Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa
File:                     0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa (raw, json)
Hash identifier:          OfDUBuIMxcbENsYtJ9ZEeA6ey93t6ufuVy8gfVnFv3o=
Subject key identifier:   2E:35:C7:25:BF:55:2B:3F:BC:C8:1D:D6:9F:40:D7:BE:86:21:A6:BA
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584EA786ED7C34386D40690C95D0
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46450
IP address blocks:        173.205.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:ed:7c:34:38:6d:40:69:0c:95:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0997ea23-cc6e-4341-8b85-9281511ca788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:04:ca:74:d9:d2:da:23:00:57:79:63:0d:
                    bc:92:49:85:ef:d4:69:6b:3a:b1:c4:96:fa:d7:b7:
                    b1:08:ff:9a:cc:33:bf:e9:d4:9f:c1:05:11:f1:6c:
                    8e:ed:69:60:71:4e:ac:90:fe:30:00:5f:33:78:80:
                    cf:a0:ec:08:f3:99:4a:c9:19:13:c6:55:53:3e:32:
                    19:21:68:5a:6f:5e:55:f3:dc:56:ee:4f:01:fe:a1:
                    ee:26:8c:b0:5d:a0:c1:1e:50:66:52:f0:c7:8e:5b:
                    25:fb:49:f7:a8:a9:6b:3b:a9:2f:8c:d8:6c:13:5c:
                    8e:a3:b5:31:3c:03:ed:2c:85:97:a5:7d:ad:bc:58:
                    33:c1:3c:a0:59:82:46:31:37:b4:db:31:06:0f:45:
                    98:69:86:1e:2b:ad:51:23:f7:ff:45:4e:4c:e5:3e:
                    75:56:b4:be:23:e7:d8:74:3d:41:0c:87:2b:ac:f1:
                    ed:59:54:9e:0d:0d:c2:b0:a1:61:92:dc:ee:bd:1c:
                    c4:bd:29:33:38:ea:1f:e0:c9:35:e7:d3:e8:c9:ff:
                    ef:b4:54:e8:b1:f7:46:23:5f:ee:23:11:98:13:72:
                    b0:59:a4:de:e1:df:d9:ca:9f:5b:da:c5:b9:5b:8b:
                    02:a9:82:7a:37:1d:25:83:ef:fd:0b:76:e4:c9:91:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:C7:25:BF:55:2B:3F:BC:C8:1D:D6:9F:40:D7:BE:86:21:A6:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.205.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:02:58:b8:43:c4:0b:a5:d2:58:02:a2:61:2f:e8:87:45:39:
         09:bb:c3:66:77:b5:8e:ad:e1:ab:d5:b5:c4:04:41:df:57:58:
         f1:be:5c:00:9c:02:a4:b0:a7:34:2a:51:65:ac:5b:2e:e1:c1:
         c9:08:21:7a:2c:fb:c2:d2:16:be:a2:d1:1f:87:50:4d:a1:37:
         19:af:02:f7:d4:06:63:5a:94:34:16:60:6a:6d:b2:ce:e7:84:
         b0:92:de:e5:be:23:04:6b:44:4f:a4:58:a6:75:17:fd:33:f9:
         39:bf:ac:cd:34:30:23:46:e0:c9:b0:8d:b1:d8:9d:54:a3:b2:
         ba:25:46:b8:dd:25:c7:3a:4e:f2:42:4e:28:89:27:8a:16:82:
         d2:23:f0:b6:6a:58:14:71:9b:e9:08:d0:be:fe:6f:c9:9a:c7:
         47:c7:3a:b6:c9:92:85:ac:1e:b2:c9:bb:98:9e:9d:73:0d:e1:
         62:b1:ae:82:d2:be:3b:0c:9b:cb:d6:aa:7a:82:3c:e5:c0:62:
         74:c1:49:a1:43:56:f1:84:87:c9:38:42:a1:2e:f5:86:74:42:
         33:e4:32:b8:dc:c3:39:ff:68:77:70:12:c5:ed:d4:82:ae:1c:
         bb:e6:3c:22:61:d5:4a:8b:37:6c:e2:2d:32:53:2b:eb:dd:83:
         e2:ab:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:50:03 2026 by rpki-client