Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/acbf86ea-7e44-3212-ac70-f4c74c36618e.roa
File:                     acbf86ea-7e44-3212-ac70-f4c74c36618e.roa (raw, json)
Hash identifier:          ALLm76JHrLM7tSVZyb7hKuG4N51zb1pS/mbwlwGyA6I=
Subject key identifier:   FF:90:E0:3D:2A:0C:38:AD:BC:C6:98:42:74:4A:C9:0B:E1:FA:F9:9D
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F6D0AD8499CCD11F8344B1EF0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/acbf86ea-7e44-3212-ac70-f4c74c36618e.roa
Signing time:             Wed 07 Oct 2026 19:00:25 +0000
ROA not before:           Wed 07 Oct 2026 19:00:25 +0000
ROA not after:            Tue 05 Jan 2027 20:00:25 +0000
asID:                     63023
IP address blocks:        204.28.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:0a:d8:49:9c:cd:11:f8:34:4b:1e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct  7 19:00:25 2026 GMT
            Not After : Jan  5 20:00:25 2027 GMT
        Subject: CN=ea1f90f1-9d05-4f7e-9336-4c28e75d3e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:ef:d7:65:01:82:8a:bf:f1:de:de:e3:e3:
                    61:2a:79:17:d3:9b:94:3e:90:68:d9:e3:2c:3f:82:
                    b7:ec:26:cb:ac:7b:11:f3:55:d4:c5:2d:d9:1b:54:
                    f4:61:a4:e2:2d:ee:18:22:48:6a:56:c5:5e:57:35:
                    88:fc:eb:20:2c:1e:27:d3:78:23:ae:ef:19:26:66:
                    d2:ef:36:68:1c:84:c2:d9:58:ac:6f:7f:44:eb:69:
                    eb:28:58:a8:ad:f2:49:bb:17:40:43:7a:9f:2a:78:
                    5c:4d:f2:b3:fe:f1:51:70:c1:2a:99:84:74:7b:c8:
                    62:dd:97:b3:bf:a3:03:06:a9:e2:f6:13:fe:bf:53:
                    8e:54:1d:83:4f:19:a6:75:44:40:32:6d:00:9e:13:
                    f5:9e:6c:c0:17:49:9f:14:7c:6a:de:06:f5:06:d7:
                    ee:46:14:fd:3a:93:05:8b:27:22:81:fe:99:5e:ec:
                    5d:0b:6b:c5:ee:ef:24:35:72:fc:db:f1:39:ad:b1:
                    e2:74:06:88:12:a1:08:93:46:78:6a:83:e8:28:65:
                    62:29:82:09:c5:1d:a9:12:c5:de:20:b4:76:1f:3f:
                    77:83:ff:fb:ed:f4:81:1e:fc:12:f4:05:2a:3e:90:
                    28:87:9e:3a:22:0f:55:f2:8a:dc:4c:b9:3a:40:15:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:90:E0:3D:2A:0C:38:AD:BC:C6:98:42:74:4A:C9:0B:E1:FA:F9:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/acbf86ea-7e44-3212-ac70-f4c74c36618e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.28.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6b:75:91:34:82:4f:62:c5:7e:8f:e4:1a:f0:f4:78:a8:2c:
         b5:9a:a1:57:6e:9d:cb:99:a4:72:e5:98:cf:28:8c:ae:11:8c:
         4e:1b:aa:a3:9b:9a:35:59:45:84:f7:60:74:42:80:f8:ca:b7:
         bc:ae:ac:f1:eb:ec:29:8a:c1:e4:2a:d1:d8:3e:65:86:d9:f3:
         ec:2c:bc:a1:fb:44:b6:fd:5b:4a:72:59:8b:bb:83:fe:98:9b:
         49:89:65:4d:df:5f:f3:3c:0d:5a:26:7c:28:22:2c:b8:c4:2c:
         02:e3:4d:44:7a:2a:2a:94:d7:64:94:63:fd:7f:8f:c6:f0:06:
         50:ca:f9:fe:ae:68:54:cc:99:e7:b6:9c:cc:cc:79:a5:3a:17:
         75:c2:a5:d4:2b:2d:36:22:5a:65:07:f9:64:2a:3c:da:1e:04:
         e1:81:bb:7f:90:0f:13:dc:11:7a:ad:67:5a:66:62:42:08:ea:
         67:2b:fd:4f:b1:17:59:56:4e:ef:b8:dc:88:d3:33:95:e3:b0:
         4d:f3:96:ab:0b:16:b7:86:99:a8:e5:2b:4c:c6:ba:c8:4b:a0:
         0c:f2:bc:de:f5:e3:4d:cb:cf:d6:99:f8:14:eb:18:67:b8:bf:
         d4:96:ed:14:d0:17:70:8b:79:15:26:55:ce:da:d0:7a:97:c1:
         32:d3:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:10:39 2026 by rpki-client