Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/181826ac-dd0b-3b31-9e77-9527b0a7987a.roa
File:                     181826ac-dd0b-3b31-9e77-9527b0a7987a.roa (raw, json)
Hash identifier:          3f4BYDC61tySjGcuENha/kxvAeG77ejY8/NnoaZgeyk=
Subject key identifier:   CF:1E:76:E7:17:2E:94:5E:67:66:8B:16:47:81:69:B2:35:8C:9D:27
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584DA6B01E33047FFE0E7D51A400
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/181826ac-dd0b-3b31-9e77-9527b0a7987a.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     2381
IP address blocks:        205.213.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:1e:33:04:7f:fe:0e:7d:51:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=50fba9d3-d6df-4477-8923-2462b9a21c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:2a:b7:4f:4e:d2:53:f6:ea:3d:d4:b8:9e:
                    74:e3:c4:a2:e4:d0:e4:94:f5:fb:fa:3c:5f:f8:f3:
                    91:92:26:a2:d6:4c:26:7c:86:bc:71:74:c7:69:eb:
                    5e:c1:ad:0f:f1:73:a0:53:0f:93:b2:56:dc:40:ba:
                    c5:f2:f5:4a:fa:9d:8a:36:d9:a9:f1:b0:8c:25:56:
                    3f:42:6d:f7:83:12:42:dd:0c:94:77:0b:75:d9:af:
                    bb:e4:29:00:5f:17:4d:e1:89:d6:82:34:4d:8e:c2:
                    9f:6d:82:08:3b:29:a8:02:14:5d:6b:72:09:25:ea:
                    66:4b:93:0d:93:ad:a9:fd:46:da:6d:7a:c4:67:7b:
                    22:37:d5:6e:9f:b3:b0:ef:cd:3a:aa:1d:53:73:56:
                    4a:2f:a0:7d:03:13:06:58:5d:dd:6a:b3:8f:cd:29:
                    f9:a0:13:f1:f4:45:33:b6:db:ce:35:60:d0:68:dd:
                    b2:1a:68:8b:fa:4e:af:55:c9:63:4c:d8:cb:c3:51:
                    40:fc:e1:f2:29:ff:e4:ca:60:74:23:db:31:2f:41:
                    0b:61:12:98:ce:c2:24:d6:9e:7e:89:c7:24:d0:83:
                    c3:cb:00:c8:61:08:39:05:48:98:d8:cf:85:1c:84:
                    fc:70:b0:24:43:03:87:7b:81:3e:2e:5c:5d:8c:66:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1E:76:E7:17:2E:94:5E:67:66:8B:16:47:81:69:B2:35:8C:9D:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/181826ac-dd0b-3b31-9e77-9527b0a7987a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:da:a0:a4:e2:0f:c2:f6:87:65:1a:ab:f8:6a:71:fb:7f:e5:
         db:66:53:39:2d:12:d6:51:25:7d:25:5f:e3:0b:5f:ba:cd:83:
         6b:6e:ac:73:eb:93:28:b5:86:fb:dc:38:a1:f3:7e:52:44:3a:
         1e:e4:4c:a0:c2:c4:3d:98:4f:ee:c4:f9:5c:53:f3:70:30:96:
         4e:28:0e:24:a1:1c:af:f7:c0:46:13:8e:81:25:7a:94:85:85:
         ab:0d:d7:ea:34:94:5d:1e:d0:b0:40:c2:8d:75:5e:41:03:5f:
         0a:ea:31:fa:50:8b:44:67:85:70:ce:10:f7:6e:97:47:da:27:
         c7:8f:93:7e:68:42:b6:b0:7d:2b:55:e3:23:99:39:ee:80:ab:
         49:39:d9:be:30:95:62:c3:67:72:4d:eb:b3:ee:cf:9b:ca:71:
         ac:b5:77:a7:6a:e1:a8:3e:36:34:df:03:cf:2f:e2:11:70:e8:
         df:4d:12:db:a0:38:ce:a3:c9:05:4b:cd:36:f0:3c:55:8b:2f:
         a6:01:4e:a9:d6:0e:3e:05:e4:c9:f7:06:ea:f5:8c:dd:26:15:
         38:f3:ca:3e:3e:38:dc:3e:3d:ca:8e:f6:b7:f4:64:0c:56:64:
         af:ef:2c:a7:36:f6:17:05:e4:99:5f:48:69:7c:c6:52:f9:4f:
         f2:ad:91:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:29:09 2026 by rpki-client