Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/d149e89f-1913-3a58-ba83-45458087b151.roa
File:                     d149e89f-1913-3a58-ba83-45458087b151.roa (raw, json)
Hash identifier:          Twbh5CRpxHzw3GJYgeTnIdQFiKZVHY5m+ls/aiUE7Xc=
Subject key identifier:   E2:1F:21:17:7D:3E:D3:00:5C:01:75:79:24:ED:01:AE:71:36:A1:74
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584CAE5736AE71A28DF6D6832440
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/d149e89f-1913-3a58-ba83-45458087b151.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     393607
IP address blocks:        204.83.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:36:ae:71:a2:8d:f6:d6:83:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=03b78a12-d762-4487-a334-546f11be30f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:b7:92:5c:f4:46:af:c7:f6:33:a9:47:f4:
                    0b:99:70:62:07:01:0e:f4:bf:ee:1c:18:50:65:0b:
                    46:62:a0:19:33:fa:48:db:e1:7a:8c:f2:22:d0:75:
                    c2:ca:cd:4e:d1:c7:9c:0a:f8:5a:09:07:97:e1:0e:
                    2c:69:db:1d:15:1a:30:e7:50:5f:ba:94:2c:c5:28:
                    a2:5d:36:5f:5f:7a:89:cb:bc:56:8e:95:f1:91:9f:
                    13:78:a2:ad:9f:61:fb:b8:d1:ee:a2:86:45:57:3c:
                    86:27:3f:d6:3e:06:f0:19:02:68:1a:1f:1d:8c:0a:
                    17:49:46:d4:4f:37:cd:f6:dc:6c:26:ba:d7:18:80:
                    7a:57:40:de:02:79:ec:71:cf:d7:15:d0:09:88:f0:
                    1d:11:13:2b:24:51:33:a9:36:f3:95:65:7e:16:e3:
                    51:59:73:56:50:45:ae:e7:84:65:ae:49:e3:2d:2e:
                    b0:ee:96:2b:4d:9e:63:0e:bd:4d:db:2b:64:b1:5b:
                    75:5d:de:bf:96:26:d2:01:06:34:9a:1c:89:e1:fd:
                    2e:46:23:cd:46:ec:2a:71:4b:de:62:f9:61:e4:4f:
                    a6:a2:e3:ae:76:35:64:a5:dd:d9:e1:8d:df:bf:ac:
                    b5:ff:02:56:71:f2:6e:a1:48:ee:be:c1:f3:7d:02:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1F:21:17:7D:3E:D3:00:5C:01:75:79:24:ED:01:AE:71:36:A1:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/d149e89f-1913-3a58-ba83-45458087b151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.83.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:15:31:12:32:c6:76:a9:e2:91:68:4d:54:7c:b0:fa:7b:55:
         cb:63:95:f9:ee:ed:6f:56:b1:27:17:33:63:c5:87:ab:f3:de:
         f4:54:56:c6:7f:8a:1c:aa:91:ae:c6:25:e1:df:eb:73:30:ec:
         d6:f4:ea:15:df:3d:84:d6:32:f0:90:32:e7:63:74:dc:b3:cc:
         74:94:de:f1:b9:2b:6f:f9:d4:ec:01:c8:04:d6:b1:2a:27:78:
         72:73:3e:ab:60:de:d8:ca:9e:6c:44:6f:93:51:54:8b:1d:ef:
         d3:2c:dd:22:c0:88:3e:48:66:38:f3:60:9b:b6:6c:45:e6:d1:
         3e:30:b6:53:f1:45:aa:f6:22:68:ad:9d:60:5d:84:e1:10:85:
         bc:ae:15:53:36:cd:cd:a1:c6:7c:66:a1:78:91:49:7e:ba:d7:
         13:25:19:43:e3:d2:86:07:a5:68:b8:c9:3a:98:2e:e2:c7:4d:
         b0:c5:38:4f:d5:51:bd:47:0c:e7:55:9b:2b:ab:7f:3c:d0:71:
         92:ed:eb:5d:93:24:a6:c5:d4:77:6f:0f:5e:db:cb:09:43:e5:
         f4:87:8a:b9:23:b9:b1:8f:47:2a:41:6d:5f:2b:e8:b2:3c:65:
         44:99:cb:5b:25:26:84:f2:9a:2a:a3:7f:2f:59:be:09:75:21:
         f4:0e:4c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 05:24:20 2026 by rpki-client