Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/6d52d05e-08e4-31d2-ab0f-8c61e65f47bc.roa
File:                     6d52d05e-08e4-31d2-ab0f-8c61e65f47bc.roa (raw, json)
Hash identifier:          vKmgjRQjkvWLC4CAQ2Wf1H1n/aTdUVJbUVi2jBMabYA=
Subject key identifier:   D2:21:C4:CE:7E:82:1B:77:7A:8E:70:73:83:BA:2F:F9:C0:43:4D:2E
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584D7A05522EEC7109172C5C7F00
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/6d52d05e-08e4-31d2-ab0f-8c61e65f47bc.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     2675
IP address blocks:        205.194.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:52:2e:ec:71:09:17:2c:5c:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=ffedeaea-a463-4228-8ee0-688485495dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c2:8d:15:01:6d:d4:e2:92:26:d6:ba:97:93:
                    f8:39:17:d5:9c:e7:81:ab:bf:4c:a0:3f:12:0b:88:
                    03:e0:43:a4:fc:86:94:f0:fc:67:f2:87:a5:d3:ea:
                    79:31:56:d6:96:f4:29:18:f6:97:a6:4a:e3:13:7c:
                    f1:bd:87:59:fe:17:ac:dc:4d:b7:66:5c:9b:6a:98:
                    52:8f:a2:4d:bf:c9:f3:8f:ed:4a:c4:57:79:d1:b7:
                    36:c0:b1:97:2d:a9:83:70:eb:fb:fc:16:a8:31:ac:
                    c7:1d:38:66:3f:ad:fd:81:f3:2b:28:ba:f6:09:3c:
                    38:f4:ab:02:23:cd:f3:5c:b2:30:18:2e:65:fe:49:
                    a6:37:9b:4a:4d:a3:f9:09:ae:fa:6a:60:37:82:46:
                    91:01:9e:a3:e3:00:04:f1:66:4e:22:12:94:42:3f:
                    e3:43:76:dc:6a:1c:4d:10:ba:30:8c:44:d1:c6:4b:
                    c1:cc:73:a9:5f:24:f8:95:f6:53:99:47:c5:fb:29:
                    cb:d6:ab:fb:b2:0f:c8:85:61:f9:7f:c7:50:f9:76:
                    2a:bf:78:f4:a6:51:4f:e8:0a:d1:2d:64:ba:81:44:
                    ba:35:b0:f2:2c:f9:5b:8b:89:14:c9:1a:10:16:9d:
                    c6:49:47:3d:b9:13:c7:f2:8f:06:2f:f2:2c:a7:cc:
                    57:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:21:C4:CE:7E:82:1B:77:7A:8E:70:73:83:BA:2F:F9:C0:43:4D:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/6d52d05e-08e4-31d2-ab0f-8c61e65f47bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.194.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:3c:ea:ff:ae:d7:5d:c6:79:93:cf:11:d3:95:05:91:ef:68:
         77:e9:3f:ba:5e:64:2b:82:b4:2c:0f:1c:cc:24:56:8c:2f:5a:
         7b:39:06:78:15:24:c0:68:2b:37:8c:99:dc:3c:0c:07:df:5a:
         58:d4:93:44:80:dc:fe:d3:c1:61:6f:c1:a6:e8:b7:64:d3:0b:
         b9:8a:3b:a7:a8:34:ed:85:da:e7:8b:a2:99:f2:a4:63:31:8d:
         b6:17:a9:b1:54:66:66:5c:a5:f9:58:a7:11:50:2d:52:71:79:
         0d:d2:ca:f0:07:97:2e:e6:d8:84:b6:5d:48:c2:02:9d:f1:4f:
         37:0c:07:ba:91:23:f7:11:a6:68:c9:bd:24:2f:9e:76:5a:d1:
         71:61:e4:a1:13:ed:78:90:f9:45:d3:3f:09:62:2a:a8:8f:8b:
         cb:6d:d0:bf:a9:22:c2:67:a1:9e:03:a0:6f:d9:77:df:0d:11:
         3b:00:9f:a4:a6:c8:56:55:12:52:91:44:8b:64:00:07:d8:fa:
         ea:70:ca:ac:2a:39:55:f6:54:68:70:e3:95:eb:5a:27:cc:db:
         3a:21:09:2d:c7:84:e7:8d:95:c7:11:00:37:73:cd:b9:67:96:
         6e:18:c9:2d:4e:03:e0:c1:5c:c2:9d:d4:87:ec:74:90:ca:ca:
         f5:b7:98:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 19:08:18 2026 by rpki-client