Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa
File:                     fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa (raw, json)
Hash identifier:          IVK0AXBqUDwNb8RqB2hq1LEDhpDVObDXZFdLpU1nRww=
Subject key identifier:   64:51:9A:1E:0E:6F:E6:01:56:17:42:02:1B:AC:15:66:7F:BC:E6:F3
Certificate issuer:       /CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Certificate serial:       010D0C9F4328584DC29AF039DFB332F3625AEA80
Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     398573
IP address blocks:        204.108.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f0:39:df:b3:32:f3:62:5a:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=92908c6f-b745-49b7-8410-9623c7929f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:05:e3:48:5b:c5:4f:38:7b:b7:1b:0b:c7:
                    5f:f8:bc:e4:e8:37:ac:aa:90:2b:58:7d:31:9a:ee:
                    0c:f5:02:e7:5c:f2:0e:60:78:9f:0a:74:f3:09:c3:
                    3a:c7:45:70:b5:d5:06:cf:b4:65:e9:aa:09:17:12:
                    fb:3a:a7:ab:3e:ab:d2:12:09:cf:8c:c5:17:21:a6:
                    37:39:ea:19:4a:96:f0:15:76:4a:f4:ac:06:50:a5:
                    2f:e5:b4:3e:b5:90:46:35:04:df:d8:f4:32:06:fe:
                    eb:08:93:94:b1:77:24:0d:df:62:0d:f4:8b:95:c7:
                    b6:95:e7:97:7c:b8:0e:83:b7:dd:48:55:74:3e:25:
                    89:51:af:81:15:97:5f:16:a0:02:e5:6c:59:f3:38:
                    ed:0c:52:68:f7:0d:fd:1f:af:38:ea:f7:16:6d:66:
                    85:bf:39:2b:b2:da:b1:aa:91:ec:35:a4:b4:10:12:
                    f3:92:2f:11:b0:03:32:0e:e6:29:c3:a8:86:48:8d:
                    c8:85:72:4b:d5:b2:da:04:15:10:18:6c:d9:b1:57:
                    43:65:af:98:b3:3f:e3:88:40:9e:5b:de:34:f5:5b:
                    2d:71:3e:11:29:e4:be:92:df:ba:7c:43:86:d3:fa:
                    9c:aa:96:f7:03:a8:01:6d:99:dd:ea:55:dc:d4:ae:
                    f0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:51:9A:1E:0E:6F:E6:01:56:17:42:02:1B:AC:15:66:7F:BC:E6:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl

            X509v3 Authority Key Identifier:
                keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:2a:04:b6:c5:c7:43:6f:88:89:5b:90:bb:9d:1f:5e:2e:
         e6:52:58:70:4a:0a:24:6b:77:62:67:bd:26:eb:1f:66:29:1c:
         d5:a8:fe:9c:ba:29:dc:f4:27:74:d8:63:08:36:1b:81:1f:e6:
         b4:4c:e0:76:4f:19:f3:23:d3:41:97:05:d1:cc:fa:cb:78:c2:
         c9:95:7c:44:ef:47:89:59:fd:28:dd:a1:99:b9:17:99:a2:b4:
         af:16:45:6b:b6:57:54:1e:1c:8a:ff:f1:9d:14:d0:87:51:92:
         80:2d:41:e1:07:5f:3f:b8:41:1e:24:60:cd:98:7a:69:77:83:
         db:60:45:29:03:bd:7c:38:af:2e:1b:ea:9b:9c:25:7f:73:8d:
         53:5e:40:8f:9d:e3:0c:83:6b:05:c2:ba:26:00:4a:6b:b7:c3:
         5f:6c:46:dc:47:67:3c:a2:73:69:b9:8f:65:7c:d8:60:c4:6c:
         fe:df:0e:dc:32:f1:96:6c:1c:b4:6c:26:e0:79:49:3e:8d:63:
         0a:f8:29:2b:9e:8f:ac:1c:00:67:f0:2d:84:73:14:05:19:4e:
         a9:94:cf:61:6d:0b:8b:21:51:98:83:06:15:73:d4:56:7b:71:
         ba:13:8a:e6:9b:86:4c:3b:9a:fe:d8:41:fe:50:81:eb:fa:7f:
         e8:ca:51:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:04 2026 by rpki-client