Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/dd13d1dc-4cb4-3565-9765-680c241c28a5.roa
File:                     dd13d1dc-4cb4-3565-9765-680c241c28a5.roa (raw, json)
Hash identifier:          bcC2F+yJw8D9IHb6P1azYYYE0eja6wulJNW4rRpcBSs=
Subject key identifier:   FD:79:72:94:F1:9C:AC:EB:95:AE:54:AF:81:1E:93:A8:49:F4:C6:B1
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F4328584D492A4A60849F4699F7CD1800
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/dd13d1dc-4cb4-3565-9765-680c241c28a5.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     400400
IP address blocks:        205.234.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:4a:60:84:9f:46:99:f7:cd:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=2136f6b2-44e8-42c1-b33a-21964587eb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:3a:a3:bc:93:78:aa:65:17:4d:dd:62:b3:
                    e0:e1:2d:14:4d:4c:60:62:b6:42:df:95:59:ee:ed:
                    fe:36:47:c6:39:b5:1f:25:e6:0d:d6:06:bb:3a:4f:
                    58:20:36:ec:dd:db:7f:f0:59:c8:64:9a:d7:d0:0d:
                    37:23:0a:b4:6d:78:e5:8f:88:39:0b:07:de:bf:bf:
                    20:59:83:45:76:bd:a5:bb:12:84:37:a8:d1:8b:1f:
                    b7:fe:56:40:25:24:a8:c1:9b:e9:65:01:43:d0:24:
                    ad:c2:75:2f:f9:71:14:3c:be:e2:1d:01:ac:fb:b5:
                    75:b2:a5:83:27:ef:32:b8:07:2c:a8:5c:74:9d:34:
                    e4:04:be:9f:a3:3a:b3:8d:0b:e2:83:f2:d0:81:ea:
                    84:75:ca:13:05:7e:e8:5e:53:63:8a:9f:c9:a0:a2:
                    69:f6:b3:f8:f9:10:71:38:3f:df:37:f0:f4:40:79:
                    14:34:ae:c9:3b:7c:29:cf:58:68:72:16:e4:e9:9e:
                    6c:bc:e1:e5:4a:46:b4:f5:02:cf:33:c5:85:f2:ce:
                    75:b2:e3:c9:9f:8c:75:2a:04:94:db:30:7b:ff:88:
                    b7:46:4b:92:f3:a5:38:ac:be:c0:79:72:64:ed:53:
                    c2:95:af:df:23:51:b1:b0:fe:5d:1c:e9:ac:34:b5:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:79:72:94:F1:9C:AC:EB:95:AE:54:AF:81:1E:93:A8:49:F4:C6:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/dd13d1dc-4cb4-3565-9765-680c241c28a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a6:03:e1:cd:19:b4:97:79:8e:d7:54:d2:82:e1:ee:8b:c7:
         82:e3:1d:e1:44:8d:81:52:6e:7d:b2:6d:07:67:f0:a6:22:fa:
         69:24:fe:23:1b:74:68:04:08:ae:dc:9a:c7:e7:c0:c6:b1:32:
         91:ad:6c:46:0b:03:b3:d2:2e:0c:fe:0e:b4:23:2c:26:0b:de:
         96:19:ab:3c:89:21:e2:82:bf:c8:37:f2:b7:c2:0c:2b:c9:a3:
         c7:a1:d5:26:0f:bc:75:8d:22:dd:29:fb:e6:a9:90:e1:71:d7:
         5d:34:69:fb:62:91:2c:a7:5b:99:57:92:16:fd:9e:00:d6:22:
         0f:09:8c:df:42:39:2c:be:70:5c:a5:a0:bf:d3:28:11:08:13:
         61:e7:c2:08:7f:a7:d3:77:a2:af:28:36:5c:ba:27:d5:7c:d1:
         44:1f:18:2a:f5:ce:98:84:07:23:c3:c9:0d:22:10:5a:ae:02:
         d0:3e:36:ba:42:bb:65:97:b8:a7:fd:2d:0b:07:ff:79:32:1e:
         a6:77:49:7e:83:f1:71:d5:3a:68:83:18:c6:ba:af:e7:6d:89:
         1e:07:5f:2f:5e:ee:94:ae:ac:f4:69:0b:77:b8:b6:83:2f:da:
         74:f7:71:14:bb:11:ee:7d:d1:59:a8:68:a2:20:43:9c:e6:54:
         c8:7e:69:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:06:11 2026 by rpki-client