Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/45166f81-a55f-3435-b6e9-9e7100326cb8.roa
File:                     45166f81-a55f-3435-b6e9-9e7100326cb8.roa (raw, json)
Hash identifier:          sEDigo3pYpC2Ez8CicNbWLeJGhviNH1+QwiiDq8iRs4=
Subject key identifier:   13:6C:73:69:93:DD:D3:5C:B9:31:28:4A:57:BF:70:5B:5C:05:4A:D2
Certificate issuer:       /CN=c739b1fc-db89-423c-9437-5e3b11048882
Certificate serial:       010D0C9F4328584D32D4C8A65D94A6113EC16400
Authority key identifier: DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/45166f81-a55f-3435-b6e9-9e7100326cb8.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     40080
IP address blocks:        205.147.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:c8:a6:5d:94:a6:11:3e:c1:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c739b1fc-db89-423c-9437-5e3b11048882
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=419984d8-08e8-45e5-9178-bc56ab57a437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:10:cc:2e:e5:b3:8b:f6:e7:90:3b:fe:19:0f:
                    9f:4e:2c:5b:1f:5c:94:ad:2f:60:89:75:4d:0a:5b:
                    8c:48:ff:a2:7e:a1:de:3a:02:71:7a:ce:69:5e:45:
                    a9:ba:23:f9:16:15:45:1f:58:74:ca:b4:dc:61:cb:
                    67:9d:b9:5b:4f:eb:85:71:af:f3:22:52:e8:7b:d3:
                    0a:9b:f6:6d:f5:25:31:70:de:21:20:f3:85:33:ea:
                    ab:e8:1d:48:4f:82:84:ea:07:a7:a2:19:e8:c6:03:
                    11:14:f9:ac:8d:64:9d:20:b6:9c:fe:91:a4:44:de:
                    b4:6e:a2:94:f0:e2:fc:1e:09:18:60:ea:bd:7c:81:
                    f7:3b:98:a3:aa:86:5a:32:ca:e6:91:be:48:0b:33:
                    91:70:8c:fa:36:22:1b:89:a8:02:ae:4d:97:3d:ad:
                    40:ff:49:66:60:6f:14:cc:43:c6:73:9d:46:3d:59:
                    1d:7a:bc:b5:82:a3:64:be:98:f0:bb:aa:30:1e:bd:
                    ef:dd:19:de:7e:23:ba:0b:35:a7:72:45:c2:08:25:
                    9d:fe:9d:e1:53:08:a9:a3:3f:f1:c0:e2:35:d0:9f:
                    9e:f8:11:a7:5b:9b:17:32:49:68:69:bc:cf:40:8e:
                    79:94:8e:81:bb:26:49:d1:0a:fd:a6:e1:27:45:3b:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6C:73:69:93:DD:D3:5C:B9:31:28:4A:57:BF:70:5B:5C:05:4A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/45166f81-a55f-3435-b6e9-9e7100326cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl

            X509v3 Authority Key Identifier:
                keyid:DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f5:48:b9:12:94:78:70:df:fe:f6:e6:9e:9b:4d:9b:00:06:
         1f:f8:ac:5f:de:5c:b4:76:91:19:72:c2:b9:b9:74:3d:20:d8:
         1b:a9:b8:f0:4d:4d:44:c8:50:28:ee:2e:db:e0:09:89:14:79:
         bb:bb:64:fa:d3:ac:47:9d:71:19:92:90:3b:78:5e:30:46:e8:
         f4:1e:10:0b:f5:94:ee:85:50:85:da:b5:26:78:f0:a7:b0:33:
         d8:5e:6c:fa:db:84:af:3f:e7:c1:57:93:d6:1d:dd:19:0e:92:
         f4:85:fa:6f:1d:2f:17:58:57:1b:68:bd:2a:36:ec:6b:5b:6b:
         2d:ca:17:6f:b9:25:a0:fd:27:db:03:7e:26:7f:38:52:80:1f:
         37:c2:7e:cd:4e:76:e6:46:27:30:c9:71:5b:81:2a:b2:3a:06:
         3b:1d:ba:b2:f0:38:9e:fd:a5:57:40:9e:a3:b1:8b:c7:eb:a9:
         a5:af:93:61:98:49:64:e3:c6:ad:1f:7f:77:06:9d:5d:b7:ac:
         e5:e1:8c:60:d6:32:67:65:7c:e0:ab:a1:12:bc:c3:a1:22:97:
         1a:d7:d0:f4:45:41:9c:d6:10:22:4d:b4:2f:ec:7f:d2:e3:f8:
         fe:68:03:d2:84:2d:a0:e2:f0:a4:fb:50:e0:07:26:f4:bf:d5:
         68:98:c6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:32:24 2026 by rpki-client