Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa
File:                     2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa (raw, json)
Hash identifier:          ysgvweGBT3cfGfdMHbsCiMNS6587p/YKECxwAyQh/kQ=
Subject key identifier:   E5:5B:2C:FC:77:34:CD:F9:59:A3:22:C7:15:16:E1:ED:50:69:54:D9
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F4328584D300A548997270696B41EF200
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     11810
IP address blocks:        204.194.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:54:89:97:27:06:96:b4:1e:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=a4bbe3df-4662-47ce-a674-7fa1abd62916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:5a:95:df:e1:a6:a6:56:0a:34:00:c1:71:
                    5e:ab:21:91:50:24:ef:06:5c:9c:aa:7c:f3:b1:96:
                    21:14:e3:18:2e:2b:d2:5e:b9:84:8a:b6:a7:46:84:
                    3c:93:b3:93:ec:0c:b4:55:3f:60:eb:b9:35:3f:f2:
                    6b:6e:a8:71:3b:31:25:e6:15:85:37:bc:a1:ab:4a:
                    48:24:64:ab:3d:40:cf:86:89:aa:2a:40:04:e5:f8:
                    92:ed:62:0d:a6:8d:cf:5a:49:02:bc:d4:95:d8:bb:
                    3f:06:c6:da:9a:44:65:48:04:21:60:05:42:18:09:
                    b8:95:35:c3:da:a5:9a:12:aa:24:6c:af:ca:99:83:
                    d0:38:32:03:ba:96:c4:f9:ea:9b:40:8c:eb:30:64:
                    93:85:a2:83:0f:59:cf:bf:c0:b6:7c:38:c6:87:bb:
                    c1:5a:b9:3e:2c:77:3b:1a:32:3b:98:e9:d0:da:8f:
                    1b:3e:d0:f5:88:14:27:9d:44:63:40:30:d9:03:ee:
                    94:21:cd:b7:8e:85:c3:e4:85:33:ef:41:b9:3b:34:
                    70:e0:70:3d:fa:ce:03:18:1c:74:1e:7b:2f:35:cd:
                    94:94:22:8d:8e:1d:0b:4c:d2:40:cb:82:79:a5:41:
                    11:c4:33:d8:41:69:8d:09:99:d8:7c:ef:fe:88:03:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5B:2C:FC:77:34:CD:F9:59:A3:22:C7:15:16:E1:ED:50:69:54:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/2a1c57b7-2271-3e00-9e79-bd797210d5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2d:76:70:b3:e9:9f:50:37:49:1b:86:01:d3:76:e5:5a:38:
         ae:0e:1d:85:bc:a1:96:d0:fd:ab:dc:33:c2:fd:78:b1:c9:f8:
         86:49:2c:98:05:32:08:c4:63:af:aa:d2:d5:85:6d:2b:41:99:
         b4:30:1f:79:9c:3a:6e:60:dd:8f:6f:cc:90:6b:d6:55:fd:88:
         7d:3d:aa:bf:60:69:cc:0d:75:4e:8c:f8:f3:15:49:35:8c:86:
         9d:2b:dd:30:a6:d9:b0:34:af:a9:3a:49:b8:d8:dd:a4:cf:21:
         4f:e1:6f:ad:ea:a1:4a:08:e3:a6:b5:d7:ad:9e:24:30:0a:3d:
         9d:d9:f7:2b:51:86:49:75:c9:9e:b5:23:64:65:ff:df:4a:33:
         15:1d:62:f4:bb:97:70:8f:09:6b:78:51:3c:bc:4b:e5:dc:87:
         0b:ee:b6:8c:dd:15:6e:1d:4b:36:cf:ef:7e:db:26:1e:26:02:
         22:97:ed:67:eb:46:85:45:f4:2c:fa:b2:e7:a1:74:37:85:80:
         89:4e:1b:ea:c4:85:38:dd:40:ab:94:73:56:d2:65:9e:e1:41:
         3f:c6:e0:83:7d:f0:37:4b:fa:c7:37:b0:7b:6f:13:56:49:7c:
         55:c9:34:68:b5:58:ef:8a:9c:2c:9a:e3:d2:fb:fc:2b:b7:7b:
         ab:31:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:03 2026 by rpki-client