Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/bd3dbe1d-519e-3641-a008-c0c899bd117b.roa
File:                     bd3dbe1d-519e-3641-a008-c0c899bd117b.roa (raw, json)
Hash identifier:          XUoB/bBrbLbAP6fmYCqHj7TvEE1jP/CrmZxv1rNDbfQ=
Subject key identifier:   2E:98:22:49:93:4E:7D:C8:55:2E:A2:C6:BD:E7:61:23:2F:F2:7B:E9
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584D820E4867F9CA79101D476040
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/bd3dbe1d-519e-3641-a008-c0c899bd117b.roa
Signing time:             Tue 14 Apr 2026 22:05:26 +0000
ROA not before:           Tue 14 Apr 2026 22:05:26 +0000
ROA not after:            Mon 13 Jul 2026 22:05:26 +0000
asID:                     140952
IP address blocks:        205.185.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:82:0e:48:67:f9:ca:79:10:1d:47:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Apr 14 22:05:26 2026 GMT
            Not After : Jul 13 22:05:26 2026 GMT
        Subject: CN=a04c36d9-009f-4473-9b3e-de9b354a0889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5f:1c:63:5f:12:ab:38:6b:cf:ef:c7:3a:b1:
                    9e:ae:d0:c8:be:9f:41:5e:d2:c2:3d:ea:69:1e:f5:
                    c2:3e:96:60:1b:a8:9e:ad:98:d0:07:83:b7:80:bb:
                    2b:db:cf:8a:d3:0b:cd:40:f7:7e:7f:b4:e4:d2:2f:
                    b9:ba:d1:ac:57:87:66:fa:dc:74:6d:c6:9e:60:9e:
                    6f:bb:e7:97:82:be:2b:51:80:00:6c:8b:4a:e3:1e:
                    3f:88:31:d0:be:fe:73:8a:31:aa:5b:32:29:70:a6:
                    4c:60:3f:80:24:0f:a2:ff:b3:d5:88:f0:fb:23:ab:
                    4b:d1:0d:7a:58:74:19:21:db:e7:f4:f1:2d:1d:52:
                    e9:22:0f:14:42:a9:94:8b:70:f9:fa:41:6b:7c:c4:
                    53:1b:3b:1b:bb:6c:4c:95:6f:c0:35:2f:c2:e9:95:
                    73:a5:81:d4:6f:45:b8:44:95:4f:23:bb:c9:f2:5b:
                    9d:56:c5:06:72:e5:74:bb:27:c7:20:8b:42:ce:3e:
                    36:f8:e7:f0:80:65:28:4c:1c:7b:cd:18:af:48:18:
                    d5:13:62:78:8c:a8:7c:7b:e8:43:74:52:55:7f:b6:
                    62:d2:6c:99:59:86:fe:33:20:a6:0f:83:35:59:cd:
                    7a:d6:f5:d6:e3:45:85:fb:9b:76:fc:ec:88:f6:be:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:98:22:49:93:4E:7D:C8:55:2E:A2:C6:BD:E7:61:23:2F:F2:7B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/bd3dbe1d-519e-3641-a008-c0c899bd117b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.185.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ce:24:24:22:ee:47:ff:c4:83:0f:01:24:2f:0c:70:50:ac:
         e0:0b:ea:65:b2:f9:44:5c:6e:db:de:87:24:81:42:36:76:49:
         60:4c:63:b5:22:1a:a7:64:54:dc:a1:19:ce:6d:25:3f:7a:e7:
         94:f8:9b:df:81:36:62:a4:b7:e9:2d:66:22:8a:c9:1e:54:d8:
         90:7b:1b:2c:11:2c:4a:aa:d5:44:1f:16:43:88:3c:4f:d2:ef:
         03:dd:9a:d1:40:5e:e3:b7:79:f5:de:47:73:9d:18:4a:98:3f:
         0e:b3:73:a5:87:4a:24:9f:3e:88:34:c3:3b:a6:ca:09:b4:35:
         0f:54:12:8f:33:b6:7b:f9:6f:cc:cc:c8:4a:72:df:75:86:d5:
         3e:65:18:e4:76:0a:96:45:e8:58:03:82:c2:a5:6e:ef:65:43:
         7b:7f:44:0a:ec:81:ba:da:84:33:4e:0b:f0:96:cb:aa:60:6b:
         a8:ce:71:85:44:f3:56:dc:90:d9:b9:7b:9b:35:4f:2b:4f:65:
         9b:93:c8:5f:33:1d:ab:d2:ce:17:de:64:77:af:58:cc:3e:ea:
         7a:d4:87:49:5c:28:b3:b8:00:0b:d3:f2:80:30:a3:ac:b3:4b:
         d5:93:09:68:ae:63:1c:63:fe:cc:b8:f6:14:4b:09:41:6c:80:
         01:b5:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:13:40 2026 by rpki-client