Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/bb332226-714d-3fa4-a1cc-38d701025db7.roa
File:                     bb332226-714d-3fa4-a1cc-38d701025db7.roa (raw, json)
Hash identifier:          ujRvNJE8jAAAQSX83eJJZGnKOtMIBUTXDsPLxOtb0Uo=
Subject key identifier:   4F:20:F0:C2:49:1E:68:F7:BA:34:B8:7E:63:5E:FB:0B:55:01:7F:BC
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584F331D111F598425FF875C9700
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/bb332226-714d-3fa4-a1cc-38d701025db7.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     401307
IP address blocks:        204.25.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:11:1f:59:84:25:ff:87:5c:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=a2fbae76-859f-4f80-804d-aa89e1cd7e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:17:ef:12:ec:36:77:7e:14:82:e9:fc:52:7a:
                    9b:c5:1b:11:9d:2b:ef:89:d8:92:3b:9d:7a:35:11:
                    dc:18:04:17:86:2d:d6:86:1f:37:ea:ac:7a:09:ee:
                    9d:9a:d3:c0:4f:d6:f2:5b:5c:79:8b:28:6d:d8:05:
                    12:c1:7a:2d:bc:ca:a6:55:fa:50:28:2b:b8:1c:08:
                    d2:cf:25:ee:97:a6:0e:95:02:9b:52:9d:7b:18:62:
                    ce:7a:6c:6e:41:e0:c7:6e:2b:63:ed:98:e5:2b:0c:
                    1f:83:0c:de:e9:6f:5b:e2:5f:45:ed:2a:75:62:de:
                    40:fa:61:79:13:4a:0c:f9:75:4e:60:16:6d:c0:20:
                    9a:b3:f6:c5:df:5b:6e:b7:45:04:0c:66:da:89:2d:
                    26:8f:b1:bd:cc:f3:45:83:20:90:54:8c:f1:b5:5a:
                    ae:4d:2e:13:c5:03:09:ed:ef:62:e6:8c:0b:ed:c4:
                    29:6d:80:56:f5:af:64:50:bd:f8:6c:f7:b8:bf:a5:
                    85:37:4e:15:9d:d7:d3:ee:fb:44:aa:52:63:e7:15:
                    97:86:fa:b1:ca:8f:5b:cf:49:33:0c:3a:d6:07:f1:
                    a0:3d:77:a3:21:81:11:d0:77:2c:a4:56:38:04:6e:
                    70:8e:0c:53:b0:6f:86:0b:b0:b8:2f:7c:4d:1f:d7:
                    0d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:F0:C2:49:1E:68:F7:BA:34:B8:7E:63:5E:FB:0B:55:01:7F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/bb332226-714d-3fa4-a1cc-38d701025db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e6:e1:f6:60:10:e2:11:a4:6d:2f:f9:aa:38:e3:69:0a:0a:
         f7:0b:77:60:1d:6c:a4:a0:e4:32:da:11:65:df:a6:5a:53:68:
         e8:c2:02:0c:e2:7c:ca:3c:ea:3a:58:dd:c2:4b:51:82:b9:fc:
         77:50:35:3d:4e:cc:92:2a:1f:29:2b:73:6b:98:78:ad:f5:18:
         94:ac:f6:7a:a7:df:26:1b:57:20:b6:fd:7d:de:63:7e:a7:42:
         6e:0b:89:c8:c3:1a:a9:e8:75:51:84:44:68:66:62:e8:ee:12:
         81:0b:ef:4e:e4:56:90:08:67:b8:62:41:08:0e:a9:5b:9a:a8:
         c3:b2:11:4f:4a:2a:ad:11:15:3d:48:2d:de:8b:52:85:9f:20:
         72:69:df:f7:ad:f6:8d:06:28:87:4e:e3:6b:7c:ff:24:06:58:
         b8:12:11:0d:a5:4a:81:15:81:64:d8:e1:81:b0:aa:80:6a:96:
         1a:44:51:ec:68:d9:ac:e0:b0:5f:8d:2e:8d:1a:cc:d1:cd:55:
         a9:38:82:2a:d0:ff:36:b7:8e:55:dd:f0:26:e3:75:94:e6:89:
         00:5b:e6:bf:a3:4c:bb:4c:c6:51:44:71:a9:cd:a0:14:54:8c:
         66:5b:1f:bf:24:b7:b6:54:66:46:25:d3:55:40:77:db:9a:a5:
         1a:a9:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:12:11 2026 by rpki-client