Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/b6d22be5-c26c-3722-8949-44a175eadd6e.roa
File:                     b6d22be5-c26c-3722-8949-44a175eadd6e.roa (raw, json)
Hash identifier:          VUR3kOgMS+Ym5883gUv9ZMxxZQYDV8pZc4X33l+xPfk=
Subject key identifier:   D4:F7:1F:EB:36:C3:A9:D2:34:21:5B:75:25:CD:91:CA:35:BF:E5:4F
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F4328584D524344BA85B0885A0AA66700
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/b6d22be5-c26c-3722-8949-44a175eadd6e.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     16509
IP address blocks:        205.201.44.0/24 maxlen: 24
                          205.201.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:44:ba:85:b0:88:5a:0a:a6:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=60ef1895-bf97-424e-be40-12c270f47e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:44:1d:18:f7:b0:1b:7b:48:35:1c:18:da:ef:
                    89:4d:3b:db:51:ac:16:a8:0d:0b:d5:dc:5d:88:d2:
                    70:ba:4f:5b:ea:04:ab:43:a8:32:82:9f:c9:69:14:
                    53:50:cc:3c:d3:bc:9e:d8:54:1b:4c:6a:9b:cc:ba:
                    23:c8:3e:d4:99:50:8f:4a:74:ca:b0:bd:d9:8c:4b:
                    b8:51:7e:5e:63:7b:b3:a7:36:e3:fe:12:93:45:19:
                    fb:3e:c8:c7:20:5d:a3:3d:49:bf:66:c5:0f:59:4e:
                    8d:88:f9:1e:01:3f:d3:4b:20:1c:f2:e7:64:75:94:
                    cd:9d:1f:bf:16:df:46:c6:29:fe:32:82:e6:f6:ba:
                    93:b1:4b:10:64:fa:32:a8:0e:fa:07:c3:d7:99:d0:
                    c9:68:3d:12:0a:1e:fa:a6:56:dc:6f:83:a3:0c:b7:
                    cc:7d:37:74:49:f7:ad:ec:32:c7:c5:a9:1c:81:08:
                    8b:f4:53:01:50:f6:d3:75:90:b3:8d:b9:99:57:1d:
                    cc:37:93:1b:db:75:08:bd:fa:f2:2e:ee:6b:97:69:
                    f6:f0:b3:82:9e:61:ca:48:8a:98:03:f7:61:3a:58:
                    aa:2a:64:b7:a2:eb:87:7a:2a:43:a8:79:cb:4e:fa:
                    f0:7f:e0:3e:3f:41:8e:a0:8b:f1:77:e4:76:2f:98:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F7:1F:EB:36:C3:A9:D2:34:21:5B:75:25:CD:91:CA:35:BF:E5:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/b6d22be5-c26c-3722-8949-44a175eadd6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.44.0/24
                  205.201.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:6b:c3:ae:3c:a5:8d:58:a5:bb:89:a5:2a:88:42:88:80:bb:
         5f:7c:51:12:34:0a:8a:fa:71:6b:58:7e:a8:35:8b:5a:f5:78:
         2b:83:da:95:8f:1b:72:6b:16:72:30:f1:9a:fb:97:f8:ca:38:
         1f:3d:82:42:ed:2b:93:58:b5:9a:cf:91:1d:43:a7:c7:30:99:
         42:fa:0a:0e:cb:97:40:ce:5c:1e:da:62:0a:ac:7d:91:17:cc:
         1d:e7:2a:94:48:5a:1f:ba:59:56:70:31:70:93:9f:c6:93:72:
         86:ab:0c:e8:17:e5:b1:0b:df:d7:76:e3:83:4e:ac:f0:77:1a:
         91:b4:50:b9:c3:4e:91:23:22:82:a0:37:19:e0:6d:3f:68:a9:
         32:2f:5e:e5:06:fb:e9:67:ef:c6:52:02:75:6e:22:ab:f3:16:
         61:ff:9d:0f:55:13:0c:3f:05:f0:85:2b:83:4b:6d:a0:91:48:
         60:de:51:64:2a:21:48:ca:29:99:e3:f8:29:09:cb:d9:f0:60:
         b5:66:bf:6f:e6:7c:3b:4a:5f:86:99:42:b7:23:65:2f:66:29:
         73:25:e4:43:3e:a8:7c:05:40:45:b0:4f:2c:24:aa:c9:9f:62:
         c2:ec:36:11:03:cd:4b:fc:af:a3:98:8f:2d:64:84:94:f9:b8:
         1e:9e:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:30:56 2026 by rpki-client