Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/9496dad9-5a4c-3b46-839f-95eb043c55d7.roa
File:                     9496dad9-5a4c-3b46-839f-95eb043c55d7.roa (raw, json)
Hash identifier:          K2ONbdwbUcTdfw38h426PlqAm560XogwQR90uSRlUec=
Subject key identifier:   E9:5B:6A:B3:AF:C9:0B:E6:9B:1B:45:B2:45:6A:11:EA:8D:E1:E2:C8
Certificate issuer:       /CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
Certificate serial:       010D0C9F4328584D1707DAD201753D80D9329960
Authority key identifier: 08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/9496dad9-5a4c-3b46-839f-95eb043c55d7.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     19108
IP address blocks:        205.236.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:da:d2:01:75:3d:80:d9:32:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=8b68b433-3f90-484a-ba81-63d7f878733b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:7f:69:29:2d:8d:d1:4b:5f:24:57:e9:74:
                    59:81:35:5a:00:39:e6:2c:72:ca:20:5e:82:e7:8c:
                    f0:35:ce:be:09:f3:2f:33:6f:c1:32:d5:e4:5f:85:
                    e9:dc:0a:e6:fa:3e:34:1a:ed:c6:f5:74:d4:4b:94:
                    a6:77:52:be:2f:79:35:e1:58:71:10:38:9e:cf:fc:
                    39:93:e5:49:ea:a3:ef:65:3d:34:ab:02:44:fb:2f:
                    8c:be:a1:51:1e:0d:b8:96:f9:e2:22:34:7b:22:a0:
                    6e:19:d3:3a:6e:d9:28:69:05:7f:7a:bc:0f:4a:69:
                    c4:6c:b5:a3:91:e4:f2:92:ec:3a:b6:94:5f:22:d4:
                    50:a0:2d:e9:95:14:dc:1a:4c:41:ca:dc:92:31:29:
                    25:aa:af:fb:c7:02:dd:d8:c1:22:e6:4a:48:48:44:
                    af:88:85:55:37:bf:55:a5:95:c2:eb:18:7e:7c:39:
                    56:4b:25:a4:f5:a8:b7:16:40:bd:ae:eb:b9:f7:06:
                    9a:a4:22:82:2e:3d:a7:ac:ae:ad:09:e5:b6:56:8f:
                    62:af:e6:35:5f:1f:24:64:8c:ae:5d:24:02:c7:dd:
                    34:85:c4:50:41:6b:ec:4b:c0:19:74:3f:9a:fa:37:
                    a6:11:68:90:3b:b6:66:aa:fb:3e:7d:ba:cb:64:c3:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5B:6A:B3:AF:C9:0B:E6:9B:1B:45:B2:45:6A:11:EA:8D:E1:E2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/9496dad9-5a4c-3b46-839f-95eb043c55d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl

            X509v3 Authority Key Identifier:
                keyid:08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:eb:e0:4a:50:a3:60:c6:8b:62:77:51:43:43:22:c1:c9:b1:
         c5:84:fc:b0:69:29:25:04:3f:07:07:48:22:8a:1d:c8:b8:8d:
         97:89:a8:64:7d:96:4f:2d:31:ec:0b:2f:1f:c8:c2:d9:1a:9b:
         be:45:be:f9:70:91:77:9b:e1:d4:fe:32:bd:31:8d:d4:d0:ee:
         54:c7:9e:e9:78:29:66:10:51:e8:54:05:4b:7b:6b:88:17:00:
         89:b5:d7:94:e5:7f:03:bb:20:85:31:b7:e2:22:19:07:f3:96:
         26:c9:03:bc:06:48:48:a8:88:6e:28:c5:91:f9:1f:f1:37:8a:
         56:8c:63:d7:3c:b1:b4:e4:ac:e7:d8:42:bb:2a:f1:78:a5:99:
         26:59:36:81:52:17:47:82:77:93:98:25:c5:76:ce:87:d1:5d:
         c3:0f:9e:9e:6a:08:a8:f9:ab:68:98:5e:c2:aa:21:dc:ea:25:
         25:0f:80:8d:d2:42:8d:87:ce:21:6d:c7:f7:0c:15:cd:82:70:
         96:85:72:a2:d8:74:60:ed:d1:bb:ba:f3:a8:19:ca:84:ff:45:
         be:f5:90:6c:91:92:fe:85:93:47:5e:e4:37:0f:43:f9:d1:25:
         bb:e0:17:29:0e:e2:83:bf:b2:ee:7d:81:0d:1e:76:3a:0e:85:
         c5:4c:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:30:15 2026 by rpki-client