Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/45be40ea-3482-30b7-938c-3ca0c351a045.roa
File:                     45be40ea-3482-30b7-938c-3ca0c351a045.roa (raw, json)
Hash identifier:          ZkUI8/XzyFI4qQB/qFrVH1SvHqiaKou8coffmiFV3Ww=
Subject key identifier:   74:4B:05:1F:A1:08:52:CE:6D:63:BB:7B:37:EB:08:81:31:85:13:95
Certificate issuer:       /CN=506bcebe-036e-4f01-b460-22929ff0f236
Certificate serial:       010D0C9F4328584D343A1C4585A0EE7241CE3480
Authority key identifier: C1:41:63:71:E7:1D:3D:F7:BA:EF:8E:01:94:2B:C3:ED:04:71:FD:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/45be40ea-3482-30b7-938c-3ca0c351a045.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     398643
IP address blocks:        205.149.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/506bcebe-036e-4f01-b460-22929ff0f236.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/506bcebe-036e-4f01-b460-22929ff0f236.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:1c:45:85:a0:ee:72:41:ce:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506bcebe-036e-4f01-b460-22929ff0f236
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=81f639ff-2df4-490c-acf1-aa350f8ab6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:ec:c6:66:4a:8a:d2:4c:74:70:7f:db:21:
                    93:dc:ea:7e:e8:e0:3c:6e:86:95:03:fc:1e:9d:7b:
                    e0:9c:11:45:ed:a8:be:04:76:c9:a6:c6:ad:26:e6:
                    d1:1f:64:a8:54:cb:bc:00:8b:b7:18:14:80:f5:3f:
                    00:c3:78:c4:1f:3b:d9:6e:1b:b9:76:33:d6:44:08:
                    57:8b:bc:11:7f:6b:45:9b:a6:d8:9f:cd:23:8b:2e:
                    49:87:2c:b5:3d:ec:82:b4:6f:ed:a6:af:04:f1:03:
                    3e:cb:6a:46:1c:9f:a1:aa:ed:67:4a:a2:3a:dd:1c:
                    99:c5:46:2f:7c:b6:eb:1c:d8:38:93:44:43:0f:0c:
                    37:91:a6:3c:ec:a4:03:ea:73:a0:9f:dd:6b:e0:9f:
                    2c:60:34:4a:00:34:34:2e:29:07:4c:df:ec:d6:3b:
                    f5:38:ad:e4:4b:b2:3c:b2:ce:54:6b:d9:b0:3f:e1:
                    8c:5d:0c:22:b4:bc:9f:6e:ca:e9:39:00:e0:5b:84:
                    87:54:51:a2:6e:2c:b3:3a:a2:2a:ed:52:23:d3:54:
                    44:3f:31:e9:7d:23:52:2e:67:ab:d6:3e:67:ac:62:
                    a6:f6:76:9e:da:d6:ac:74:da:60:e7:16:b2:5f:ca:
                    ea:96:0c:b6:3e:df:d3:c0:87:5c:bc:77:f8:ab:81:
                    1c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4B:05:1F:A1:08:52:CE:6D:63:BB:7B:37:EB:08:81:31:85:13:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/45be40ea-3482-30b7-938c-3ca0c351a045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236/506bcebe-036e-4f01-b460-22929ff0f236.crl

            X509v3 Authority Key Identifier:
                keyid:C1:41:63:71:E7:1D:3D:F7:BA:EF:8E:01:94:2B:C3:ED:04:71:FD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/506bcebe-036e-4f01-b460-22929ff0f236.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.149.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b0:fd:bf:17:77:66:db:90:e3:60:1c:b8:ad:dc:cf:89:0c:
         00:4d:ad:22:bf:f8:67:35:d6:f8:1f:92:cb:7d:dd:60:90:4a:
         09:dc:c6:15:dd:60:3a:04:27:8d:28:b4:e4:76:82:a0:30:36:
         ef:81:0b:8b:ad:80:49:ed:3d:ca:58:e5:29:f0:43:7c:47:e4:
         83:08:10:d0:a3:64:bf:b4:72:f5:d9:5b:ea:9b:3d:54:d1:58:
         8e:50:82:a3:76:b5:a6:4a:50:65:4c:4d:40:c8:48:63:21:fa:
         3b:b9:7c:26:e8:e4:0b:dc:7a:27:3b:a4:9a:a4:d8:40:9f:49:
         71:b6:b8:c6:72:fa:4c:ad:7e:d4:22:b2:d3:2c:a5:b1:55:dd:
         24:9a:3f:93:41:83:64:c2:17:8f:c8:1b:26:67:43:8e:ff:61:
         af:fd:ca:5a:6d:c9:a2:dc:37:99:8d:45:00:41:a2:fa:c8:89:
         d8:1d:e5:85:c1:a4:c0:fe:23:80:8c:58:c0:e4:57:79:c4:f3:
         a6:12:54:b2:f6:51:42:ae:5a:6a:b7:43:0f:90:0e:c3:18:08:
         e2:ad:75:76:9f:0e:c4:d4:87:f7:26:1b:b4:08:27:d6:c4:29:
         dd:fe:bc:b8:0e:65:bc:01:c9:b9:9a:d9:9a:51:38:e6:55:66:
         7a:b9:cc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:08:14 2026 by rpki-client