Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/bb332226-714d-3fa4-a1cc-38d701025db7.roa
File:                     bb332226-714d-3fa4-a1cc-38d701025db7.roa (raw, json)
Hash identifier:          xHqk/waMa8ok7vcVeoVevJJZT9rRnxlmeVLkTKZQLdI=
Subject key identifier:   8A:8D:8D:3E:83:52:6B:B2:76:4D:57:09:70:37:FF:68:D4:A1:CF:31
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584E90213BE51E4A2B0F15ABF600
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/bb332226-714d-3fa4-a1cc-38d701025db7.roa
Signing time:             Mon 20 Jul 2026 15:51:53 +0000
ROA not before:           Mon 20 Jul 2026 15:51:53 +0000
ROA not after:            Sun 18 Oct 2026 15:51:53 +0000
asID:                     401307
IP address blocks:        204.25.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:21:3b:e5:1e:4a:2b:0f:15:ab:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Jul 20 15:51:53 2026 GMT
            Not After : Oct 18 15:51:53 2026 GMT
        Subject: CN=d0016025-e978-478d-b906-5bc21f2e632e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:f0:bd:52:91:10:5f:5e:d7:62:fc:7a:88:
                    74:9e:57:d8:a2:bb:c6:07:a2:52:90:98:bd:c0:96:
                    a6:f0:6e:a3:5e:12:a1:6f:3a:10:51:31:b8:7a:96:
                    13:7a:b7:44:9c:14:36:30:18:b5:71:21:72:d3:90:
                    28:ab:57:2c:5a:08:92:bb:02:bb:09:9b:84:ff:63:
                    b1:64:45:24:dc:5c:60:1b:ee:5d:b2:ec:71:38:df:
                    b9:c8:1d:c2:80:a1:52:43:11:0e:fb:74:88:d1:4c:
                    04:7e:08:93:59:1a:2a:ac:6e:b1:39:36:fa:85:a7:
                    84:4b:3d:5c:01:bd:7b:fc:1a:19:51:7f:a4:b6:48:
                    6e:00:1b:88:84:bd:8b:29:ea:e6:88:35:f3:fe:41:
                    2a:11:2c:79:e7:57:19:d8:fd:9a:06:12:0a:23:70:
                    8c:64:80:2f:6f:78:54:a4:56:6d:1d:19:8b:40:9f:
                    0c:97:95:38:1d:61:3c:3d:dd:a3:20:b1:94:6c:33:
                    d1:59:c2:50:27:bc:91:9d:26:ad:93:df:bc:f8:c6:
                    13:4f:b5:a6:1d:94:d1:5e:00:d8:08:cf:4a:d1:21:
                    1f:04:11:e6:96:13:d4:9a:8d:cb:39:f8:e8:2e:9f:
                    d7:a3:f5:d2:be:62:ed:fe:4b:53:fd:df:d6:35:18:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8D:8D:3E:83:52:6B:B2:76:4D:57:09:70:37:FF:68:D4:A1:CF:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/bb332226-714d-3fa4-a1cc-38d701025db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:fc:f5:d3:66:6c:7a:38:dd:d0:32:b2:1a:35:b2:58:d2:3e:
         9e:57:54:5d:c2:d1:d5:d3:82:07:4c:a4:9d:cf:b8:63:39:bf:
         54:18:0d:3d:c5:c3:f7:92:8d:98:6d:1d:e8:b4:12:3a:37:21:
         62:49:7c:eb:6b:52:ee:4c:24:77:d2:4e:19:89:17:63:c2:72:
         e4:4a:c4:d9:09:fe:09:3c:3e:48:4d:1a:9f:5d:f4:3d:51:d4:
         cb:90:c3:6d:d1:01:cf:9b:24:e1:5a:9e:86:64:5a:4c:2e:83:
         9c:d9:62:be:09:54:54:53:e6:88:b8:09:15:15:78:cd:00:15:
         94:d4:b6:5e:9b:bc:72:5a:18:6b:55:d4:90:45:5c:97:8f:be:
         c9:03:3b:01:fe:5d:d0:e1:72:4f:d6:5a:aa:7e:e2:60:41:85:
         61:db:37:0b:c5:57:ef:d4:b6:a7:8f:30:23:71:7b:7d:f2:2f:
         5d:49:be:6b:0b:a1:c6:a0:d7:34:eb:b0:ee:35:6e:82:5a:41:
         74:87:a6:1d:f5:11:65:11:80:1a:00:30:6e:39:01:07:dd:60:
         cf:0a:59:a3:ee:13:0b:29:cf:27:b0:8b:39:cb:8e:aa:7e:53:
         cd:0c:5e:5f:ae:51:62:2d:07:d3:8a:34:6c:8c:a2:5f:1f:46:
         b1:67:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:52 2026 by rpki-client