                    9a:17:29:4f:c9:1b:42:f0:2f:f6:6d:ff:7a:3b:76:
                    29:85:cd:d3:26:da:1a:01:08:f8:d8:fa:f5:73:c2:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:ED:D2:76:71:14:62:BB:30:B5:FD:28:68:95:F0:97:DA:38:D5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/2383a987-7584-3a26-891c-3c54bc00eebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d5:66:84:81:ca:b9:f4:e0:6a:71:6c:87:9c:23:ad:46:40:
         69:68:1c:fc:7d:f7:16:7f:18:da:d1:3e:8b:c4:22:c4:b9:5d:
         77:bf:1d:5c:65:b3:1a:7d:b9:14:31:d3:1f:29:9b:af:68:92:
         57:6a:04:cf:0d:cd:09:82:bc:0d:b8:ba:9e:f5:33:98:d1:82:
         0e:4c:21:aa:ef:0f:fd:bd:b4:35:28:e6:4b:d4:8b:71:21:75:
         da:89:a7:3b:74:c3:e3:f3:37:c0:8e:0e:6c:bc:11:a8:4a:7a:
         ce:d7:61:26:12:f9:2e:e3:c6:f5:4a:6e:7e:ef:5d:25:c7:f6:
         9e:69:d3:5e:62:66:03:05:00:07:26:2b:ed:8a:12:b8:0b:12:
         18:2c:08:ec:34:0b:86:ef:15:71:b3:59:51:ab:ff:e0:03:d1:
         ed:22:d7:f6:26:3c:b0:81:f5:c0:b5:32:6e:57:6f:90:e5:45:
         e9:a3:48:f1:33:75:0c:51:18:ae:44:bd:2d:fd:ea:82:3e:e6:
         ab:a1:56:ac:77:a5:d6:28:83:db:f6:b4:a8:1a:b0:8c:1e:34:
         e7:15:bd:8a:d1:5a:65:71:89:bf:5a:4f:06:8d:a3:87:db:29:
         13:6a:d0:13:06:01:51:03:02:b4:a0:06:5c:10:fb:42:e2:13:
         5d:ac:3c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:25 2026 by rpki-client