Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa
File:                     bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa (raw, json)
Hash identifier:          NMQ+skPjkh/khW498qj4QzFjsO2XamXCgNT2Hd+95h8=
Subject key identifier:   BD:92:E2:42:CB:80:CC:8F:5C:1A:9D:EC:55:92:4B:1D:B1:C4:19:8F
Certificate issuer:       /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Certificate serial:       010D0C9F4328584DC4004FF9A140A1BD8C17E1C0
Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        204.15.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:4f:f9:a1:40:a1:bd:8c:17:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=0435e9ea-0f69-422d-98ae-766b48e7a8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:0a:b3:ef:b2:1a:1c:fd:80:40:e1:b7:d1:
                    1c:d0:33:65:f4:0d:81:03:6c:de:4d:fb:b2:f0:f1:
                    5d:70:06:1c:2e:f2:89:0e:4b:32:25:03:06:e3:8a:
                    a7:be:30:4d:fe:49:86:77:01:4d:55:79:8d:f1:f0:
                    a4:60:d0:08:ac:90:7f:0b:62:41:ad:20:e8:60:f7:
                    c4:65:fc:4f:d2:73:ca:63:4a:a8:83:5b:10:e2:69:
                    27:7f:21:81:ff:6e:c0:2c:8f:4e:2c:23:5c:33:25:
                    d1:f6:0f:3a:09:06:24:41:30:1c:56:33:89:20:c5:
                    b7:8a:63:20:a5:c1:88:c6:d9:f4:25:d3:92:0e:6d:
                    4b:06:4d:c3:45:cb:45:3f:a4:e9:b7:2b:f1:e7:05:
                    e6:aa:83:2d:3f:f5:59:5d:40:ec:93:6f:cd:26:f8:
                    1c:77:c5:51:fd:c6:5d:fd:55:b9:c7:0f:b7:3c:51:
                    97:22:0c:79:d5:8f:c7:cd:91:55:2f:35:bb:92:04:
                    6c:26:d4:92:c6:63:fa:55:53:d7:96:5b:91:c3:6f:
                    ce:bc:58:14:8f:d8:3e:33:95:ee:24:2e:70:4d:e2:
                    be:0b:b7:dd:27:11:e2:58:27:d0:2d:6f:41:96:64:
                    0e:3a:5b:2a:3e:39:06:65:e5:57:26:7a:3c:f3:7e:
                    0e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:92:E2:42:CB:80:CC:8F:5C:1A:9D:EC:55:92:4B:1D:B1:C4:19:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl

            X509v3 Authority Key Identifier:
                keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a1:f7:c6:e6:24:22:6d:53:6f:cd:0d:48:93:40:db:27:fe:
         c6:a6:44:0a:80:93:70:b6:01:25:e7:77:2c:cc:f8:0b:fd:0c:
         c9:6f:56:fb:38:ef:3d:14:d1:14:83:b8:de:fc:56:5a:12:f7:
         1d:95:40:b3:dc:1d:e9:dc:38:db:05:2a:67:d7:ad:dd:16:dd:
         2b:40:64:cc:2e:4e:5a:59:79:4c:79:71:cf:df:7b:ca:0f:dd:
         d2:7d:7c:7a:bb:5f:f9:6d:71:e2:41:22:cf:cb:77:07:c1:19:
         e9:11:6e:1b:34:54:5f:62:f7:7a:0b:3f:3d:e6:37:62:94:16:
         a1:23:4a:c0:0d:f6:d2:53:90:60:58:34:fd:39:cf:23:3e:9f:
         2a:3b:83:cc:44:e7:17:29:e7:6f:1b:8e:24:e2:45:4a:31:8c:
         14:d3:45:ab:fa:97:b2:bf:31:8c:27:f5:47:b2:aa:2b:ac:17:
         76:1d:9f:1e:0c:19:96:32:c4:66:5a:4e:c3:5f:df:b9:37:8b:
         58:d5:15:4e:c0:c5:06:57:c7:63:2c:dd:7e:83:de:e2:07:d0:
         49:10:93:17:bc:82:6f:9e:87:eb:75:31:1e:58:14:a0:0d:7a:
         ff:bf:ef:96:42:a4:95:48:7e:a2:5d:cb:82:de:73:b9:25:4b:
         ca:a0:a8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:31 2026 by rpki-client