Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/eda804af-913c-31a9-b634-136d0b578096.roa
File:                     eda804af-913c-31a9-b634-136d0b578096.roa (raw, json)
Hash identifier:          fQ2jCQ/azDXht0kxk2cG3wW6opti2x7dIreqqFkge98=
Subject key identifier:   78:5D:AC:E4:F4:CF:4B:10:7B:1E:67:96:9A:4E:49:12:BB:72:46:96
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F4328584DADAADD3D0400B4F51001FA00
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/eda804af-913c-31a9-b634-136d0b578096.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     209
IP address blocks:        173.195.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:dd:3d:04:00:b4:f5:10:01:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=4febe171-ded7-4557-8feb-0e95ba99a75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6b:0a:d6:52:a3:8e:0b:6f:8d:73:38:01:2f:
                    e5:6f:62:be:06:e8:07:2b:ef:84:42:2f:e1:c4:b3:
                    84:07:40:b0:41:63:e8:de:b4:88:14:34:8a:09:2d:
                    04:fb:2a:18:7e:68:1e:5e:ce:e2:a7:0e:5f:88:80:
                    07:cc:40:58:3d:81:92:7d:5a:aa:be:89:31:a4:0f:
                    f1:37:3f:7b:ef:81:05:b3:cd:37:42:6f:24:8c:9f:
                    07:b0:0a:90:2c:10:81:90:9d:f0:ee:c4:0f:a6:85:
                    7e:00:47:00:a2:ba:87:3c:aa:0f:14:a1:96:d0:06:
                    72:cb:5c:80:1c:e4:5c:aa:db:7a:ef:50:b9:6d:73:
                    d2:7a:35:08:fa:2f:2a:83:9b:00:4a:4f:40:eb:cc:
                    0a:2a:5c:d2:7b:bb:1f:aa:c6:be:ef:00:2b:f9:1b:
                    3e:d4:a7:ff:52:ca:73:06:17:7d:2e:ba:ba:3a:ec:
                    43:31:1b:af:be:e5:03:8c:38:78:04:14:6c:c3:3a:
                    f2:47:95:b1:b2:b8:1d:8d:4e:a7:75:e8:c8:6d:5e:
                    c1:a8:a5:d3:64:d7:6e:27:a6:24:b0:c4:ab:13:6f:
                    f7:0d:51:90:22:b4:7c:76:de:34:e1:4f:82:ef:51:
                    21:f6:19:9c:fe:47:ce:ae:1b:76:37:a4:ab:48:ed:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5D:AC:E4:F4:CF:4B:10:7B:1E:67:96:9A:4E:49:12:BB:72:46:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/eda804af-913c-31a9-b634-136d0b578096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:4f:52:53:b4:96:98:8e:a6:41:95:d8:ba:ce:5d:b2:0d:25:
         d3:74:70:f3:b8:0e:01:96:8e:3a:bb:bf:21:da:25:08:9a:e9:
         08:fc:9c:af:55:30:26:d5:99:5e:91:34:00:26:b1:33:ac:52:
         45:c1:76:2c:2c:68:5d:ad:7a:48:4c:c3:70:1c:dc:d3:6b:17:
         9b:cf:3d:22:15:51:06:bb:52:69:16:b4:0f:f1:d2:c9:2b:c4:
         78:c5:5a:0c:91:db:41:72:23:7d:16:66:19:b1:4f:31:d5:b4:
         de:2d:c2:bf:fb:98:83:13:c6:64:7f:c8:b9:2e:75:f2:1e:6e:
         50:ae:64:48:ba:aa:c4:10:fd:94:c5:3d:54:64:d5:54:25:b5:
         a5:d6:08:f3:6d:37:61:b8:e5:8c:75:36:f3:0c:17:1a:52:77:
         4d:c4:27:3e:79:2d:97:05:9d:05:c9:37:fd:a6:69:64:06:55:
         c0:bf:ea:ae:43:b5:93:83:be:bc:1a:55:53:4b:db:a6:a6:9b:
         64:ba:0b:a0:df:b6:00:7a:3a:a6:28:9c:fc:3a:6d:54:76:72:
         be:96:7d:3c:0d:06:9c:08:bb:82:87:71:71:cb:7d:fc:82:17:
         e9:f9:15:0a:4b:96:1e:55:42:03:01:5b:53:28:ff:b4:96:59:
         44:ba:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:06:20 2026 by rpki-client