Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/a586d6f6-cfa1-33bc-ac00-96241ecf94c2.roa
File:                     a586d6f6-cfa1-33bc-ac00-96241ecf94c2.roa (raw, json)
Hash identifier:          m2an9pRgB7unI6GwACUJtbGsu7VjPrqiw+M/Zw4zfw4=
Subject key identifier:   4D:D8:69:FD:B7:8B:75:D0:92:71:CA:81:D2:B2:98:63:92:33:E8:02
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584E815F891735DDB0E591737E40
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/a586d6f6-cfa1-33bc-ac00-96241ecf94c2.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     2675
IP address blocks:        205.194.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:89:17:35:dd:b0:e5:91:73:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=75b3f1cc-a258-4bfb-a2ae-b17e36ca8631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:1b:8a:49:10:9d:de:56:ad:d7:2e:e6:6d:
                    5a:7b:0f:73:ba:20:4b:ae:3a:8b:de:0c:a2:e1:1d:
                    78:0a:be:aa:6f:fa:a2:8b:63:be:03:83:82:be:ba:
                    50:03:d3:a2:ad:5c:62:77:6c:01:3f:e0:02:da:35:
                    6a:fb:f6:e0:ed:cb:9f:64:28:67:38:97:3f:1e:c5:
                    f4:fb:4a:6f:ae:63:98:c9:50:0b:8d:6e:4d:85:42:
                    74:95:99:08:a4:93:4c:80:e1:97:0a:0c:7e:48:b3:
                    57:24:09:a0:d2:d9:42:f3:c3:1f:39:47:9d:79:d7:
                    d4:80:f1:20:ce:b8:a9:41:05:40:67:e0:85:5a:77:
                    0d:e5:5f:f2:77:f0:46:46:a3:9d:bd:fb:20:f4:a2:
                    68:84:5d:14:af:5a:5d:a9:66:f3:02:1f:d3:9b:e4:
                    62:af:9f:7a:e8:ee:52:96:06:9b:1d:3d:17:5b:a1:
                    11:9e:bc:ce:e7:49:d3:6b:0c:ca:8e:a7:de:88:80:
                    bf:71:59:45:0c:0b:d9:e5:64:88:21:e9:91:00:ed:
                    40:04:b6:7b:01:51:bd:5c:3c:4a:94:9e:7a:ae:31:
                    50:8a:92:f8:11:e1:f9:da:68:3a:14:cf:99:eb:01:
                    4d:7d:ef:92:84:f5:78:41:65:9f:32:8b:53:7b:79:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D8:69:FD:B7:8B:75:D0:92:71:CA:81:D2:B2:98:63:92:33:E8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/a586d6f6-cfa1-33bc-ac00-96241ecf94c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.194.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:33:67:2f:86:0a:3d:c8:cc:82:d5:42:98:6e:a5:0f:25:b2:
         a8:4f:56:f4:ab:19:d7:37:8b:c9:47:42:3c:cb:21:a8:09:97:
         80:70:a7:03:97:25:f7:67:97:9e:5b:ae:4d:c3:e6:4c:85:93:
         0d:7a:86:33:24:4a:55:33:39:75:f9:9d:c3:74:a4:aa:00:40:
         25:5d:d4:5c:5b:e3:e4:b7:1d:26:02:97:c5:09:7e:8c:9d:14:
         55:b5:f7:93:0c:e2:59:eb:6d:c2:b5:5d:2a:31:b4:84:8a:a4:
         dc:ff:3f:b9:55:70:b0:4c:a2:59:0e:39:d9:08:72:9e:f2:bc:
         ba:96:6f:e8:86:f3:41:4f:b1:57:36:1b:ac:8e:bf:3e:7b:ae:
         a7:60:80:63:19:e2:66:17:a9:e9:ec:2a:26:08:91:a6:4d:ad:
         b3:4f:99:75:9e:5f:be:5a:2e:89:2f:d3:1b:50:88:83:1b:ec:
         a7:ce:75:c9:f1:59:7e:87:f6:be:e9:7e:b9:ad:1f:15:bc:c5:
         bc:cd:1d:2a:22:35:01:e0:4c:74:64:a1:db:83:d4:ff:a1:1a:
         0f:65:ee:7d:00:28:6e:89:b2:5e:eb:fd:fe:b9:71:a0:83:ca:
         0c:5a:7f:c1:bd:3c:a3:d4:a7:3e:e6:ac:da:84:ac:de:e7:28:
         e9:a7:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:47 2026 by rpki-client