Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/75f1dea7-8d30-3854-be8c-05334c3ae86c.roa
File:                     75f1dea7-8d30-3854-be8c-05334c3ae86c.roa (raw, json)
Hash identifier:          fUUAU0zbe09XwFvSyB9/3U4a/56FrZs2QllyDUfGQQ0=
Subject key identifier:   5D:A6:97:4C:82:0D:11:89:8F:49:CA:7D:FB:0E:8A:76:ED:29:2B:98
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584D300A5AF28746532B11DFFAA0
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/75f1dea7-8d30-3854-be8c-05334c3ae86c.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        206.225.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:5a:f2:87:46:53:2b:11:df:fa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=9a7a863c-6b52-40c2-b96f-20fc99f49e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:30:b4:f1:bc:ae:ea:51:d0:88:44:f0:b2:
                    f2:5e:32:40:e9:5c:3f:09:b7:94:f2:44:0f:2e:ae:
                    db:f0:a3:5b:6a:4b:21:69:64:f1:48:73:2e:cf:eb:
                    f3:7f:bd:d3:fd:4e:fe:fb:50:05:4c:7f:7a:a1:69:
                    9e:00:0c:4b:e0:b8:54:1b:46:32:5a:4f:db:c6:84:
                    1f:69:61:78:fd:04:40:6e:89:30:d4:a0:83:33:02:
                    1a:db:92:fc:50:8d:0b:fd:cd:10:8a:e7:d5:1e:d6:
                    7b:24:8d:63:90:f5:04:78:fc:69:39:0b:8e:12:8c:
                    77:28:6b:1e:4f:b5:f6:f7:ad:00:79:0a:72:5e:e4:
                    40:2f:c3:82:e6:08:ed:ae:6a:a6:67:76:82:c7:d5:
                    63:78:d8:13:fe:95:f1:6a:19:4b:2c:e4:82:c1:f5:
                    f7:cf:34:1d:10:4c:bf:e7:b5:78:d1:aa:a7:07:ff:
                    ab:28:07:cc:6f:43:53:b8:d0:57:94:52:68:29:a0:
                    6f:c8:4d:84:d5:e6:72:b3:a8:b8:ed:77:e4:cd:33:
                    ff:30:33:cc:64:1e:15:df:dc:ae:29:c5:c6:2b:1f:
                    3b:78:b1:d2:ef:ee:03:b2:7a:f8:c5:1f:64:0b:5c:
                    f5:1e:0a:85:c2:dc:39:6d:b5:18:f8:03:2f:51:14:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A6:97:4C:82:0D:11:89:8F:49:CA:7D:FB:0E:8A:76:ED:29:2B:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/75f1dea7-8d30-3854-be8c-05334c3ae86c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:77:ea:86:40:6a:cc:be:00:da:fb:d1:e9:e1:00:f0:8f:d7:
         9a:3b:61:d8:4c:f2:c8:53:31:92:0e:68:10:4c:2c:86:21:55:
         25:9f:af:c7:9f:9c:2e:5b:e6:4c:ac:12:00:00:4f:8a:ac:4f:
         cc:63:b8:98:18:21:25:2d:74:78:90:e3:51:0c:a4:56:78:bc:
         ca:8d:c7:db:61:d5:ed:48:1a:aa:0f:62:5f:99:a3:e3:ff:33:
         c2:0e:79:a9:b5:1b:c8:e4:74:e9:a0:7b:ca:2f:a3:ff:83:10:
         51:b7:0c:f9:c3:8c:d8:f5:18:84:58:7e:d8:ad:7d:47:c4:49:
         8a:3c:00:8a:ee:85:8c:c4:eb:41:fc:33:43:e9:e2:1f:07:ed:
         b9:aa:ef:68:b1:95:b4:79:6a:3c:fc:f5:3a:96:b5:dd:49:02:
         20:b1:33:82:be:50:ea:ef:cf:95:3f:7e:16:9f:21:ea:1c:ec:
         b6:0d:f9:e1:3d:40:d4:6b:19:5b:11:85:fd:88:b5:0d:d7:08:
         b1:49:b7:f6:74:b5:25:d7:72:b5:1c:4b:bc:ed:27:66:35:ef:
         b0:b1:4a:6b:e6:62:8b:b2:19:88:61:49:a5:cd:dc:fd:94:b3:
         0a:b0:0e:39:8c:bd:3d:59:69:38:74:4c:2a:9a:c1:48:12:57:
         70:69:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:34:43 2026 by rpki-client