Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa
File:                     d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa (raw, json)
Hash identifier:          GyG5VUYL3CzpaAHjw8GMhCWH2iSDlYsYG90/7RaYy/M=
Subject key identifier:   4E:10:D9:1D:38:96:2D:24:C2:C8:53:4B:86:4A:64:A9:13:D8:4C:96
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F4328584E534F3B5EC7F6B7A7DB12ED80
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     812
IP address blocks:        204.50.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:3b:5e:c7:f6:b7:a7:db:12:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=839b3f67-6df1-4188-874f-c9f49b95ee62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:7e:8c:95:84:04:fa:21:49:c1:cc:60:6a:
                    7a:e9:46:1c:ab:ce:f5:4f:51:22:a2:43:f9:cc:2c:
                    81:6d:77:64:1b:d9:f9:47:85:1d:c8:c9:97:fc:e1:
                    41:e8:8b:51:06:d4:cb:f2:a4:74:32:97:4e:9a:1f:
                    e0:75:ee:c2:b8:b3:5a:dc:db:9c:90:b3:2a:56:8f:
                    00:7d:da:49:54:de:3f:b2:27:66:09:b3:0e:03:19:
                    94:47:f6:05:10:06:c3:1b:e3:83:f3:7c:45:db:27:
                    99:83:02:44:12:50:81:bd:59:ce:53:fd:bd:76:2d:
                    df:23:1f:fc:8a:5d:76:56:5e:ad:e4:24:e1:1b:65:
                    ae:7a:9a:4e:9f:79:09:1d:36:88:a7:e6:b1:58:3d:
                    69:09:60:06:35:31:96:b8:de:1a:4c:58:08:8b:03:
                    e5:5b:9d:42:7d:06:9a:5a:38:43:c7:01:21:82:b4:
                    e3:56:26:53:f9:3c:15:9f:2e:ca:47:fa:25:36:74:
                    26:a5:d6:90:30:be:55:7a:84:8e:86:08:02:c0:ea:
                    ce:47:fb:ca:29:53:70:0f:c0:16:8c:ac:99:a8:8e:
                    b1:0a:88:2c:ad:14:48:5c:e5:52:5a:88:23:a2:20:
                    a1:6e:28:bf:3c:31:a0:f9:46:f9:93:9d:e4:4f:db:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:10:D9:1D:38:96:2D:24:C2:C8:53:4B:86:4A:64:A9:13:D8:4C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.50.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ba:57:5d:82:37:61:39:61:d7:24:b1:25:6b:bb:60:7f:c6:
         da:d2:74:41:e3:67:20:e8:f9:fe:7a:fc:5e:b7:9d:13:aa:82:
         6d:44:8f:df:e4:3b:84:f3:dd:58:d5:63:b7:37:bd:c7:fb:4d:
         56:f6:f8:ec:aa:df:3e:18:36:5d:53:9a:f5:de:87:52:d9:69:
         6f:e9:b3:f8:a8:db:05:d6:d8:34:f9:7a:34:5a:09:41:40:98:
         af:46:8a:98:f8:e0:ab:7e:ee:9a:b6:53:e2:90:5b:af:f3:35:
         71:d2:30:3e:26:c0:72:0a:76:95:24:08:90:e7:60:cc:3e:09:
         58:62:8f:cd:c5:2f:72:67:59:2a:07:df:5b:ec:43:a7:5b:2a:
         e1:d0:b9:d5:e4:47:af:4a:96:8b:f4:70:2d:83:5b:c5:3e:49:
         80:6a:4b:54:c7:27:b5:f7:f3:ca:89:11:78:63:0e:05:91:5d:
         e5:28:a5:1e:84:ea:8d:11:aa:94:9b:2d:aa:fb:60:47:11:e8:
         a3:5c:c2:c0:d6:70:cc:f7:04:86:48:83:48:cf:18:06:7e:94:
         f7:df:c3:c0:65:83:f4:e3:95:a8:49:50:9a:98:44:ce:e9:45:
         63:db:d9:8e:72:41:ae:48:cc:fd:11:a3:79:8f:5e:90:78:c8:
         79:24:9c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:33:32 2026 by rpki-client