Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/606a46db-c338-33fe-90b7-38a379adb210.roa
File:                     606a46db-c338-33fe-90b7-38a379adb210.roa (raw, json)
Hash identifier:          kPIsdOPM/GJIA7GztxKkY34+CZmYaBKa/sK3mxhnbbg=
Subject key identifier:   BA:01:F7:EA:80:6B:3E:7E:51:40:BC:B9:18:06:CC:83:02:DC:42:99
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584E815FC0C7EF4E355C631397C0
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/606a46db-c338-33fe-90b7-38a379adb210.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     2675
IP address blocks:        205.193.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:c0:c7:ef:4e:35:5c:63:13:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=4c4adca2-6440-4b77-993a-12deb338ca98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6e:8b:76:96:40:ad:b6:a3:47:6c:ea:e2:7a:
                    e6:4c:6e:a1:b5:2a:a9:15:fe:77:a1:dc:21:04:ab:
                    57:a3:57:5c:84:9f:93:cb:82:d6:6a:92:2f:a6:91:
                    66:07:dc:1e:d9:e4:b3:b4:b4:74:66:1c:c4:b4:b5:
                    ab:32:5a:47:3b:b2:74:a3:4f:c5:19:14:af:91:f6:
                    d2:ca:05:84:7c:3c:09:3f:ce:72:24:77:d4:cf:3a:
                    15:1e:a9:b0:17:46:08:86:31:73:af:6f:a9:fb:4d:
                    99:bc:94:e7:d4:12:5f:0d:f8:d4:3d:50:a6:70:88:
                    90:e7:b4:a5:c6:8d:4c:38:81:87:6a:d3:8a:b3:4d:
                    18:e5:e4:ce:4b:a2:64:6d:9f:46:04:f0:f8:99:52:
                    eb:0c:63:b3:08:c7:19:de:2b:cd:32:af:a9:4d:5b:
                    5c:4b:3f:f3:25:2e:a0:7d:17:06:c5:c0:4a:cd:8b:
                    24:89:12:ba:12:f1:21:cc:ac:74:db:d9:59:79:0a:
                    67:37:c4:f7:88:a0:2e:c3:f1:3d:15:e8:dd:3a:45:
                    c0:b5:1e:cc:f2:ce:c3:db:19:93:cc:ad:f0:13:0d:
                    46:75:01:83:29:24:da:c2:b5:04:57:40:fd:1d:b5:
                    9e:ab:ec:9e:7e:22:27:e5:fc:c1:c3:cc:e2:fb:61:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:01:F7:EA:80:6B:3E:7E:51:40:BC:B9:18:06:CC:83:02:DC:42:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/606a46db-c338-33fe-90b7-38a379adb210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.193.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:30:a3:fa:75:34:5d:cf:71:9a:5c:81:27:c6:d0:fa:83:2e:
         11:4c:ed:cb:33:20:6d:59:c0:dd:49:c6:4c:20:9f:a5:f2:f2:
         25:7c:19:7e:2c:d8:58:6e:ff:88:74:f9:e7:11:0c:e8:7f:4d:
         97:4d:bb:ed:e0:0d:a0:e6:ba:ec:9b:02:18:77:0d:e6:b0:f0:
         c3:7f:c2:ec:ae:06:42:a9:ff:c4:bb:5e:4f:bc:4d:1e:dd:56:
         74:49:64:37:2e:24:5f:e4:f4:7d:2c:64:43:01:bf:18:4a:3f:
         25:68:92:63:d8:d8:ef:81:05:92:10:fd:a0:21:58:ee:fd:c7:
         a5:bd:9a:c5:37:b2:3b:0c:1a:7f:0c:2e:b1:8e:98:b4:bb:6d:
         8d:4c:1e:7e:24:04:bf:a8:bf:98:77:4c:32:c1:21:f0:1e:5d:
         48:d4:4c:0d:40:3a:4a:27:92:17:b3:57:4e:5c:a2:db:a5:3d:
         af:d3:fc:f0:0b:4c:85:8e:5f:3f:e2:6c:17:a8:cb:c7:46:d1:
         8a:1a:1e:8c:13:8b:83:f9:cd:10:c7:ac:cd:8e:e1:a7:1a:1a:
         db:42:de:ae:29:57:9d:5f:03:44:89:03:5b:b8:71:14:0f:4a:
         46:43:4a:ff:40:d5:c1:cb:47:90:08:5c:6d:7b:88:38:cd:07:
         98:d3:3a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:49 2026 by rpki-client