Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c6c1ed01-c78f-30b3-b170-3ffa8b0f4a77.roa
File:                     c6c1ed01-c78f-30b3-b170-3ffa8b0f4a77.roa (raw, json)
Hash identifier:          2omUFk1JrShbYGQDTJKFekYOLnvrjYjP5BZTXtOA8zY=
Subject key identifier:   ED:FC:23:00:2B:E6:EC:85:B3:92:7F:E2:03:48:D4:7D:26:5F:DB:23
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D624A5ABD3EA3721E8B65EE00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c6c1ed01-c78f-30b3-b170-3ffa8b0f4a77.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     22616
IP address blocks:        205.220.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:5a:bd:3e:a3:72:1e:8b:65:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=6db7bae7-f111-4f90-baa6-c85ce8867583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:60:56:b6:14:57:23:9e:01:03:48:52:b6:91:
                    49:7c:05:1a:6e:6e:9f:ac:ad:39:08:ab:dd:78:dd:
                    a3:00:99:a5:65:8f:7f:04:ac:e3:91:ad:25:c9:6a:
                    44:a6:2c:54:33:ce:83:41:c0:46:49:e1:f0:19:27:
                    a7:79:ca:3c:ce:43:a6:6f:8e:49:5b:b7:7f:ba:b6:
                    fb:b4:bc:e5:0a:da:6e:64:bf:89:6c:dd:4c:1e:3f:
                    bb:8f:4e:fc:d6:67:21:03:a4:2d:56:cf:42:fc:fe:
                    05:34:f1:d4:38:5c:dd:40:87:3f:7b:c3:22:41:f6:
                    75:03:17:fe:6a:45:b8:11:5a:b3:01:4c:07:c2:8c:
                    ec:9d:03:1a:91:44:7d:43:44:6d:14:2f:e7:84:fd:
                    bd:8c:15:96:75:89:de:54:f3:5f:c4:f1:b6:73:c7:
                    c0:34:86:93:4a:cc:95:b9:bd:19:61:7f:8c:57:a7:
                    18:67:fd:eb:e2:f9:35:91:68:f9:c5:66:1b:c5:f7:
                    31:4f:5f:9e:69:77:64:41:6b:0f:54:5c:0d:7d:1c:
                    3f:b1:15:15:2f:d5:ef:9e:52:20:86:1e:31:b2:aa:
                    48:68:dc:f2:b3:7d:96:c9:ba:b8:c2:d3:7c:7a:80:
                    16:6b:10:b5:36:1a:2f:f6:1c:24:82:ba:34:e5:7b:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FC:23:00:2B:E6:EC:85:B3:92:7F:E2:03:48:D4:7D:26:5F:DB:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c6c1ed01-c78f-30b3-b170-3ffa8b0f4a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:de:b7:89:65:78:6d:bc:4d:98:61:27:4f:b9:70:bf:d0:b4:
         b2:4f:5e:2e:6c:a9:97:16:9d:bb:08:bf:46:bf:e6:bf:de:b2:
         72:a3:b3:f5:de:0e:91:8b:52:bb:75:5f:78:f2:92:2d:a6:eb:
         f7:51:d5:74:bb:e2:9c:7d:b6:74:e1:8a:dd:51:3b:9d:f5:b1:
         18:31:3c:71:0c:32:56:a5:49:7d:a3:2e:c9:cf:9e:3c:5f:f7:
         b7:db:76:52:65:75:1c:2e:0c:ad:97:e8:fd:41:a1:c1:e1:36:
         69:0a:d3:bf:21:13:0b:14:b9:c2:9d:e1:53:4c:33:75:14:fb:
         6a:44:a9:00:11:75:c2:7e:1e:82:b2:93:23:67:28:8d:a5:74:
         51:12:90:45:b4:9b:a3:2d:cf:e5:d6:b9:95:3a:88:69:67:cb:
         d0:8c:38:6c:87:5b:ee:b5:db:8b:c7:19:5e:b3:10:c3:98:90:
         77:7d:92:26:6b:07:33:be:9b:3b:5d:93:ee:64:15:1f:68:55:
         23:b9:77:6f:d1:36:4d:a0:1a:41:f7:d2:97:35:84:03:11:fc:
         45:bf:af:18:da:eb:ec:42:a7:a4:d4:26:96:ba:48:e7:66:eb:
         cd:58:9b:43:07:29:ee:ac:f1:58:3c:cb:a0:23:37:a8:a6:c7:
         c8:fd:1b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:53 2026 by rpki-client