Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/c90e2625-0edf-3ea1-8dd0-bbdcf75e7a3b.roa
File:                     c90e2625-0edf-3ea1-8dd0-bbdcf75e7a3b.roa (raw, json)
Hash identifier:          M6lv6iHqLeTdxU/mvfDoh8KMsz9OpNaLFImfXN2X5Eo=
Subject key identifier:   59:C9:E7:22:35:4A:FE:4C:AB:6A:86:B3:75:C5:CE:BA:6E:AF:B8:0A
Certificate issuer:       /CN=fc497fdb-8215-4a6e-8eb3-f882f68c64a6
Certificate serial:       010D0C9F4328584E7204DDBFB2FB0492E3A0FEC0
Authority key identifier: 39:FA:84:98:BF:A7:E6:20:75:02:EA:56:12:5F:1F:3B:F4:1F:CF:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/c90e2625-0edf-3ea1-8dd0-bbdcf75e7a3b.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     397417
IP address blocks:        204.17.249.0/24 maxlen: 24
                          204.17.250.0/23 maxlen: 23
                          204.17.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:dd:bf:b2:fb:04:92:e3:a0:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc497fdb-8215-4a6e-8eb3-f882f68c64a6
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=c92bb4af-4024-44f5-ad91-ef3b98a97630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8b:2c:d6:ee:5d:b3:9a:18:b5:d5:71:b0:c7:
                    fb:d4:61:2a:a4:c6:77:66:9d:1e:3c:d8:3b:9b:59:
                    92:ab:71:99:d9:56:8d:6e:e8:29:f7:cc:8f:08:95:
                    4d:40:25:33:71:3f:71:6c:84:9f:35:a9:46:e4:5f:
                    0b:26:c1:07:4d:fb:9b:5f:c4:d3:0d:fa:94:1f:6f:
                    40:52:46:77:e5:12:11:99:2b:ea:10:65:bb:34:65:
                    94:e5:45:b3:6c:38:45:a6:d1:56:1d:40:c4:89:a1:
                    b5:ee:69:9a:38:8c:05:1e:54:57:4a:05:cd:cd:7a:
                    7d:24:6a:28:7b:b4:20:9d:8f:ef:b5:7d:b3:b2:a8:
                    e7:c2:0f:0a:c0:79:33:dd:0f:c8:7c:3a:75:5f:f2:
                    95:50:9a:ef:06:68:6b:f5:76:a7:3c:cc:1c:4d:65:
                    6e:f3:47:3b:35:50:87:9a:c3:2e:33:f5:25:1a:b1:
                    a1:9d:4f:99:7e:8e:39:13:04:9f:34:e3:e4:81:5c:
                    5d:54:63:96:49:cb:a4:36:64:fa:4f:2d:cb:6c:58:
                    a1:e4:20:7c:74:a0:d7:fc:14:1f:c5:60:4a:4b:bd:
                    d3:52:03:fc:d5:b5:d6:22:44:6e:9f:3c:bb:b3:83:
                    58:53:36:53:df:fd:db:ff:49:1e:2b:f3:ee:b7:a2:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C9:E7:22:35:4A:FE:4C:AB:6A:86:B3:75:C5:CE:BA:6E:AF:B8:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/c90e2625-0edf-3ea1-8dd0-bbdcf75e7a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.crl

            X509v3 Authority Key Identifier:
                keyid:39:FA:84:98:BF:A7:E6:20:75:02:EA:56:12:5F:1F:3B:F4:1F:CF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.17.249.0-204.17.253.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d2:96:41:16:4d:12:25:c8:a1:05:29:b7:16:68:97:7a:12:
         82:6b:12:f0:ca:7e:8e:2d:06:89:0d:dc:63:1e:da:7a:8f:54:
         12:b9:96:8d:37:0c:5c:36:8f:12:d6:9d:d2:e2:b1:ab:c6:2d:
         e1:67:56:b5:b8:8d:87:18:c6:11:c8:5c:bb:28:4d:7f:ab:fe:
         a1:1a:5c:98:bb:80:a1:43:3f:e0:45:f1:27:dc:70:d3:a3:01:
         f2:ab:a3:a5:bc:2e:c5:5e:85:f6:a1:e6:47:28:f2:14:74:ec:
         07:a2:da:62:cc:c5:d1:9d:71:f6:11:6e:0e:3a:11:df:10:4e:
         e9:09:91:cd:78:6a:d2:af:89:85:04:98:e2:50:c9:50:9d:21:
         d5:57:a9:f4:ed:5a:b5:51:2e:32:4f:91:07:f0:c4:9e:f9:85:
         30:ea:cd:10:9d:af:dc:eb:a3:b0:f7:85:c8:3c:9b:32:d8:90:
         a7:5c:86:45:66:52:9f:79:ca:0f:93:8e:79:32:38:c6:49:08:
         17:25:bc:cd:a6:fc:6a:55:a9:28:e9:b7:c8:99:be:f3:33:f2:
         23:9d:f8:f7:90:dd:64:92:62:cc:28:58:64:38:48:4a:7b:6d:
         ee:1c:c4:6f:69:e2:b3:2a:f3:b5:9b:93:f8:c4:77:9a:2b:4d:
         bd:2f:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:22:50 2026 by rpki-client