Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a70319dd-70bb-3aeb-9f85-dc6231fbd568.roa
File:                     a70319dd-70bb-3aeb-9f85-dc6231fbd568.roa (raw, json)
Hash identifier:          DQYlomlBbTwH1bgUp7O17YPsFCdHqgpNCotMJEZIw1E=
Subject key identifier:   9C:F7:E9:16:61:5E:74:97:40:16:ED:DA:20:4F:32:C0:27:D7:08:DE
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584D4A8FA591B3DF6A5577C3B900
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a70319dd-70bb-3aeb-9f85-dc6231fbd568.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     62651
IP address blocks:        205.185.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:a5:91:b3:df:6a:55:77:c3:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=aa9b968c-f826-4fc5-b418-5d3ad40bb8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:14:c8:8a:d6:30:62:b2:4b:17:8c:60:f9:
                    16:23:ff:ac:26:f1:6d:1c:ad:39:8e:da:71:d7:69:
                    a4:a5:3d:30:8f:cc:f8:85:8a:fe:93:5a:6d:8a:93:
                    76:0d:09:cd:10:5c:36:46:0d:5d:e4:72:41:d3:28:
                    6a:fd:98:e4:d7:27:b4:45:37:e7:27:7c:c4:6f:fb:
                    22:a9:17:d3:29:ab:f7:03:97:ba:d6:76:d2:c8:06:
                    b9:95:da:7b:0e:76:f5:06:47:e0:24:01:20:b7:c7:
                    28:cc:73:7b:10:c2:5c:86:31:99:4f:15:f7:f8:4d:
                    18:99:0b:a1:4d:2a:23:38:01:39:a7:86:fc:f0:de:
                    1e:b3:c4:a8:61:ba:89:0b:46:61:4f:65:72:ae:15:
                    5c:fd:1e:60:c5:e3:30:91:07:ad:7a:5b:29:e8:48:
                    37:64:02:ff:2e:02:df:96:c0:15:04:48:8a:9e:7e:
                    68:a6:49:38:00:e3:f1:89:01:15:0b:8f:54:a6:c8:
                    82:a5:a7:b3:4c:6f:73:ee:f5:3d:c0:f4:9e:7f:38:
                    f2:b9:d9:bd:26:f2:d3:fc:d3:41:64:b7:aa:c1:98:
                    97:ad:89:6b:d6:1e:b7:d4:22:50:17:79:20:2c:75:
                    70:5c:0b:68:0a:2e:5f:d2:16:b6:0f:fd:4a:4a:c9:
                    ed:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F7:E9:16:61:5E:74:97:40:16:ED:DA:20:4F:32:C0:27:D7:08:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a70319dd-70bb-3aeb-9f85-dc6231fbd568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.185.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:48:76:68:c4:b4:44:a0:ea:c9:e7:50:9b:56:f1:12:9b:a9:
         55:9f:e5:95:20:37:a0:df:90:79:37:2f:c2:5c:09:6d:e9:c3:
         dc:df:18:1c:e0:b8:82:71:b5:55:a0:7d:e4:0c:df:8e:2d:f0:
         88:42:ad:85:cd:67:15:6a:a3:01:25:23:e4:e8:ef:0f:b0:c3:
         39:f9:9c:2e:91:2b:98:dd:77:f4:cb:29:dd:1f:c6:c9:aa:00:
         0c:c0:50:24:a6:53:ca:62:d0:74:c5:81:aa:d6:26:20:6a:84:
         62:e8:9d:95:7a:f8:37:50:2e:36:1c:a6:07:5f:1e:15:7f:10:
         82:c1:fa:81:2e:1b:a3:09:81:b2:38:8c:c4:ff:7f:ea:ad:d0:
         df:69:e7:d2:c2:fc:66:8d:7f:aa:35:73:95:3b:08:10:04:d1:
         b7:60:bc:06:bb:3e:9c:83:c8:2a:3b:27:57:07:d0:5a:b3:5c:
         f3:d4:38:81:88:a9:b0:9a:a9:63:ce:c7:f8:34:4e:8d:34:2d:
         df:65:ef:a5:ae:dc:88:5c:99:b8:89:61:11:91:b2:66:13:68:
         4f:f4:9c:3b:d8:3b:0e:dd:b9:19:6e:3b:93:39:fb:03:4b:80:
         f9:4a:c2:e2:6f:d9:df:af:e2:09:f3:39:3d:b7:ef:6a:1d:cc:
         98:b3:db:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:44 2026 by rpki-client