Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/f81064c9-bd58-355f-bdcf-e895dd46de9d.roa
File:                     f81064c9-bd58-355f-bdcf-e895dd46de9d.roa (raw, json)
Hash identifier:          QOhtmy5XffgWBvCuRV7FUYX4uhgBAhQKZKMCCV1qI3Q=
Subject key identifier:   4B:EC:CD:C9:DF:A1:0D:6E:7C:17:0A:A0:2C:43:04:07:45:A0:4D:12
Certificate issuer:       /CN=0f6c1648-2b22-43a6-8efb-17412332f6fe
Certificate serial:       010D0C9F4328584D2644CC755F33451503041E00
Authority key identifier: D9:F5:72:69:96:80:76:47:F7:C4:42:79:20:9A:17:F6:B2:2B:3F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/f81064c9-bd58-355f-bdcf-e895dd46de9d.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     11501
IP address blocks:        198.205.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/0f6c1648-2b22-43a6-8efb-17412332f6fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/0f6c1648-2b22-43a6-8efb-17412332f6fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:cc:75:5f:33:45:15:03:04:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6c1648-2b22-43a6-8efb-17412332f6fe
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=0df54158-395c-4374-a3fd-f1f85aa4c25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1a:1e:27:33:84:51:dc:93:2d:64:aa:af:77:
                    e1:98:52:a3:88:0f:e4:20:58:59:17:e5:cc:17:95:
                    05:0c:6f:1e:68:4b:2e:99:cb:c8:7d:df:7d:a0:f0:
                    28:61:29:56:dd:d3:e4:f3:59:c2:57:3d:7a:25:f5:
                    ad:50:31:79:10:f4:3c:7e:a1:46:3d:27:54:14:ec:
                    28:14:d3:a9:61:34:ce:44:8b:60:bb:be:fb:72:40:
                    df:53:34:07:7d:60:9a:80:8b:d8:dc:84:43:29:a9:
                    8b:e0:56:c5:dd:e0:d8:03:61:c5:7b:51:7e:d4:a5:
                    8d:be:76:75:7f:cd:9d:4c:4a:dc:fe:24:09:d4:32:
                    57:48:43:f3:15:1f:d3:d0:ac:4a:e7:e9:09:56:eb:
                    7a:dd:4c:03:8f:46:ad:24:93:de:3e:cb:72:41:ec:
                    8d:2b:0f:28:a2:90:ba:6b:d8:2a:b2:7a:1b:25:ca:
                    87:01:f3:89:1b:76:ee:77:6c:5e:36:f0:2b:15:fe:
                    2a:8c:13:9f:29:39:a7:75:25:ea:5b:b1:2d:31:cd:
                    e3:f6:54:87:74:21:e9:ab:40:3b:83:25:1d:ff:53:
                    41:e5:23:8b:c7:3f:89:d3:a7:ce:1d:88:f2:94:86:
                    8a:ab:f2:47:2b:ff:09:52:3a:86:22:f8:f0:18:1b:
                    69:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EC:CD:C9:DF:A1:0D:6E:7C:17:0A:A0:2C:43:04:07:45:A0:4D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/f81064c9-bd58-355f-bdcf-e895dd46de9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/0f6c1648-2b22-43a6-8efb-17412332f6fe.crl

            X509v3 Authority Key Identifier:
                keyid:D9:F5:72:69:96:80:76:47:F7:C4:42:79:20:9A:17:F6:B2:2B:3F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.205.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:83:08:6a:f9:74:ea:be:fe:d6:87:69:50:98:fd:83:d9:f6:
         66:08:4f:e5:4e:1c:57:ef:59:49:06:0e:d9:50:78:84:fb:e5:
         0a:a3:50:90:cc:8e:41:f1:63:0c:2f:4f:df:a2:ef:6e:c5:02:
         d1:b8:a6:de:d4:b8:92:a2:dc:07:39:b2:c9:a7:1c:9c:af:93:
         82:06:80:bb:3f:ad:28:88:fb:16:3b:c8:a1:fd:f6:af:96:7f:
         22:32:81:69:37:f0:89:46:e4:32:ea:79:9d:c6:92:09:ea:01:
         97:aa:cb:37:41:7b:7d:08:79:a9:b4:29:2d:6d:60:a5:55:9a:
         d3:83:83:f2:1c:bf:48:32:eb:f2:98:23:37:dd:d4:c4:47:66:
         a0:37:79:e8:8a:0a:23:43:a5:02:52:97:a8:f1:80:e1:89:bf:
         30:83:7c:53:b1:03:5e:b0:0a:1a:99:3c:51:84:12:fa:85:92:
         91:d1:45:86:05:e7:55:3a:6b:52:09:34:cb:58:98:b3:f3:c5:
         a3:4c:86:e9:b9:24:17:b1:bf:36:7d:d4:4d:ef:00:c6:94:c6:
         94:9c:9d:d8:85:51:5a:85:97:90:57:ea:fa:ee:1d:ec:85:0c:
         f8:37:d0:e7:87:37:ba:4a:ed:ec:7e:39:66:3d:b8:4f:64:be:
         0f:cd:05:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:47 2026 by rpki-client