Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6045367f-ca45-4ad9-852a-266611143380/5ed513b8-77aa-3b69-95cc-8b9bd1a2036a.roa
File:                     5ed513b8-77aa-3b69-95cc-8b9bd1a2036a.roa (raw, json)
Hash identifier:          qnmoYcpswmiCFZg8HyzuXUByttapjZa8wJN74ggqB1M=
Subject key identifier:   D6:F7:64:BA:5B:79:0A:CD:69:61:6E:DB:BF:B7:1B:76:9E:39:CE:ED
Certificate issuer:       /CN=6045367f-ca45-4ad9-852a-266611143380
Certificate serial:       010D0C9F4328584D47007D91FF08DB0A40C330C4
Authority key identifier: A9:28:71:4F:21:EC:32:EE:06:68:CB:3A:B6:78:3D:ED:C8:4B:1A:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6045367f-ca45-4ad9-852a-266611143380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6045367f-ca45-4ad9-852a-266611143380/5ed513b8-77aa-3b69-95cc-8b9bd1a2036a.roa
Signing time:             Tue 24 Mar 2026 18:24:57 +0000
ROA not before:           Tue 24 Mar 2026 18:24:57 +0000
ROA not after:            Mon 22 Jun 2026 18:24:57 +0000
asID:                     16509
IP address blocks:        205.209.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6045367f-ca45-4ad9-852a-266611143380/6045367f-ca45-4ad9-852a-266611143380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6045367f-ca45-4ad9-852a-266611143380/6045367f-ca45-4ad9-852a-266611143380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6045367f-ca45-4ad9-852a-266611143380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:00:7d:91:ff:08:db:0a:40:c3:30:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6045367f-ca45-4ad9-852a-266611143380
        Validity
            Not Before: Mar 24 18:24:57 2026 GMT
            Not After : Jun 22 18:24:57 2026 GMT
        Subject: CN=8e1bcca0-9f49-47d2-ac74-a59b773bb09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:38:36:94:ab:cb:43:1e:88:59:ee:6f:01:
                    3e:58:a9:fc:5f:41:1a:9c:b6:68:e2:44:01:0b:b0:
                    08:4f:b2:d2:db:a9:07:43:b1:a9:f3:1c:eb:eb:4c:
                    cb:ff:39:a7:16:15:38:90:bd:94:10:d7:48:8d:8c:
                    41:2e:27:e2:16:1f:56:ee:3a:6f:89:ab:97:2d:15:
                    52:a2:6b:26:46:f8:03:00:72:bb:ae:2c:93:d5:3a:
                    e4:63:a8:f6:a0:f4:d4:e9:ec:1d:e4:09:f2:ff:92:
                    b1:e2:dc:4b:c0:bd:7c:0d:f6:f0:ce:0a:be:bd:1c:
                    97:e0:bf:50:6b:cd:d9:a7:60:89:5b:15:21:18:e1:
                    eb:a5:21:28:dd:5f:e2:b9:13:09:06:24:e2:91:65:
                    bf:ea:58:e1:85:9a:c0:5a:24:60:2d:79:6f:9d:1a:
                    c1:17:1d:ac:aa:ce:37:71:e2:90:db:45:ca:8d:c8:
                    ea:af:8e:91:38:58:d4:65:5a:d4:55:52:c5:9d:ba:
                    31:11:81:eb:4f:39:7a:5a:fb:56:6e:6d:91:81:ea:
                    18:c3:c0:42:b8:7f:8b:24:a4:45:6a:a8:ca:9d:29:
                    3b:0a:9e:be:29:04:3b:4d:1e:1d:a6:63:62:8b:27:
                    9a:db:72:16:fa:bc:94:53:52:12:c7:c1:2b:92:4e:
                    b8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F7:64:BA:5B:79:0A:CD:69:61:6E:DB:BF:B7:1B:76:9E:39:CE:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6045367f-ca45-4ad9-852a-266611143380/5ed513b8-77aa-3b69-95cc-8b9bd1a2036a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6045367f-ca45-4ad9-852a-266611143380/6045367f-ca45-4ad9-852a-266611143380.crl

            X509v3 Authority Key Identifier:
                keyid:A9:28:71:4F:21:EC:32:EE:06:68:CB:3A:B6:78:3D:ED:C8:4B:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6045367f-ca45-4ad9-852a-266611143380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.209.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:2a:74:74:e9:fa:44:84:ed:fd:31:19:a1:47:64:2b:9b:b5:
         ac:eb:c5:6e:3b:8e:94:d6:c9:53:ab:a4:1c:97:83:c0:aa:6c:
         7b:d3:6a:2c:cd:eb:08:ab:bd:52:ba:28:3d:50:e8:ae:73:98:
         21:8f:87:74:e6:06:3b:4f:af:2d:44:26:4c:3d:68:9f:01:cb:
         c7:4a:37:a7:54:98:32:6f:de:83:31:55:e9:1c:05:21:dd:38:
         4c:b0:0d:0f:3b:70:d8:30:6e:c7:bc:9d:7e:04:b5:a1:d1:d0:
         55:20:fc:e7:40:a7:80:29:b6:76:92:f4:e2:77:8e:a3:09:8b:
         71:7e:75:96:01:b3:27:56:32:eb:c8:f9:d4:92:5c:3a:b6:18:
         67:36:e8:dc:24:91:e7:ac:b9:2c:4d:db:01:73:f4:d4:75:74:
         db:9a:d9:24:ea:e0:ad:53:b8:fc:2f:d9:a2:2a:11:03:30:62:
         9e:80:92:64:55:1e:14:ac:b1:2f:cb:88:68:c3:ff:2e:49:d3:
         38:bb:be:51:a3:16:8a:9a:91:0a:da:23:9c:b3:f3:07:76:fa:
         40:44:22:c5:ea:75:f7:2a:db:b0:ef:db:a8:24:e5:00:57:37:
         4a:56:1e:45:78:5a:4f:e1:40:c3:35:29:a9:bb:99:57:af:e1:
         8c:06:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:15:57 2026 by rpki-client