Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa
File:                     acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa (raw, json)
Hash identifier:          dWYS3iaHMC3iAmK6ZV0+kqzFmFiQu+96Ui79YgC1z1U=
Subject key identifier:   54:CF:07:1B:96:28:82:C7:0D:16:B9:DC:6A:23:5F:BA:CF:4C:D4:2F
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F4328584D524347E57FEC8F4811D6B780
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     16509
IP address blocks:        205.201.40.0/24 maxlen: 24
                          205.201.41.0/24 maxlen: 24
                          205.201.42.0/24 maxlen: 24
                          205.201.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:47:e5:7f:ec:8f:48:11:d6:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=7d093a71-ddd5-4853-b4ee-ef1d7363be8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:78:af:b0:e2:ff:0b:00:43:9c:99:b7:e1:dc:
                    70:75:3d:62:34:8b:fb:bc:1b:2c:61:79:a4:1c:03:
                    ca:dd:b3:3a:d7:63:d9:71:60:60:2e:bf:d6:74:6c:
                    83:64:97:b2:22:f6:01:81:78:53:08:8f:f3:ce:6b:
                    86:19:9a:51:02:28:2b:9a:07:67:6c:0f:1f:ca:d8:
                    75:0c:dc:3b:d2:de:e2:1b:7e:c8:84:8d:ab:2f:02:
                    2f:20:33:a5:41:ee:14:6f:ba:25:5a:ca:a0:fc:b7:
                    cf:70:4d:c6:fe:67:c3:31:01:bf:b8:f5:b6:4f:73:
                    c1:81:f1:c0:ed:35:30:57:b1:af:91:3c:d8:e7:d0:
                    22:53:7c:8b:4f:1d:af:c4:a7:10:36:09:ba:4d:9b:
                    0f:fd:f4:ea:14:b3:d9:50:86:4a:17:e8:f4:32:de:
                    84:c0:b1:10:21:47:88:8c:7b:16:f6:54:6d:46:4b:
                    61:d1:38:79:21:71:e5:31:fc:80:60:83:87:9d:c2:
                    53:e5:d9:07:06:1e:1d:2b:ca:ff:8d:4d:ce:00:62:
                    db:7a:60:d8:9e:ce:c6:9a:da:1f:93:18:20:7c:9d:
                    df:13:77:39:9c:71:b9:38:25:74:28:e9:8a:45:60:
                    2b:ee:5d:f1:1f:2f:bd:b0:79:cd:cd:ea:3a:c6:18:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CF:07:1B:96:28:82:C7:0D:16:B9:DC:6A:23:5F:BA:CF:4C:D4:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:75:06:96:65:11:2c:aa:3f:d8:99:97:a0:61:d1:14:a6:c1:
         c6:cf:d7:25:cd:16:ab:34:30:07:e3:c2:c0:f3:53:59:68:73:
         ea:20:fb:2c:94:47:11:e7:dc:20:d4:ac:22:fb:16:a7:69:0b:
         19:b0:39:f3:be:83:15:90:f4:65:b9:50:a1:13:1f:1b:40:5b:
         b1:fa:6b:1a:81:5f:19:e7:1d:04:5b:68:c9:70:af:84:66:e8:
         c5:7d:3c:5d:cf:f3:a4:36:12:93:f8:18:5d:52:51:ff:14:93:
         0a:bd:f9:67:34:bc:2b:17:81:70:a2:46:46:01:29:9a:54:6f:
         c0:d8:7f:05:a6:8b:e7:87:99:ad:a4:36:d0:29:fc:e1:3b:63:
         89:e4:ae:1f:2e:9a:1b:04:34:9b:1b:a2:37:b3:c4:58:65:f8:
         67:17:60:4e:95:d8:af:96:47:d1:df:33:df:ff:6e:8d:09:a2:
         c2:5e:76:ef:bc:e9:8c:0d:d6:f4:d9:8f:68:c7:75:85:19:c7:
         03:f8:64:ac:39:ad:74:96:c1:5e:b3:1a:f4:c2:2f:4e:d0:2d:
         d4:4f:16:81:e7:10:f9:99:ed:d7:85:80:aa:ba:d1:1b:4f:05:
         12:75:a4:87:9b:61:18:bb:83:72:69:0c:b5:94:2a:6d:f9:5e:
         fa:c2:85:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0flf+yPSBHWt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlYTcwOTktZDJlNS00NWUxLThjMWUtYTgyMDZmNTQ5
NTM5MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
N2QwOTNhNzEtZGRkNS00ODUzLWI0ZWUtZWYxZDczNjNiZThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHivsOL/CwBDnJm34dxwdT1iNIv7vBssYXmk
HAPK3bM612PZcWBgLr/WdGyDZJeyIvYBgXhTCI/zzmuGGZpRAigrmgdnbA8fyth1
DNw70t7iG37IhI2rLwIvIDOlQe4Ub7olWsqg/LfPcE3G/mfDMQG/uPW2T3PBgfHA
7TUwV7GvkTzY59AiU3yLTx2vxKcQNgm6TZsP/fTqFLPZUIZKF+j0Mt6EwLEQIUeI
jHsW9lRtRkth0Th5IXHlMfyAYIOHncJT5dkHBh4dK8r/jU3OAGLbemDYns7Gmtof
kxggfJ3fE3c5nHG5OCV0KOmKRWAr7l3xHy+9sHnNzeo6xhgBKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFTPBxuWKILHDRa53GojX7rPTNQvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZGVh
NzA5OS1kMmU1LTQ1ZTEtOGMxZS1hODIwNmY1NDk1MzkvYWNhYWUxMDAtMGM1Ni0z
NmQ5LTk3YTYtYWE4N2NjN2EzZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmRlYTcwOTktZDJlNS00NWUxLThj
MWUtYTgyMDZmNTQ5NTM5L2ZkZWE3MDk5LWQyZTUtNDVlMS04YzFlLWE4MjA2ZjU0
OTUzOS5jcmwwHwYDVR0jBBgwFoAUUxlbQ+NFauATsk2o+FU2Z/wB9SgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZGVhNzA5OS1kMmU1LTQ1ZTEtOGMxZS1hODIw
NmY1NDk1MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzckoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF51BpZlESyqP9iZl6Bh0RSmwcbP1yXNFqs0MAfjwsDzU1loc+og+yyU
RxHn3CDUrCL7FqdpCxmwOfO+gxWQ9GW5UKETHxtAW7H6axqBXxnnHQRbaMlwr4Rm
6MV9PF3P86Q2EpP4GF1SUf8Ukwq9+Wc0vCsXgXCiRkYBKZpUb8DYfwWmi+eHma2k
NtAp/OE7Y4nkrh8umhsENJsbojezxFhl+GcXYE6V2K+WR9HfM9//bo0JosJedu+8
6YwN1vTZj2jHdYUZxwP4ZKw5rXSWwV6zGvTCL07QLdRPFoHnEPmZ7deFgKq60RtP
BRJ1pIebYRi7g3JpDLWUKm35XvrChbE=
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:29:33 2026 by rpki-client