Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa
File:                     2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa (raw, json)
Hash identifier:          6RGU0845OJ4Tx670nvVwKgdObCksw5MSP3Oj8S1eZE4=
Subject key identifier:   67:4B:9D:6F:E5:5D:CB:59:47:C1:CD:03:56:5C:A1:35:65:F9:73:43
Certificate issuer:       /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial:       010D0C9F4328584D2A74EE25360ADFC89C760980
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     33322
IP address blocks:        204.15.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:ee:25:36:0a:df:c8:9c:76:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=619507b9-1135-454c-94c1-56c420973a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:7b:b7:a9:18:fa:d2:33:59:ca:aa:aa:54:
                    2e:2b:45:0d:3b:98:c6:1c:56:4d:26:95:43:be:d5:
                    69:5f:71:b9:68:ee:cf:85:4e:4f:52:6c:96:86:af:
                    57:71:50:17:c9:69:1c:a4:86:c4:89:3c:92:6f:04:
                    5b:b7:fb:24:3d:a8:fe:24:45:c0:70:dc:cf:27:45:
                    a0:e7:42:b6:50:ce:63:8e:e1:b2:5c:eb:e2:98:f8:
                    bf:9f:38:45:76:54:e7:48:e2:a1:d6:84:f4:82:20:
                    00:c6:2b:97:36:d4:5d:cd:b7:4c:eb:06:22:24:42:
                    a6:f5:0e:2c:93:19:9c:b9:b5:37:c1:be:29:e6:41:
                    4c:b0:07:18:d5:4f:76:cc:2f:d4:ac:7a:91:4e:3b:
                    ac:01:b5:8e:bb:cd:88:18:e9:7e:ea:01:2d:a1:48:
                    62:4e:bb:03:0f:8e:bc:d8:1a:49:93:e6:96:c8:d9:
                    50:bd:3f:e3:fc:7f:ef:76:9b:08:e5:2b:6b:6d:9f:
                    f4:7e:fd:de:7b:f9:a8:29:be:25:36:24:80:6d:b7:
                    a4:06:6b:ee:f8:df:83:77:94:61:62:ce:c3:e2:4f:
                    2e:b8:fc:96:70:e9:4f:3f:0f:0c:65:7a:3d:48:dc:
                    9c:ea:59:e0:33:e6:5e:99:f1:8e:87:65:a3:54:70:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4B:9D:6F:E5:5D:CB:59:47:C1:CD:03:56:5C:A1:35:65:F9:73:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:22:a9:f4:38:20:a2:4c:f5:51:16:8a:b3:68:15:e5:58:
         c9:f4:f0:43:20:86:85:e7:e4:3b:4f:a6:84:cb:9b:c0:3c:59:
         1c:5c:2c:22:64:4e:c0:61:12:f3:f5:6b:3c:ec:81:5e:1d:4f:
         91:7f:4d:8f:c2:c8:10:69:73:70:ae:b9:a5:7b:a5:3b:ca:f8:
         50:3c:a2:21:86:dc:bb:66:9e:17:9d:36:ef:53:38:26:c0:b0:
         98:c6:62:73:13:34:bb:f1:01:93:62:17:5b:fb:6a:f1:7d:cb:
         4a:20:e6:c2:d2:ee:d0:bf:b9:d4:ba:10:01:b1:fc:ff:f2:45:
         31:26:2e:11:8e:df:46:9f:3a:63:e3:60:57:8d:c9:2c:07:09:
         1d:1a:68:27:98:37:c4:32:b2:49:7c:28:3c:38:26:aa:25:ce:
         00:f2:34:24:6d:46:db:62:b8:14:f7:45:31:6b:84:1b:d0:db:
         8f:0b:7e:75:e1:30:37:f4:df:e2:f6:c8:59:95:a2:cc:4c:53:
         93:c9:67:3d:a3:95:e2:8f:1b:2f:6a:b4:0e:f7:80:31:3a:ed:
         4b:62:c4:d2:58:93:58:1c:05:e4:d5:55:e6:76:6f:fb:10:aa:
         7f:f5:46:d5:8a:12:61:73:61:e0:3e:2a:ec:89:38:6f:4e:56:
         14:7c:a9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:51 2026 by rpki-client