Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/192a0eaf-836c-32b5-ac2e-fd2a8ee520bf.roa
File:                     192a0eaf-836c-32b5-ac2e-fd2a8ee520bf.roa (raw, json)
Hash identifier:          6RYm2pIk9KeToxqZlpvtqUvJB85nf94+cy+ovwOlG7c=
Subject key identifier:   90:D9:D5:61:39:27:46:CE:DF:9E:B2:07:34:9B:7E:F7:83:B4:B1:4C
Certificate issuer:       /CN=3cd40041-6571-4f30-b76a-4746a4c2d957
Certificate serial:       010D0C9F4328584D44FA2D301DB0B0AFFB187E80
Authority key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/192a0eaf-836c-32b5-ac2e-fd2a8ee520bf.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     206885
IP address blocks:        205.207.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:2d:30:1d:b0:b0:af:fb:18:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd40041-6571-4f30-b76a-4746a4c2d957
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=9a91decc-2c4e-4661-bec7-656346c0fe24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:7a:58:22:9e:fb:92:5e:66:bb:d1:01:ca:
                    74:d4:4a:35:78:bd:16:dd:80:f0:0b:20:20:62:38:
                    ea:d0:2b:23:e9:ff:7d:b8:12:2b:4e:6b:4c:2f:d2:
                    d3:31:39:ad:5f:6b:1d:7c:23:63:5e:85:b2:50:99:
                    fe:c9:1d:ed:93:3c:8e:ea:19:6a:35:7c:fe:d6:35:
                    dd:44:79:3e:fa:41:43:c1:2b:a0:c3:25:25:e5:34:
                    de:45:08:96:44:68:35:ed:e0:5f:0c:47:7a:61:6c:
                    57:dc:f4:9a:ed:8b:e4:c6:33:90:37:b8:84:68:af:
                    47:0e:b5:1b:5a:c5:7b:2e:fa:a7:cd:ee:9c:2a:7a:
                    8a:cd:f6:ce:e9:05:3f:51:74:46:40:a9:1d:ca:8e:
                    4b:6e:75:bb:36:41:3c:21:fc:43:44:61:e2:a4:ed:
                    8b:db:c4:b3:3b:70:1d:79:3f:d7:2b:eb:e1:5a:30:
                    d5:f7:6a:ea:65:36:17:3a:2f:3f:cf:6a:ff:a2:ed:
                    73:c1:13:64:54:e3:1a:7a:fa:87:b8:60:2a:42:c6:
                    57:f7:36:3f:e8:9b:f8:4c:26:c6:21:ef:9b:f4:62:
                    20:e3:a0:30:51:c3:24:aa:b7:42:9d:2b:45:5a:99:
                    bf:48:11:de:5b:9b:09:e4:44:9f:b6:b4:e0:6d:e6:
                    1f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D9:D5:61:39:27:46:CE:DF:9E:B2:07:34:9B:7E:F7:83:B4:B1:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/192a0eaf-836c-32b5-ac2e-fd2a8ee520bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:dd:a0:4a:3c:95:61:8c:96:54:3e:3d:f3:f2:52:11:a3:72:
         9f:67:c3:42:2f:fd:e7:de:02:29:15:f2:bd:53:79:ca:d4:f8:
         71:3d:a5:c4:bf:10:a7:88:28:be:43:72:06:31:bd:04:81:85:
         89:fe:f0:e1:49:e8:1c:a3:b0:39:b7:3c:b2:a1:98:b5:c2:f1:
         8b:93:f6:89:77:ef:e0:9e:70:4e:e8:28:e0:d3:4f:29:c7:f8:
         b2:0f:11:a1:85:3a:e0:71:be:a2:64:de:10:bf:65:4a:12:51:
         03:82:bf:ea:0c:c9:55:0d:0c:03:db:b0:44:e9:c1:65:5b:ee:
         7a:04:34:a8:8c:44:08:e1:d4:de:cd:c6:f6:8a:5f:27:73:ad:
         d8:38:08:84:01:74:64:10:36:7b:af:7f:df:fa:1e:c8:a3:89:
         da:63:05:54:25:26:32:6b:f3:d8:b7:2f:bd:43:da:a7:81:84:
         99:5e:60:2c:2e:54:30:46:89:ac:43:83:97:69:12:40:97:37:
         44:87:2e:55:2f:fa:44:e1:ba:15:e7:da:33:f5:91:d2:1e:46:
         68:a5:a0:0b:60:95:e7:57:7b:00:f0:e4:58:cd:3f:11:1f:54:
         d4:37:69:f0:e8:02:fc:67:eb:27:4e:a5:f3:fa:72:01:ee:7f:
         6b:c6:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:23 2026 by rpki-client