Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/e9c9af24-05f8-3c07-9145-76cea8ee0caf.roa
File:                     e9c9af24-05f8-3c07-9145-76cea8ee0caf.roa (raw, json)
Hash identifier:          uPLxJkZl7PhI0vF2WHIh3vhOf/bZW11kJD2glMqBC7A=
Subject key identifier:   59:44:2A:FC:F0:F9:48:D7:15:B4:4C:52:F9:91:23:57:AC:44:2D:B1
Certificate issuer:       /CN=2af9df74-e88e-4433-b765-051efef6177a
Certificate serial:       010D0C9F4328584D330559874A5460693A9CE712
Authority key identifier: 8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/e9c9af24-05f8-3c07-9145-76cea8ee0caf.roa
Signing time:             Tue 17 Mar 2026 12:43:05 +0000
ROA not before:           Tue 17 Mar 2026 12:43:05 +0000
ROA not after:            Mon 15 Jun 2026 12:43:05 +0000
asID:                     13567
IP address blocks:        192.206.119.0/24 maxlen: 24
                          205.203.64.0/23 maxlen: 24
                          205.203.68.0/24 maxlen: 24
                          205.203.69.0/24 maxlen: 24
                          205.203.77.0/24 maxlen: 24
                          205.203.82.0/24 maxlen: 24
                          205.203.91.0/24 maxlen: 24
                          205.203.92.0/24 maxlen: 24
                          205.203.94.0/24 maxlen: 24
                          205.203.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:33:05:59:87:4a:54:60:69:3a:9c:e7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2af9df74-e88e-4433-b765-051efef6177a
        Validity
            Not Before: Mar 17 12:43:05 2026 GMT
            Not After : Jun 15 12:43:05 2026 GMT
        Subject: CN=a7700e24-6237-4a8e-b33b-82e56aec71ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:88:b8:5a:ea:d0:2f:3f:68:ba:3e:b1:60:
                    8d:e1:09:2b:9e:f7:6b:b8:7d:5f:99:be:b9:61:bb:
                    de:03:f0:e8:79:11:2b:c6:57:43:cc:93:46:d0:fd:
                    f5:f8:d3:43:9b:4a:0f:2c:1a:03:82:8c:5d:f9:39:
                    f7:47:45:ce:f5:1b:3c:31:16:34:44:6d:96:54:48:
                    29:af:f6:e6:31:92:63:04:9b:07:dc:d6:49:94:93:
                    c8:d7:5c:17:55:1f:1c:ec:f7:67:7c:20:53:e1:65:
                    5f:e0:35:20:d9:2d:cf:71:a2:3e:de:d0:86:3c:2f:
                    0a:e7:e4:1a:af:8c:e4:2c:cb:0e:8a:c2:08:bd:2b:
                    8b:e0:1e:46:b2:30:ed:84:ec:2f:66:96:9b:08:be:
                    f8:65:cd:52:db:04:be:88:eb:f8:5f:df:7c:e5:28:
                    2c:fc:1a:4a:9a:46:a1:0e:22:25:f0:49:e1:43:b6:
                    59:13:c7:f8:91:b5:00:7e:d0:64:c9:90:c1:34:0d:
                    c9:2a:10:57:b3:a3:42:d4:6a:1d:2b:fd:94:f4:8e:
                    cd:94:4e:bf:63:be:32:b4:3e:dd:77:0b:49:30:2f:
                    17:c9:e1:d2:b6:6c:ba:e9:cb:8f:b4:bb:bf:21:e2:
                    86:41:90:83:9b:1d:bb:23:62:b9:be:de:f6:91:7e:
                    fd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:44:2A:FC:F0:F9:48:D7:15:B4:4C:52:F9:91:23:57:AC:44:2D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/e9c9af24-05f8-3c07-9145-76cea8ee0caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl

            X509v3 Authority Key Identifier:
                keyid:8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.119.0/24
                  205.203.64.0/23
                  205.203.68.0/23
                  205.203.77.0/24
                  205.203.82.0/24
                  205.203.91.0-205.203.92.255
                  205.203.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:7e:b8:af:4f:c4:cb:67:cf:ed:a5:a3:02:fe:c1:41:2f:0a:
         ee:b7:b1:20:89:28:4f:de:1f:eb:b3:ea:d6:e5:e5:ab:87:fa:
         56:10:67:94:20:43:9e:ad:f2:c9:4a:b2:7d:9e:38:de:d5:a7:
         5d:70:4f:38:c6:e6:5f:60:ca:b7:a6:d9:00:b2:53:f4:af:6a:
         90:80:42:53:e6:43:a4:07:0b:16:c7:73:29:9d:c3:5a:e4:37:
         0c:78:9f:cd:4e:43:1c:0e:72:76:7e:f7:47:ac:89:2e:5c:85:
         78:08:e3:74:41:37:6e:66:8b:56:0a:f0:a8:cc:56:73:7c:f7:
         1c:9e:4f:32:40:08:52:0c:58:9e:89:11:df:3a:81:4a:35:b2:
         05:ae:82:08:84:99:5f:fb:f0:6c:65:77:66:1f:25:c4:ff:d0:
         c7:6d:60:97:a5:9b:8a:3c:4a:e2:bf:6f:ca:75:65:6e:f2:d7:
         0b:6e:9d:ee:80:56:15:b7:05:6f:9a:f1:c9:dd:0e:09:df:bb:
         01:6f:05:a6:d6:07:6e:3a:1c:de:d2:0e:7f:94:af:90:1a:6f:
         5c:86:23:9f:d6:28:92:da:f7:c5:eb:5a:f7:4e:24:b8:05:23:
         f9:a7:54:04:ad:e0:3b:bf:31:5d:67:49:89:86:fb:e5:b4:14:
         2b:86:b3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:34 2026 by rpki-client