Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83/774e4fa3-4c51-3983-ac52-d2663f34d684.roa
File:                     774e4fa3-4c51-3983-ac52-d2663f34d684.roa (raw, json)
Hash identifier:          7LUiveHVEiA4LM4tQZpaTpNHedlWF/uqOnKG+2daqq8=
Subject key identifier:   C2:A2:33:71:7E:62:42:7F:B0:4E:A9:2E:67:B7:11:6F:C6:40:4A:D8
Certificate issuer:       /CN=2c9b4e4b-748b-4793-9d99-06f7509dca83
Certificate serial:       010D0C9F4328584D434342FEEEAEF28B7EB74540
Authority key identifier: 06:9D:85:BB:F0:68:12:AC:86:38:EC:AA:21:FF:B9:7B:03:D2:59:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83/774e4fa3-4c51-3983-ac52-d2663f34d684.roa
Signing time:             Mon 23 Mar 2026 10:16:15 +0000
ROA not before:           Mon 23 Mar 2026 10:16:15 +0000
ROA not after:            Sun 21 Jun 2026 10:16:15 +0000
asID:                     14618
IP address blocks:        162.252.234.0/24 maxlen: 24
                          162.252.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83/2c9b4e4b-748b-4793-9d99-06f7509dca83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83/2c9b4e4b-748b-4793-9d99-06f7509dca83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:43:43:42:fe:ee:ae:f2:8b:7e:b7:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9b4e4b-748b-4793-9d99-06f7509dca83
        Validity
            Not Before: Mar 23 10:16:15 2026 GMT
            Not After : Jun 21 10:16:15 2026 GMT
        Subject: CN=9ecf215a-4e76-4d27-b791-1d1461e0ac9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:aa:60:18:0a:72:70:3a:68:f5:57:8b:27:
                    9d:34:ed:78:79:8c:20:42:00:8d:d9:6c:de:2f:5f:
                    67:7a:cb:97:d2:aa:59:ef:cc:5b:bd:b7:f3:8c:1c:
                    f4:5e:26:94:c1:7d:3f:08:fe:3c:7d:91:47:6d:dc:
                    d2:87:ca:1d:8b:88:c7:b0:37:91:26:ca:03:1a:ca:
                    fb:32:c9:4b:91:c9:79:9f:3b:7f:c9:3e:54:77:16:
                    f4:1f:8d:c0:73:ff:62:11:d8:fc:9a:78:d2:9b:08:
                    6c:dd:dd:5e:79:5d:d4:73:68:3e:e2:3c:f5:a2:98:
                    fd:d8:a4:4b:b8:e6:b4:3c:7d:86:f0:2a:7c:91:25:
                    83:53:df:49:59:4e:d5:9a:7c:0d:55:49:04:4f:6b:
                    14:7d:3a:7b:fd:06:2a:d4:34:2e:e3:75:77:9e:dc:
                    71:3d:34:6e:3c:90:1f:61:7a:63:8b:67:d6:27:0c:
                    0a:79:f9:f6:a1:13:02:ba:8b:db:08:ff:6a:82:af:
                    b2:8b:66:22:b0:b4:eb:0d:53:7a:01:48:8d:81:c4:
                    a4:f2:2d:5e:f8:28:7f:68:e0:32:ef:a4:81:dc:7d:
                    e7:7a:1c:d2:97:ee:89:49:2f:99:ec:4d:40:ac:27:
                    eb:27:5d:d8:79:ac:44:50:65:d3:f3:e0:a6:0e:26:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A2:33:71:7E:62:42:7F:B0:4E:A9:2E:67:B7:11:6F:C6:40:4A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83/774e4fa3-4c51-3983-ac52-d2663f34d684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83/2c9b4e4b-748b-4793-9d99-06f7509dca83.crl

            X509v3 Authority Key Identifier:
                keyid:06:9D:85:BB:F0:68:12:AC:86:38:EC:AA:21:FF:B9:7B:03:D2:59:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:0a:8f:72:76:73:03:20:87:74:ea:05:9b:9e:21:44:76:
         de:e3:91:f9:8b:b3:b1:7b:1f:12:ab:fe:69:ea:df:0f:0c:58:
         8f:b8:cf:17:34:2b:bf:80:90:79:36:f0:b2:22:c3:2d:6a:7a:
         62:aa:58:29:d1:a6:33:95:1f:68:78:cf:75:b3:9f:95:3c:07:
         06:ad:df:10:f2:26:df:e7:33:df:ac:e3:92:9a:14:3b:0c:07:
         9a:8d:4b:c0:b0:a3:39:4c:ec:89:0f:98:a2:57:6a:8f:4a:d3:
         de:fd:dd:45:a7:16:08:e0:0b:c1:0f:ac:4a:60:12:e2:d4:4f:
         d7:d5:d1:f7:b0:60:e3:96:b3:36:0f:78:7e:fc:62:1a:3c:20:
         10:98:6b:ab:80:fd:80:f8:61:aa:5b:5d:fd:2e:f9:b7:57:5b:
         f7:b1:20:5d:d9:ec:cc:29:85:40:14:e2:db:4c:57:8c:2b:79:
         3f:0b:4e:8c:a0:9f:f6:22:24:74:fd:a1:5c:19:cb:26:d2:89:
         78:71:bc:03:90:b9:95:b4:44:27:8c:c0:cd:2c:9e:a4:a3:21:
         6c:2e:55:40:cd:22:72:d4:06:cf:df:bc:45:38:18:92:90:7f:
         ba:3c:6e:af:50:24:f5:6b:f4:25:4f:cb:19:ee:2b:c9:87:7f:
         f0:a8:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:46 2026 by rpki-client