Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c5c0d958-2df7-4f91-95d5-c81786081ad0/6d8aeba7-d0da-3a39-a378-b7af59e6ac3c.roa
File:                     6d8aeba7-d0da-3a39-a378-b7af59e6ac3c.roa (raw, json)
Hash identifier:          oeSyIEnk/dltyMRzVFJEndHL10opXaIljKRHnSsaf0A=
Subject key identifier:   48:6A:E8:E9:38:6E:E3:6C:E8:89:25:17:95:1D:A3:9E:57:63:2C:DE
Certificate issuer:       /CN=c5c0d958-2df7-4f91-95d5-c81786081ad0
Certificate serial:       010D0C9F4328584D1B1A60143EDE8C139B4B7100
Authority key identifier: EB:DC:EB:64:93:F1:E0:04:AF:AD:D1:BD:EB:73:22:78:CE:77:31:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c5c0d958-2df7-4f91-95d5-c81786081ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c5c0d958-2df7-4f91-95d5-c81786081ad0/6d8aeba7-d0da-3a39-a378-b7af59e6ac3c.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     30046
IP address blocks:        199.68.35.0/24 maxlen: 24
                          199.68.38.0/24 maxlen: 24
                          199.68.40.0/24 maxlen: 24
                          199.68.50.0/24 maxlen: 24
                          199.68.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c5c0d958-2df7-4f91-95d5-c81786081ad0/c5c0d958-2df7-4f91-95d5-c81786081ad0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c5c0d958-2df7-4f91-95d5-c81786081ad0/c5c0d958-2df7-4f91-95d5-c81786081ad0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c5c0d958-2df7-4f91-95d5-c81786081ad0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:60:14:3e:de:8c:13:9b:4b:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c0d958-2df7-4f91-95d5-c81786081ad0
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=8a5bd275-1ea7-423f-ba1c-24bdcb79da9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:80:a8:1f:cf:3b:c4:d1:b0:a4:29:92:1e:46:
                    e9:18:16:0b:24:e0:fa:bb:2f:6a:0d:e3:12:3b:ea:
                    5a:8e:a1:5c:d9:cc:65:db:75:d0:39:87:1d:12:4b:
                    c5:ec:1d:35:10:94:af:d4:a4:4b:94:c8:9d:0d:66:
                    63:9c:19:d8:fb:69:53:48:c4:65:d9:46:57:11:fe:
                    5b:9a:00:b2:d1:87:d4:41:33:b1:a8:eb:19:51:32:
                    6c:ae:63:9a:ce:5d:44:01:4d:1e:0c:5f:9b:95:2f:
                    9d:b6:42:03:1e:d9:1f:b7:b9:8f:73:ea:ac:ac:2f:
                    0f:21:c3:07:cc:19:1c:08:57:50:84:5c:7e:d6:73:
                    52:5b:12:fc:11:bc:aa:a1:d6:74:3c:72:75:be:99:
                    ca:5d:96:48:5e:e1:4c:f5:13:33:70:59:73:8a:8d:
                    02:f2:9b:6a:b2:8e:9b:64:54:a5:ef:4f:bf:54:5f:
                    27:38:c3:e0:8f:84:14:72:eb:43:e8:28:6b:b5:74:
                    7e:43:7b:4c:d7:8a:86:04:65:e5:f7:86:8a:6b:b3:
                    62:db:67:50:80:55:56:82:12:29:51:d3:8c:54:e1:
                    ce:3d:1b:3f:cd:21:dd:e8:07:6e:7c:d8:9b:6e:f5:
                    45:c0:ae:a7:ce:21:29:6d:20:3a:c7:2a:39:93:68:
                    72:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6A:E8:E9:38:6E:E3:6C:E8:89:25:17:95:1D:A3:9E:57:63:2C:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c5c0d958-2df7-4f91-95d5-c81786081ad0/6d8aeba7-d0da-3a39-a378-b7af59e6ac3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c5c0d958-2df7-4f91-95d5-c81786081ad0/c5c0d958-2df7-4f91-95d5-c81786081ad0.crl

            X509v3 Authority Key Identifier:
                keyid:EB:DC:EB:64:93:F1:E0:04:AF:AD:D1:BD:EB:73:22:78:CE:77:31:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c5c0d958-2df7-4f91-95d5-c81786081ad0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.35.0/24
                  199.68.38.0/24
                  199.68.40.0/24
                  199.68.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:40:81:eb:c4:e5:60:20:c8:5f:a1:c8:9f:d9:33:26:36:ae:
         e8:ec:a8:c6:42:24:a3:16:8b:d9:44:44:d7:98:f9:79:f7:8c:
         f4:83:a8:f8:86:a9:94:9b:27:2c:23:02:2b:33:f0:26:d2:d4:
         56:3c:d1:72:31:36:3f:8e:53:99:60:78:2b:1a:09:3c:9d:d0:
         1f:91:b9:6f:3c:13:22:03:90:24:92:c2:fe:4f:e3:25:d9:fa:
         28:f9:f7:3f:66:9e:84:e9:6a:a3:cd:ac:59:a9:3d:e2:2f:91:
         06:ca:fb:e7:f3:4c:3a:05:c4:6b:6d:30:a5:a2:4f:15:84:b1:
         2d:a0:83:f3:67:2c:b7:7b:b3:73:25:1b:ae:ea:09:c5:63:ab:
         69:2e:aa:6f:e6:d7:e9:83:ad:b6:2e:25:3a:93:39:5b:e4:c8:
         b3:b1:5d:6d:60:5c:c4:d7:5c:4f:6e:41:0c:94:35:03:98:23:
         df:d2:07:9d:2c:3c:c6:93:bd:42:d7:c6:42:8d:50:27:c8:ab:
         cd:37:61:f6:a8:a4:69:74:0d:25:fb:80:bf:8d:1b:20:c4:71:
         f6:fd:bd:16:a9:06:7b:b6:6f:a5:e2:e0:ea:4f:14:9b:7c:51:
         26:63:ff:b9:76:41:0f:06:bd:4d:01:80:52:4c:2f:2e:77:67:
         61:44:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:56:33 2026 by rpki-client