Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/9737fe93-6711-3fd0-9560-8c565147dc7e.roa
File:                     9737fe93-6711-3fd0-9560-8c565147dc7e.roa (raw, json)
Hash identifier:          HIrIJhJklb0egklKMl3WsXRH9zHnEMi0Xw0X02MsY+4=
Subject key identifier:   09:16:59:71:F0:1C:47:A8:68:11:CE:AD:2A:1D:DF:D4:87:28:E4:13
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584E815F8F755606ADDDECA10280
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/9737fe93-6711-3fd0-9560-8c565147dc7e.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     2675
IP address blocks:        205.193.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8f:75:56:06:ad:dd:ec:a1:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=23f5d0e3-d19f-47d7-83b2-ab79f19cf92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:23:a5:e8:62:62:53:8c:1f:b3:b6:e1:c2:
                    1d:bd:ed:95:66:10:69:86:62:28:29:1d:ee:35:7c:
                    37:10:5c:3b:d6:b6:d4:c1:98:f7:74:b7:65:f2:15:
                    4f:29:15:38:7b:da:a4:3b:a3:4a:01:87:8f:14:5c:
                    7f:70:de:da:b4:59:5e:02:ed:fb:70:ca:79:b4:2e:
                    1d:72:ac:55:c3:66:34:6f:58:99:2d:b0:a6:e0:49:
                    41:c5:cb:e0:2f:c2:9e:84:e0:4a:0a:60:56:89:39:
                    49:5d:21:02:cd:39:08:60:f9:8f:8d:2f:85:b3:6a:
                    14:ed:bd:d3:41:83:24:9f:1b:4e:e9:e9:6d:11:4b:
                    9b:bb:f8:67:47:33:ed:eb:06:4c:39:a1:92:63:05:
                    65:99:d6:c4:f9:75:1b:4a:19:57:cc:68:9a:bb:25:
                    b5:ab:55:5e:48:82:2a:c0:c9:f9:6b:76:d4:9a:b4:
                    f5:59:55:8d:04:ef:af:1f:2c:11:6a:9d:ca:07:d2:
                    e2:41:a4:81:2e:9c:31:d3:b2:23:cc:7d:ed:fc:c8:
                    36:4e:4e:ec:70:64:57:d8:da:a7:70:9e:58:b4:df:
                    fe:77:46:0c:05:45:56:08:5f:36:42:5c:ba:a5:1a:
                    8f:f5:49:72:38:18:10:0c:15:b2:99:33:92:5f:2b:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:16:59:71:F0:1C:47:A8:68:11:CE:AD:2A:1D:DF:D4:87:28:E4:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/9737fe93-6711-3fd0-9560-8c565147dc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.193.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:96:e1:f5:c1:80:55:8e:16:64:af:23:24:cb:66:62:6d:
         89:a8:a4:07:3f:dd:a9:5f:ac:c4:25:6f:29:b8:d8:2b:c1:85:
         dc:fa:3d:92:f3:dc:78:8d:84:c2:d8:52:89:67:3a:45:59:21:
         3a:6a:2d:68:0a:da:8f:d9:e2:9a:07:c0:84:73:90:71:7f:fa:
         ab:cc:43:e4:4b:59:6b:ee:80:18:eb:af:e7:6f:9f:11:72:84:
         f8:9d:29:49:b2:df:45:05:63:a9:27:11:94:85:4d:c8:7c:01:
         ed:a1:69:db:42:c1:f2:b9:ac:4f:9f:10:fc:c0:59:50:d8:aa:
         68:27:9c:4a:d9:be:2d:e5:cc:c3:12:69:41:e0:48:63:e2:fb:
         40:64:ca:d5:6e:9c:8b:6a:7a:66:07:80:7e:fd:2b:cd:99:e4:
         f5:8f:5a:f3:88:e6:41:38:79:17:7b:ef:17:60:d2:eb:9d:8b:
         32:60:d9:c2:6d:7d:ff:f0:38:a8:e9:a3:df:bb:e2:48:69:25:
         f0:87:76:d6:d2:55:37:3b:4d:b7:b4:ad:fa:f6:c5:8c:6e:1a:
         0c:ab:06:c6:fc:ea:21:58:b5:ef:23:c0:44:1c:ba:c5:cf:94:
         90:b7:36:93:fd:94:b4:84:f9:56:0c:0a:80:64:f1:34:28:0b:
         01:85:64:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:19:48 2026 by rpki-client