Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa
File:                     3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa (raw, json)
Hash identifier:          ii4nF5l0v2AxmB1gcMWm9BwhPyvGMAb44gY9/U0KtkI=
Subject key identifier:   DD:B6:17:8A:F7:92:55:D0:50:F0:31:71:B6:93:7B:74:7F:A1:49:98
Certificate issuer:       /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Certificate serial:       010D0C9F4328584DC5659CACA6AB1BAD984E6500
Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     397654
IP address blocks:        172.86.230.0/24 maxlen: 24
                          172.86.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:9c:ac:a6:ab:1b:ad:98:4e:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=864d88e5-8b9c-47e1-9b40-55cdfe69a382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:da:5d:bd:70:ba:5b:99:63:f1:b6:a2:3c:
                    40:7e:eb:60:a2:7f:d9:8e:0d:cd:17:53:6e:1e:45:
                    e2:a8:f3:a5:c5:74:0e:97:3a:76:2f:40:eb:0b:8e:
                    0b:db:0b:6d:ac:33:aa:8d:a1:a0:27:1d:1f:eb:e2:
                    ab:5c:7b:35:a2:de:9f:3d:43:49:c4:75:f2:8e:00:
                    2d:d1:79:eb:48:aa:ce:8f:23:99:34:a0:d9:a3:fb:
                    98:c6:bb:ba:ed:ad:51:ef:0b:8a:ee:38:e3:a6:0c:
                    af:13:87:32:2e:f2:d0:42:70:1b:93:6c:9b:61:6d:
                    2f:bc:ee:17:13:1f:96:22:cd:51:0b:0d:f6:a8:5f:
                    90:1e:ce:45:46:30:d5:92:38:eb:b5:23:71:98:e8:
                    48:97:bf:09:ec:4e:73:f4:27:39:5a:a4:3e:57:fa:
                    7f:a4:79:89:cd:5c:38:a7:4b:5e:14:58:18:bd:dd:
                    4e:61:2b:a3:a4:03:51:07:18:1a:55:98:f1:a0:98:
                    05:8c:6c:00:83:5b:2e:da:22:6e:aa:70:c7:23:8b:
                    15:28:93:70:22:46:ea:e7:40:70:05:30:f0:01:e3:
                    e8:23:19:7d:68:01:d9:74:02:ca:84:83:eb:5d:40:
                    48:e4:e1:23:d4:2d:de:76:19:0b:89:f0:1d:cb:81:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B6:17:8A:F7:92:55:D0:50:F0:31:71:B6:93:7B:74:7F:A1:49:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl

            X509v3 Authority Key Identifier:
                keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:ad:4a:a5:bc:e8:9f:83:95:88:f9:f2:41:52:2d:6c:02:c7:
         2d:f9:43:54:14:52:73:f6:de:17:be:bf:0f:af:71:5e:98:9d:
         fe:91:d7:20:a9:d2:a9:02:e3:9d:3f:d6:08:4a:c6:72:36:2f:
         a8:1c:0d:e7:ee:de:e4:14:44:27:0d:30:22:46:75:a2:2e:fb:
         c2:20:86:cd:36:a0:e7:bc:bd:08:26:c1:d9:1d:51:e4:c1:9d:
         2e:16:09:a1:f3:9e:3f:f4:83:ef:86:e7:60:04:f9:23:1a:26:
         6a:e2:71:92:2c:3c:e9:e9:83:36:79:02:e8:9d:45:10:ff:ad:
         50:01:d4:8d:f1:69:2d:89:d3:c0:b8:3f:34:9b:72:91:b6:bd:
         49:e2:0d:56:d9:95:24:8c:de:82:de:3e:05:cf:e9:39:37:50:
         cb:f4:77:91:de:3d:b4:f9:97:f0:9b:66:99:21:49:b0:6a:16:
         34:0f:79:8d:0f:d5:aa:c0:37:ea:a4:34:a1:fb:13:a7:b0:6b:
         ae:fc:74:c6:7d:83:48:7d:71:31:5c:ee:fe:5b:77:89:a6:fb:
         05:71:c3:7c:4c:de:96:1b:b3:71:50:f7:61:85:95:17:ca:91:
         43:3d:f7:69:33:58:e2:9d:bb:3b:a1:dc:fb:2a:86:ea:92:5e:
         62:67:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:29 2026 by rpki-client