Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/4d841576-1a93-3369-84f6-42072ccb6d7d.roa
File:                     4d841576-1a93-3369-84f6-42072ccb6d7d.roa (raw, json)
Hash identifier:          9/O0w6BFIh1OE8i9/dJ28CoDjOhP+kRJERxXaMyA8eI=
Subject key identifier:   87:58:C1:25:0A:48:AF:B3:0C:26:9A:5D:8D:64:B0:EB:28:42:76:73
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584E5A49ED9EF7A0C53E28B50910
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/4d841576-1a93-3369-84f6-42072ccb6d7d.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     2675
IP address blocks:        205.194.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:ed:9e:f7:a0:c5:3e:28:b5:09:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=f85f28dd-f368-4e12-b3ef-70b86b83b84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:82:1d:b3:ea:71:99:e9:15:78:59:95:97:
                    00:d4:f0:4e:71:8c:a4:38:d4:42:03:43:86:ca:6f:
                    62:25:4b:ad:3e:a2:c2:f8:f2:7b:40:a0:fe:9c:3a:
                    c2:ad:79:04:29:7c:7c:2a:63:2e:b9:2a:6f:e6:4b:
                    81:ba:a7:0a:34:e5:e8:09:a6:c0:eb:ee:19:ed:69:
                    3e:c1:0d:3a:5f:59:2d:44:10:85:9e:34:79:f9:91:
                    91:62:0b:1a:c9:b7:6e:91:df:a6:24:90:44:3a:d5:
                    7c:5c:83:4c:b4:01:63:37:21:12:8f:1d:7c:df:9b:
                    9f:ef:03:d7:d8:71:4c:dc:1f:88:83:88:81:88:31:
                    42:8f:40:a7:48:a2:5a:78:79:9d:77:e6:55:8a:63:
                    32:ad:f8:e0:ca:a0:d7:c5:6c:f7:3d:a8:b3:30:de:
                    a9:7d:c6:e7:a8:e7:9d:cb:6f:5e:7f:a5:85:7c:95:
                    b8:13:05:a7:d4:77:71:f7:69:f5:ca:97:77:11:02:
                    a1:89:14:46:80:38:68:b9:9c:86:35:58:b4:51:5a:
                    da:7e:dd:34:0e:39:52:57:fc:23:0b:fd:fd:c9:99:
                    26:12:da:6e:d1:b2:4a:83:70:af:21:0d:c9:d8:4a:
                    93:66:95:7b:f4:29:33:66:66:6e:4b:35:ab:dc:21:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:58:C1:25:0A:48:AF:B3:0C:26:9A:5D:8D:64:B0:EB:28:42:76:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/4d841576-1a93-3369-84f6-42072ccb6d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.194.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b9:cf:b5:9e:4d:80:05:a5:d3:34:91:a4:8e:29:5a:e2:9d:
         29:19:a5:a3:2d:14:04:0c:9c:fe:0d:66:49:3d:7d:54:95:64:
         48:53:9f:53:53:68:53:ed:39:69:26:e7:e3:da:89:75:05:da:
         28:7d:68:44:3d:dd:f1:dd:d2:f6:68:4c:6a:a9:24:cb:1f:eb:
         3b:6e:a5:ba:82:c8:77:5a:8b:a5:de:fc:ee:4d:39:c1:56:bc:
         9d:c9:d3:5b:e0:7b:bf:23:a6:17:f2:fc:2d:1f:d0:72:62:b5:
         4c:97:e7:a8:72:69:c5:31:30:5a:34:84:10:25:be:9b:95:92:
         6f:f4:47:12:ea:45:b9:78:55:ff:c3:be:79:cc:13:93:47:b1:
         6f:9d:c6:f8:f9:07:bd:24:87:90:16:35:cf:7b:f7:58:68:20:
         dd:07:ed:22:b9:d9:cd:10:fe:21:ef:cd:ab:44:80:5f:d0:a0:
         8b:f2:d0:98:e6:65:82:bf:fd:e0:d9:01:58:ce:25:5f:ec:ad:
         e0:35:9b:9a:03:81:1c:a0:8f:b5:a0:62:d0:68:ea:cb:36:0e:
         bf:14:1b:7c:82:9d:2b:77:d6:23:c3:9d:9d:fe:4c:92:3e:12:
         d2:7d:9a:c5:f3:22:b0:e5:b3:2c:07:08:db:b8:bd:1d:dc:ce:
         f4:31:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:20 2026 by rpki-client