Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c6c77e3-87ad-3911-8e86-a08dd1931b8b.roa
File:                     3c6c77e3-87ad-3911-8e86-a08dd1931b8b.roa (raw, json)
Hash identifier:          x/DAUhZlzrbWEvm29U//W3IK29g7Vh1bpTRCHPLt4W4=
Subject key identifier:   CD:0E:93:70:C1:BB:DE:35:6C:78:3E:6A:1C:BB:57:4B:6A:84:06:59
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D359FA157D727C51859961580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c6c77e3-87ad-3911-8e86-a08dd1931b8b.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     0
IP address blocks:        205.205.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:a1:57:d7:27:c5:18:59:96:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=07678e16-0105-4846-ab42-a8a535abd062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:8e:e7:21:e5:75:49:27:2b:9e:01:28:31:
                    e2:2c:9e:08:f0:ee:87:ec:2a:b3:6e:ad:96:ed:f6:
                    fc:2e:22:20:df:14:4b:01:6d:a9:b4:df:21:e5:7a:
                    dd:c9:48:58:ae:23:3a:58:cb:de:1e:5d:36:39:d9:
                    48:1b:32:d1:7b:9d:a6:aa:35:ca:3c:29:f9:13:e8:
                    55:30:db:c8:37:ec:02:d3:14:11:bb:c0:8e:3f:fc:
                    75:d4:2e:ca:47:61:cd:dc:85:d3:48:45:87:1f:60:
                    a7:27:65:ea:46:45:b5:0e:1c:e3:03:c9:34:98:c6:
                    d5:c5:db:c0:36:c9:65:a4:9c:e5:e1:4b:d6:85:af:
                    1b:5c:b4:ab:63:ab:2e:59:9a:33:91:8b:41:06:82:
                    80:58:79:99:65:22:17:71:5b:68:03:5e:fc:e5:31:
                    e7:98:f9:ab:86:42:0c:78:71:0e:29:be:14:df:80:
                    78:ae:ba:67:09:42:52:22:c1:03:32:a4:67:0d:81:
                    53:5f:74:e2:67:9b:17:03:f7:ef:58:a1:21:9f:9b:
                    8f:1e:32:4f:22:dd:44:af:ee:99:dc:7b:a0:2e:62:
                    00:98:dd:b2:fc:16:3e:5a:f2:69:7b:1e:ca:6f:13:
                    02:9c:49:36:3e:25:0c:1d:a4:f1:05:4c:17:37:10:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0E:93:70:C1:BB:DE:35:6C:78:3E:6A:1C:BB:57:4B:6A:84:06:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c6c77e3-87ad-3911-8e86-a08dd1931b8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.205.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:73:16:ba:e7:a6:77:b8:6a:4a:50:27:b0:e6:bf:70:9f:
         31:51:9d:7e:4f:4a:bd:d8:46:01:41:73:39:34:31:13:54:32:
         12:c2:a1:8f:6e:15:6c:0b:da:02:de:1b:eb:55:e7:2b:db:46:
         25:aa:bf:06:a9:39:f7:8b:41:2b:b6:2a:13:5a:88:ca:4a:28:
         a3:7d:98:1a:85:4c:08:f3:21:c8:dc:46:1d:25:b3:68:62:48:
         16:2c:53:17:c8:26:f2:c5:d3:9c:c5:cf:20:a4:55:9b:6e:5a:
         ec:82:92:f3:cd:38:b0:52:bf:74:76:76:e4:83:d2:4e:61:3e:
         66:79:18:be:25:6d:da:aa:c5:29:4e:45:fa:8f:3f:a5:5e:7f:
         90:8d:81:ed:d7:8b:3f:4c:9f:be:b8:60:b6:94:ac:85:08:25:
         4c:6c:8c:b8:6e:af:e6:76:78:ef:52:12:89:68:bb:7e:e0:e3:
         84:86:fa:3f:71:72:74:16:f8:bd:a3:7b:62:27:ca:bc:6b:de:
         07:35:dc:82:73:b7:dc:b9:91:b1:55:66:15:c9:ff:77:25:2c:
         3a:2b:8f:cd:8e:bf:67:91:20:bb:fe:1a:42:d9:a7:71:98:7c:
         cb:10:4e:2a:f8:a9:3a:2b:25:ed:d3:79:d9:77:36:08:9e:8a:
         6d:82:ce:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:04 2026 by rpki-client