Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/a5c12e0c-7f77-3bfe-9a59-a38621cd9528.roa
File:                     a5c12e0c-7f77-3bfe-9a59-a38621cd9528.roa (raw, json)
Hash identifier:          P4xjcWTHMp2okMQiH2xgD14p3SivETlGlK3/9l/QPHQ=
Subject key identifier:   F0:BD:E4:31:9C:6E:EA:50:93:3D:F3:E9:C0:B8:DE:64:70:10:C5:9E
Certificate issuer:       /CN=cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533
Certificate serial:       010D0C9F4328584F43DD648E6A437A1822B38800
Authority key identifier: 7B:33:36:6E:9B:42:D2:9C:8B:54:17:2D:11:EA:A7:97:F2:70:5D:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/a5c12e0c-7f77-3bfe-9a59-a38621cd9528.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     376
IP address blocks:        205.237.210.0/24 maxlen: 24
                          205.237.211.0/24 maxlen: 24
                          205.237.212.0/24 maxlen: 24
                          205.237.213.0/24 maxlen: 24
                          205.237.214.0/24 maxlen: 24
                          205.237.215.0/24 maxlen: 24
                          205.237.216.0/24 maxlen: 24
                          205.237.217.0/24 maxlen: 24
                          205.237.218.0/24 maxlen: 24
                          205.237.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:64:8e:6a:43:7a:18:22:b3:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=38c7fe68-076d-4df7-b044-0feecc9e05ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:0b:05:a2:38:6d:2d:f1:c5:11:b4:6f:1b:
                    f6:6f:73:ea:ce:91:6f:8c:a0:87:a9:f4:15:a4:52:
                    61:30:57:65:c2:bd:54:88:2e:35:3d:0c:68:4e:d2:
                    2b:ce:24:2a:07:1d:b5:a4:5a:db:38:e7:37:a7:d8:
                    47:1e:47:09:3f:e5:67:8b:e6:9d:38:68:26:41:60:
                    43:c4:2e:06:30:92:6a:f8:4f:95:13:90:d2:16:73:
                    7a:37:7e:f3:ad:69:4c:78:24:54:87:e8:e6:e3:5a:
                    49:90:56:8e:80:3b:6d:9b:07:8b:fd:48:3d:a4:e9:
                    8f:31:8d:a6:b7:51:f6:90:3d:23:50:79:56:75:2c:
                    9c:61:24:c9:d4:7a:28:e1:a8:73:9b:85:47:07:83:
                    ed:d8:d9:e0:98:f8:5a:6a:f1:f6:82:e1:07:25:e3:
                    1f:e1:e7:76:55:2c:9f:a4:d9:59:48:75:e9:1e:85:
                    22:c1:2d:dc:e9:36:87:3e:0a:69:08:65:18:a8:5b:
                    85:aa:ea:31:9f:b9:0e:5b:3e:b4:f9:89:76:2e:65:
                    e6:85:11:2e:29:8c:81:9b:34:8a:de:be:9d:14:65:
                    ab:75:5c:a6:db:cb:b9:37:3a:15:1c:fa:0f:ed:85:
                    fa:d6:de:bd:06:de:e2:a2:76:c7:a7:48:95:a5:80:
                    27:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BD:E4:31:9C:6E:EA:50:93:3D:F3:E9:C0:B8:DE:64:70:10:C5:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/a5c12e0c-7f77-3bfe-9a59-a38621cd9528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.crl

            X509v3 Authority Key Identifier:
                keyid:7B:33:36:6E:9B:42:D2:9C:8B:54:17:2D:11:EA:A7:97:F2:70:5D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.210.0-205.237.219.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ea:e7:96:1d:05:93:5a:7b:db:84:f4:f1:a0:ce:25:6b:93:
         ea:24:44:ba:85:12:01:f2:44:7e:ed:72:a8:ea:bb:33:4a:1f:
         fc:91:a6:24:84:53:10:36:a9:3f:a8:bf:84:8f:33:91:22:b7:
         94:29:b2:ce:6b:17:33:19:64:fb:31:ae:3b:0d:e8:a4:a2:60:
         9a:6c:4a:a4:44:36:9a:a9:ef:16:f7:21:21:8d:7d:e4:bb:f2:
         d4:b5:0b:17:73:80:38:a9:34:0c:a2:3f:5b:6f:12:f8:bb:38:
         3d:ed:8e:1e:48:cb:b1:58:d9:d2:70:68:99:4c:f8:3e:98:c8:
         c4:6d:70:7b:73:ce:4e:27:4c:a5:cf:54:ce:c8:9e:d1:1a:ea:
         2c:1f:d2:1e:63:4f:57:0d:25:f4:ba:42:17:75:3b:c8:55:9f:
         b4:0e:f5:8f:4d:f3:92:30:f7:71:bc:ad:3c:79:86:67:60:b2:
         2d:a6:5d:4a:10:7f:0c:1e:16:94:12:30:a8:1b:d2:69:89:eb:
         bc:3b:b0:a4:76:2b:1e:55:58:06:07:26:89:27:ee:ab:83:5f:
         df:06:01:5d:11:98:ac:0e:69:8d:55:f9:d5:cd:da:bb:26:b5:
         63:2a:30:0d:1f:05:33:f0:5f:5b:8f:d3:26:a5:fb:c1:29:2e:
         10:85:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:09:34 2026 by rpki-client