Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/6205d65e-f890-34fc-8b03-26058d2c5857.roa
File:                     6205d65e-f890-34fc-8b03-26058d2c5857.roa (raw, json)
Hash identifier:          GZ/Maof7QFwa6FESRactAD6sGzdjwC9HW/F03CEALxI=
Subject key identifier:   AB:90:CB:73:61:FF:17:71:66:93:80:84:50:D6:C2:53:C4:D2:EB:1A
Certificate issuer:       /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial:       010D0C9F4328584DE41B18D284DF7D4B4FC16440
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/6205d65e-f890-34fc-8b03-26058d2c5857.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     10998
IP address blocks:        199.43.32.0/24 maxlen: 24
                          199.43.33.0/24 maxlen: 24
                          199.43.34.0/24 maxlen: 24
                          199.43.35.0/24 maxlen: 24
                          199.43.36.0/24 maxlen: 24
                          199.43.37.0/24 maxlen: 24
                          199.43.38.0/24 maxlen: 24
                          199.43.39.0/24 maxlen: 24
                          199.43.40.0/24 maxlen: 24
                          199.43.41.0/24 maxlen: 24
                          199.43.42.0/24 maxlen: 24
                          199.43.43.0/24 maxlen: 24
                          199.43.44.0/24 maxlen: 24
                          199.43.46.0/24 maxlen: 24
                          199.43.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:18:d2:84:df:7d:4b:4f:c1:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=fb89e0f5-c2fe-41c6-88a8-cca6168ee6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:cb:fd:ad:74:39:b1:b2:87:29:74:81:44:
                    66:e0:0c:98:3f:22:02:20:36:54:d4:a5:15:8d:e9:
                    2b:5f:27:62:28:a0:77:45:0c:7a:cd:2d:99:21:66:
                    88:28:fc:be:08:88:b4:57:c4:a6:23:af:bf:79:9e:
                    3f:92:ba:ee:44:3e:f6:a3:07:d8:b9:e8:e6:23:09:
                    d0:cb:55:ac:18:46:17:f1:4b:e8:89:2d:d8:48:b3:
                    dd:74:fa:8b:99:0b:4d:8d:c4:03:aa:f6:f6:a0:98:
                    42:13:cc:eb:d7:a0:3f:df:5a:d9:bd:bb:c6:89:86:
                    63:ad:df:81:82:5e:2d:65:6d:ae:3b:54:bb:4c:8a:
                    1c:00:38:40:e5:17:29:54:07:d9:a3:ed:ce:75:60:
                    cf:47:4a:30:7e:e5:09:f9:33:69:da:0c:3e:06:ed:
                    bd:11:6b:56:57:7b:c9:e5:2e:5a:e6:43:8a:22:1d:
                    5c:2d:54:c8:83:f4:5f:5e:99:d0:8c:f9:f5:f8:e8:
                    9f:ef:9b:83:6e:51:81:74:6d:76:65:ff:ab:d5:ba:
                    97:ae:4b:f9:f0:77:df:a6:cd:b8:78:64:4f:02:cf:
                    5e:54:dc:4c:48:e5:82:15:6e:db:00:77:ac:22:26:
                    6b:8d:db:82:f1:23:51:96:59:16:be:85:bc:00:84:
                    82:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:90:CB:73:61:FF:17:71:66:93:80:84:50:D6:C2:53:C4:D2:EB:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/6205d65e-f890-34fc-8b03-26058d2c5857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.32.0-199.43.44.255
                  199.43.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:4e:23:0a:c3:3b:10:d0:f0:a6:87:2a:33:d9:2e:f2:6b:7a:
         6b:f5:b0:38:31:40:98:49:4d:05:3d:6d:c3:7a:11:bc:80:1a:
         28:50:57:98:33:a0:5c:4d:d2:58:f6:17:27:ec:87:e3:87:ea:
         d7:0a:cb:bd:ab:cb:0d:76:f6:2e:38:f5:38:01:97:4b:9f:5c:
         e5:01:8c:ed:20:9c:a3:2e:b4:73:28:97:00:46:75:1a:be:46:
         c2:6d:b8:21:dc:8f:76:69:1b:ad:2b:8a:20:d5:78:c4:ca:91:
         07:a4:f1:b9:e3:0f:f4:2b:c0:ad:2c:b9:f1:84:db:6d:57:bd:
         50:c8:25:df:f1:17:2f:2e:2b:08:9f:46:12:4c:e5:7e:fa:8d:
         8a:58:77:84:8c:03:75:3b:d2:e2:eb:de:78:eb:26:fb:6c:4e:
         44:dc:24:cc:dd:ca:62:55:77:8a:2e:04:65:e2:c5:5c:f6:fa:
         ca:96:9e:e1:14:97:51:20:4d:cb:7d:13:20:96:67:02:61:fb:
         b7:43:ac:84:3b:56:54:38:22:35:98:a2:74:72:38:ca:34:e0:
         48:a1:9c:af:78:5d:1e:fd:4c:c9:4b:92:df:d2:c4:36:e4:0c:
         90:32:17:78:f5:33:e2:0a:9a:dc:2a:24:19:8f:96:5e:c4:d9:
         c7:a8:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 21:58:53 2026 by rpki-client