Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa
File:                     5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa (raw, json)
Hash identifier:          0M9N32iIbKGISn+35kW0CNSbH58KUL2iVzHQdAZK2KM=
Subject key identifier:   A9:7A:FE:0E:00:30:5D:5D:99:6D:7D:55:81:1E:1B:58:48:6B:2D:B0
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D3DFFB5956065A10367A0B880
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     205306
IP address blocks:        204.27.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:b5:95:60:65:a1:03:67:a0:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=3cf58750-306a-4660-b2af-0261a1cdc0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:66:19:4b:c4:0a:e9:56:c5:0c:21:c7:36:
                    36:d6:27:ec:0b:df:65:4c:02:59:e3:a5:9a:3e:c5:
                    bc:26:4c:4b:94:41:e7:9c:40:19:9e:94:57:b0:bf:
                    0e:5c:db:44:de:01:fc:47:63:d7:d8:75:1a:b7:65:
                    58:66:64:4d:92:0d:3f:2a:ed:4b:34:dc:e5:ba:20:
                    a1:48:7b:c3:b1:3b:54:ab:82:bf:40:21:a7:59:58:
                    16:23:1f:04:e1:6d:a8:2c:e6:c4:97:f9:89:67:54:
                    75:eb:67:a5:b8:05:b3:32:2b:59:fb:5b:ea:ce:da:
                    31:eb:5b:94:4c:e3:d0:40:93:97:18:ce:43:32:73:
                    b3:13:06:da:47:10:07:40:2d:c9:89:55:24:36:60:
                    32:c6:a9:b5:1f:a4:5f:a1:c6:0e:34:3e:00:18:da:
                    ce:1c:b8:f0:8b:a6:d7:0a:b2:32:91:5f:5f:8f:9e:
                    37:a9:dc:17:c7:02:dd:c6:c4:cc:5e:a5:f0:47:3f:
                    80:40:a8:11:b8:df:c3:b9:0f:b9:3f:9b:34:7a:a8:
                    40:63:52:2f:a6:2d:2f:91:39:5f:2a:f5:6d:4c:52:
                    d0:f1:64:5a:05:11:e4:2c:c9:be:63:c7:c4:e7:1e:
                    b4:69:ed:ef:57:74:0b:30:63:66:c2:63:51:fb:81:
                    14:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7A:FE:0E:00:30:5D:5D:99:6D:7D:55:81:1E:1B:58:48:6B:2D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5d2db51f-ecf1-37fb-a15a-a900fa4c2228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.27.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:04:3c:6a:6d:14:23:b6:5b:63:44:b1:14:fc:48:65:45:c1:
         36:89:60:c3:2b:e9:d4:99:fd:f4:0a:30:60:c9:03:a9:68:e1:
         26:24:a9:86:20:e6:b3:31:13:cc:cf:03:d9:8d:54:77:bb:61:
         63:72:d7:74:b5:ef:83:d2:a5:b3:37:9c:d6:f3:f6:2b:26:8d:
         cf:5a:a9:3d:b7:1d:b4:0f:62:1d:b9:63:df:6c:e0:08:dc:11:
         20:50:82:f5:67:81:83:78:64:b8:40:6d:18:0d:d0:24:48:0c:
         be:60:1b:e7:52:27:ec:30:01:88:32:dd:6c:54:a3:cf:4b:41:
         3a:4e:a3:88:ea:e2:f2:31:1f:99:f1:1a:7e:f7:b3:ec:0f:82:
         b4:40:8d:c0:9d:7a:4a:d3:94:b7:52:ff:91:33:a0:57:3c:14:
         1f:1d:4a:40:b9:16:1f:0a:42:99:5d:8f:93:e8:56:80:cc:cd:
         70:34:d9:86:1c:86:29:7e:a2:0d:7d:15:97:02:8c:38:2c:07:
         ce:5a:a9:2e:7b:8a:79:9a:be:ad:44:8c:4e:4b:10:ac:0b:5d:
         6b:fd:3f:1d:d8:72:98:e5:6e:d4:ae:61:52:ef:1b:b4:e6:48:
         cb:00:d2:4e:98:10:b4:9a:64:9e:a7:fe:8d:86:b0:25:cd:b6:
         9a:e4:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:44 2026 by rpki-client