Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/2ded615f-c967-3400-b3c0-f0bdb29540c9.roa
File:                     2ded615f-c967-3400-b3c0-f0bdb29540c9.roa (raw, json)
Hash identifier:          ozxSrYpll+r7xN1xfJMPCDuhkMl1FiiDFr0ddvBgr9c=
Subject key identifier:   D7:FA:25:59:94:A2:96:3F:E6:0F:64:E2:3B:62:CF:0B:8E:FF:3E:6E
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584D2A74E5A6D5ECF6B371738080
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/2ded615f-c967-3400-b3c0-f0bdb29540c9.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     10390
IP address blocks:        204.194.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e5:a6:d5:ec:f6:b3:71:73:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=f779b273-3dfe-4259-9d8d-ea340a315225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f2:e8:17:10:5d:03:ce:58:de:00:22:b7:a4:
                    c2:e5:e7:1a:f2:d2:c0:ab:90:b1:13:f4:72:06:66:
                    89:26:80:8c:02:4b:66:12:67:87:83:c0:5b:87:d0:
                    4e:c0:15:8a:d8:e9:26:16:31:db:6e:7e:ae:b2:fc:
                    5a:eb:7b:7c:0b:7a:32:01:1e:94:0e:1d:d5:ba:4f:
                    2b:69:8f:25:6e:58:39:ee:4e:d6:68:8f:ce:58:f3:
                    a0:5d:b3:25:36:b0:e0:cc:d1:87:af:54:d6:d6:54:
                    3f:50:8f:f4:2c:64:35:14:c8:cc:9a:9b:d7:42:33:
                    2a:fc:31:ca:77:40:c7:05:f2:38:e3:4d:4e:fc:7e:
                    f1:0d:2a:47:d9:03:ee:1f:ac:96:a9:c3:44:3b:99:
                    cf:ad:f8:04:44:96:eb:a5:53:cc:ed:28:03:dd:15:
                    5f:1e:34:45:88:6b:43:a6:b8:79:20:ef:64:50:8a:
                    ac:8a:52:8b:e7:d7:30:b9:63:ee:f3:2f:67:65:d6:
                    50:cb:32:87:2a:9a:bb:86:72:9a:51:b9:16:d5:e2:
                    1a:8d:28:8a:78:4a:61:4d:81:af:81:03:92:b7:43:
                    fc:0e:76:ee:d6:c6:20:98:3c:7d:89:19:7a:02:40:
                    cc:fe:37:13:b8:b1:ae:26:89:df:a3:9f:9e:6f:cf:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FA:25:59:94:A2:96:3F:E6:0F:64:E2:3B:62:CF:0B:8E:FF:3E:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/2ded615f-c967-3400-b3c0-f0bdb29540c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b0:59:26:e6:56:f6:a8:a5:82:f8:31:45:7c:f2:f3:c0:5b:
         5c:b2:07:ee:8c:db:c6:0b:6c:e4:02:5b:88:eb:b7:2e:49:0a:
         2f:7b:d9:08:5e:04:2d:49:31:18:f8:00:eb:9d:a2:47:8e:70:
         eb:7b:7c:23:5d:9d:d4:70:2d:b1:37:dd:01:47:c0:c4:70:e1:
         97:d7:6f:a2:d7:2c:e1:fc:30:66:d7:51:ae:2d:62:34:a1:fa:
         c7:70:46:75:68:62:6c:72:f6:09:3f:e9:13:61:c6:48:e6:86:
         dc:5f:61:07:99:58:14:9d:43:16:75:a9:65:ea:33:f0:b0:cf:
         63:60:1c:ef:60:b0:12:e7:df:05:1b:ef:92:a4:d4:bb:5e:e9:
         95:16:37:47:be:99:4a:15:8e:cf:7d:e1:df:7d:38:bd:bd:dc:
         7b:95:9d:af:71:ec:e4:55:e0:9c:75:e9:cb:08:e8:aa:db:de:
         e0:63:04:9a:a0:ce:01:78:ca:43:45:1f:c6:c1:ac:7d:ef:b8:
         7f:00:24:cb:94:28:22:b5:e8:c9:a5:3b:65:43:26:f4:6b:c3:
         50:2d:a9:cd:6b:ab:5d:25:24:95:28:5c:29:64:6f:aa:e8:ba:
         d0:8e:28:0a:df:bb:2c:06:f4:07:d8:4b:8e:a6:22:c3:3e:cb:
         4e:66:37:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:57:32 2026 by rpki-client