Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/32719d37-b9c2-39ff-9a78-c34dbb94e55e.roa
File:                     32719d37-b9c2-39ff-9a78-c34dbb94e55e.roa (raw, json)
Hash identifier:          d06qNSL1LiuSx/isyxnVE/7J/QJ7SQigHM/hJjhs+1E=
Subject key identifier:   80:AB:46:07:8F:3F:4D:07:41:16:73:77:25:58:C3:33:BB:8E:5D:F9
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584CE3620F65B09B23BAC8168300
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/32719d37-b9c2-39ff-9a78-c34dbb94e55e.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     401307
IP address blocks:        204.25.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:0f:65:b0:9b:23:ba:c8:16:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=f3928df2-8023-486e-b6e8-120ac11a3cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:27:61:72:59:03:fe:51:c9:45:1b:47:79:
                    31:0b:49:d8:45:1d:66:cf:e4:24:c5:58:02:7a:50:
                    99:85:9a:eb:6d:f5:8e:4b:69:59:c5:6a:51:36:e8:
                    d5:fb:ea:8e:90:95:4f:fc:85:83:76:db:aa:6b:d6:
                    6e:47:99:82:b1:3c:1b:24:9f:e1:a7:8e:b4:15:b5:
                    74:52:7f:13:12:5e:d5:7a:97:c6:93:48:43:1f:30:
                    93:fc:77:50:cb:1d:bb:4e:46:37:7e:c1:4a:5a:90:
                    e5:e9:a7:5d:71:92:b5:ef:4d:7c:59:18:05:09:cd:
                    43:21:f0:80:08:ff:1e:8e:9e:6f:0e:2f:97:eb:d2:
                    10:34:38:a2:fb:a8:88:f5:2d:23:b4:9c:6d:8a:04:
                    90:09:04:a2:b2:93:9e:ee:5e:a7:97:50:25:dc:da:
                    70:05:56:a2:29:81:75:50:03:c6:c8:04:57:81:e6:
                    a1:9c:d4:f6:3c:b2:a9:6e:59:36:c4:7a:80:97:cf:
                    72:0d:04:19:7d:ad:c0:fa:ad:c2:e2:58:71:a6:c5:
                    98:32:24:7c:70:7e:5a:c6:0a:df:6f:22:0c:6e:27:
                    e2:81:77:79:df:fa:96:cc:83:0e:8a:ea:85:7e:a9:
                    5a:80:b8:2a:18:87:a6:28:8c:09:d1:91:cf:99:73:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AB:46:07:8F:3F:4D:07:41:16:73:77:25:58:C3:33:BB:8E:5D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/32719d37-b9c2-39ff-9a78-c34dbb94e55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0f:de:0d:ea:b8:f1:c2:68:00:d4:02:b1:15:9c:aa:8f:f8:
         f2:1f:09:6c:b3:b5:74:fb:97:60:66:bb:8d:e9:f7:80:98:2f:
         d2:52:e1:84:51:11:fa:ad:f2:5f:9b:d9:06:35:b6:d4:91:1a:
         03:76:0f:79:42:11:67:ad:eb:7d:b8:a5:18:6f:dd:94:a7:3c:
         a5:ac:d2:81:fd:11:e7:50:10:6d:2a:c6:00:a3:a7:11:38:95:
         b3:55:12:d2:53:e7:ad:f6:ef:97:5e:f0:10:e0:5f:fc:8b:34:
         82:d3:39:dc:a7:ba:e6:be:7f:5e:6f:e0:9d:a8:4d:2a:14:37:
         a6:28:79:83:78:df:06:86:91:2b:f1:c2:33:a8:47:a5:79:93:
         ca:ae:c0:c4:cf:4b:b2:b8:9f:4e:c2:bd:03:92:27:89:87:dc:
         68:c1:a7:9d:13:12:03:8c:89:72:fe:74:93:bb:fe:f3:ae:24:
         c4:f6:e2:68:77:00:4a:5d:f4:4b:78:11:ce:21:0e:3d:3e:4e:
         4c:d3:cd:66:60:46:ae:72:de:88:11:87:45:a6:49:b3:eb:95:
         bc:47:b9:b4:9d:2d:10:f6:80:53:5e:38:f5:f8:fc:ee:11:5e:
         c6:2c:6c:98:cc:ac:6e:f8:c0:0f:3f:d7:ae:a7:f8:7d:5a:31:
         89:89:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:22 2026 by rpki-client