Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/5a9aa3ab-b4a1-37dd-a3bf-04f8215d692c.roa
File:                     5a9aa3ab-b4a1-37dd-a3bf-04f8215d692c.roa (raw, json)
Hash identifier:          zIMLe+gJZBTDeqLmLhuryVLxmGt7pfAKKnlz6ugbLUM=
Subject key identifier:   88:FA:52:22:81:63:98:2B:CC:DB:BF:7A:84:AD:D0:A0:A1:A2:47:2F
Certificate issuer:       /CN=fdccefde-032f-46cb-9138-30e7726ea619
Certificate serial:       010D0C9F4328584D8EF55CC1732B87C2B70A7780
Authority key identifier: 5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/5a9aa3ab-b4a1-37dd-a3bf-04f8215d692c.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        205.147.80.0/24 maxlen: 24
                          2604:f700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5c:c1:73:2b:87:c2:b7:0a:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdccefde-032f-46cb-9138-30e7726ea619
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=d1d3b57d-8003-42e4-8f99-27e2c12a78b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:73:de:f9:8f:a0:d4:4b:c6:46:d7:d0:30:
                    f0:2a:ef:01:59:18:f1:19:12:30:63:66:5e:5a:26:
                    d7:ca:d4:9f:6b:01:94:24:3b:59:e8:bf:cd:d0:c3:
                    a4:bf:ea:f1:89:75:8e:81:6e:b0:54:41:48:5f:34:
                    18:71:84:60:1f:98:50:bd:87:b4:cb:a9:13:22:2a:
                    02:a0:b5:1a:55:e9:9e:82:a8:05:67:1a:01:c7:70:
                    f8:e8:1c:a2:8a:8f:33:99:97:cf:0e:89:13:17:98:
                    ab:bf:76:59:7a:2f:72:c2:0a:b1:f8:99:f5:0c:5f:
                    f1:2e:e3:9a:e1:0d:22:e9:6f:85:2d:af:92:a3:38:
                    fa:fb:21:70:77:c9:9b:27:31:e6:9c:c6:d4:06:c8:
                    61:f3:27:e6:ea:c0:78:3b:cd:45:d4:85:7d:de:d9:
                    88:a7:6f:ca:c6:66:ad:6d:0b:67:15:84:f7:19:84:
                    1c:31:25:1c:f4:eb:0b:7b:21:ea:70:ad:cb:83:47:
                    5c:9e:bc:17:37:f6:e1:ac:f6:dd:00:76:f4:52:42:
                    a7:0a:9f:e5:2b:55:5f:2c:33:cb:2a:77:85:dc:db:
                    42:49:eb:6e:e0:b1:0f:7b:52:4f:ce:62:3d:34:62:
                    0a:bf:d4:5f:71:b8:af:f7:96:7b:a6:e5:81:45:1e:
                    c4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FA:52:22:81:63:98:2B:CC:DB:BF:7A:84:AD:D0:A0:A1:A2:47:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/5a9aa3ab-b4a1-37dd-a3bf-04f8215d692c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.80.0/24
                IPv6:
                  2604:f700::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d8:19:f9:7c:ed:49:00:46:24:3f:6d:92:9e:16:65:c9:6e:
         f6:3c:a3:1e:68:0e:52:fa:50:89:24:0f:0e:91:61:44:c3:5c:
         14:78:ed:13:f5:41:85:85:f8:7e:ff:2e:de:dd:67:75:10:bc:
         3c:4b:cf:2b:76:b7:da:14:55:65:aa:19:20:fd:38:f6:94:0c:
         26:10:59:f5:45:96:f6:2e:97:47:0c:6a:0e:67:15:0c:ca:ae:
         e3:c0:41:34:cb:a1:9f:0c:0a:25:18:5b:e9:22:de:94:46:b7:
         33:ae:dc:71:ac:3b:3f:51:69:b0:51:17:91:40:a0:cd:d3:df:
         3c:be:ee:d6:e0:24:7b:7d:41:e1:94:03:3c:2b:5c:6c:12:ff:
         8a:38:97:80:94:7a:59:a7:6e:9b:e0:1e:58:a5:50:56:a2:5a:
         92:31:46:48:e0:c2:13:8a:9d:36:24:28:3c:af:d1:57:38:e7:
         83:97:e0:f3:13:44:79:22:59:52:a2:9c:57:07:1f:03:33:78:
         c2:20:97:75:f5:a0:e0:f9:76:83:62:0b:21:4f:32:81:0b:e4:
         e1:87:dc:a3:26:7f:b6:f8:00:3b:be:a1:90:dd:b2:aa:91:54:
         e6:28:27:85:c2:20:a1:9a:e0:82:3f:5f:98:e6:25:76:92:bf:
         bd:cf:ac:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:51:15 2026 by rpki-client