Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f5d22a27-f2e7-31fe-b533-a820b83a834b.roa
File:                     f5d22a27-f2e7-31fe-b533-a820b83a834b.roa (raw, json)
Hash identifier:          wxrhSZcWRXy/sG2IO+fJt3rZ565ZfLV8d+0jqrB1qZc=
Subject key identifier:   4A:85:63:16:7A:28:45:26:28:B2:F2:9C:32:67:DD:8A:CC:E2:8D:22
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584DD78B24AE0D25E97B7D78D4C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f5d22a27-f2e7-31fe-b533-a820b83a834b.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     22616
IP address blocks:        205.220.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:24:ae:0d:25:e9:7b:7d:78:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=1be71953-76c7-40d7-892a-ec3ae61db208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:8f:33:6d:94:c8:08:28:4b:d9:66:10:67:
                    93:a7:7f:bd:5e:d3:2d:10:d3:93:3f:ae:f7:4e:62:
                    b4:79:1a:2f:e3:88:aa:aa:06:4a:87:a2:f8:48:89:
                    61:bf:57:5b:f7:20:ae:35:e8:87:a4:03:f8:d4:ee:
                    56:30:7e:3a:0a:9f:2b:5e:71:26:dc:f9:b9:e2:72:
                    bf:be:30:7f:09:3d:a8:4e:05:17:52:70:70:20:8d:
                    48:e0:6c:b0:40:4b:a3:bd:43:72:ea:6d:a0:ce:b6:
                    74:59:76:6d:95:8b:1a:11:e0:9f:49:34:bf:94:0e:
                    32:b1:b7:b9:de:48:e6:ad:8f:ec:97:b0:3b:4d:50:
                    1b:fb:fb:e9:ee:44:0a:7b:94:29:2f:d1:22:ce:c5:
                    7d:43:21:b2:4d:ae:39:4f:ab:bc:22:a5:d3:30:67:
                    ff:ba:8f:f4:72:73:ef:15:d9:a3:9a:78:1a:70:7a:
                    be:13:fa:af:a5:b5:08:c0:a2:95:74:2b:8a:23:10:
                    fa:35:c3:f2:d3:73:a5:89:73:a9:af:98:c2:66:b6:
                    c3:c8:ce:71:46:08:f0:12:0b:02:19:a6:48:27:91:
                    8e:59:6b:97:e7:9d:59:b0:59:a1:fb:cc:b7:88:45:
                    9d:b6:bb:46:f3:c0:8f:20:9a:11:69:61:72:39:31:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:85:63:16:7A:28:45:26:28:B2:F2:9C:32:67:DD:8A:CC:E2:8D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f5d22a27-f2e7-31fe-b533-a820b83a834b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:71:cd:0d:ee:f1:cd:bd:2d:ff:bd:ad:1f:cf:03:f1:25:12:
         2b:20:a1:86:69:91:0f:86:6d:d8:8d:4c:fb:82:3e:72:09:e2:
         53:4b:af:04:46:0c:0f:91:d2:20:d3:fd:a0:9e:72:0c:d7:93:
         34:d8:48:f4:36:27:34:dc:f6:29:f8:b2:96:90:1a:0e:8d:93:
         0b:7d:b4:41:2b:55:48:c4:ab:aa:ae:b5:6b:f3:e9:d1:e4:42:
         97:5d:a7:dd:94:80:80:11:4f:42:80:0f:97:57:25:80:b4:3e:
         e9:a7:e6:88:c8:11:df:fd:a8:a0:7f:66:5d:9e:94:aa:21:d2:
         66:02:77:39:99:23:4d:1a:a7:35:0a:86:b3:4d:28:2c:af:f2:
         ea:54:77:6e:f7:12:f2:7f:b5:b9:fb:cb:f8:fa:fa:83:16:48:
         63:5b:ce:49:12:b4:aa:7e:08:ae:cd:9d:ff:fc:bc:ec:aa:83:
         39:df:94:85:c9:b6:8f:50:08:87:29:4a:54:7e:86:97:ed:15:
         31:b1:55:f7:94:6f:2e:b5:b3:17:db:00:67:f4:b1:0c:fd:a7:
         9b:13:f7:aa:ba:6e:53:47:f1:cc:8f:92:f9:36:f5:ce:e8:46:
         91:e2:fd:b2:b6:e8:44:b8:e5:1f:97:fe:ee:80:64:3b:55:3e:
         f0:c5:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:25:47 2026 by rpki-client