Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8fcfe39-c473-362d-8b3f-c41bf4da4068.roa
File:                     f8fcfe39-c473-362d-8b3f-c41bf4da4068.roa (raw, json)
Hash identifier:          VfxkiDlkvPj1Am42QnvhgGCUWCVAyO0VTV/w+BTWrPc=
Subject key identifier:   AE:22:A3:DE:59:10:91:4E:30:8A:57:A7:EE:65:44:64:79:44:5F:3A
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584D67DFCE8C6ACE5E46BD7A4F00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8fcfe39-c473-362d-8b3f-c41bf4da4068.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     16696
IP address blocks:        204.209.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:ce:8c:6a:ce:5e:46:bd:7a:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=2a1b88e9-69fc-4ab4-8445-e97dd4794c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:3a:f8:4c:ea:c0:a1:83:c1:44:40:8e:bc:
                    4d:9d:66:97:9d:97:ee:46:88:4d:3b:5a:6b:50:26:
                    1e:a4:ef:ba:08:e8:ae:a0:42:3d:3b:9b:49:e2:0d:
                    46:57:15:7e:40:a6:af:7e:0d:fc:06:e3:4f:00:68:
                    46:ff:0e:02:bc:87:5b:38:be:d1:8c:27:cc:fe:66:
                    59:93:f1:bf:96:2e:fb:d4:01:54:ec:e6:e9:2d:89:
                    ec:e5:19:77:c2:30:58:60:6f:69:70:5f:67:71:ce:
                    8a:3d:fe:da:22:e2:18:fb:25:6d:2b:37:f9:92:5b:
                    bb:dd:64:be:d3:d5:70:a9:5c:b2:e9:76:07:a6:6b:
                    4b:03:63:2e:78:b1:b6:d6:97:5a:5a:4b:68:4e:81:
                    25:c1:bc:ab:66:34:a6:73:e1:7c:66:0e:cd:48:a4:
                    6b:5c:65:4e:74:de:43:f6:c5:36:57:24:28:98:55:
                    8c:d5:79:f7:c9:d2:0c:7f:21:3b:06:c5:33:2d:05:
                    5b:d3:a2:8d:04:ca:d1:fa:25:c9:28:06:3d:d2:1f:
                    7e:5a:50:96:83:91:bb:22:12:a6:d6:00:e5:13:33:
                    e6:01:66:fa:f9:97:3c:d6:a9:24:53:6b:05:4e:6c:
                    8c:c5:c1:51:5b:75:9b:61:51:4f:e0:69:80:8e:e1:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:22:A3:DE:59:10:91:4E:30:8A:57:A7:EE:65:44:64:79:44:5F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8fcfe39-c473-362d-8b3f-c41bf4da4068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:70:64:05:b9:46:82:30:95:4f:9e:7c:eb:7e:21:f7:7c:11:
         8f:de:ba:82:d6:5d:72:b5:18:7b:fd:0e:bf:e1:0b:0e:43:dc:
         a9:7c:f9:59:e3:e9:e0:9a:11:ff:ce:71:18:ba:69:f8:01:b5:
         15:55:6a:01:ea:4c:e1:86:c2:6d:da:e5:d4:79:ab:17:0f:4f:
         ac:8f:77:f5:eb:c7:bf:ab:7a:a3:20:c9:42:3e:f3:b4:91:35:
         bf:24:c4:6c:01:4b:bf:fe:b8:3d:d3:f2:f2:9f:77:d1:c2:7c:
         79:80:c2:c2:ac:a4:fb:d0:d7:7a:01:fe:be:a6:7a:ae:3a:71:
         de:d6:94:16:f5:88:f9:07:94:df:92:03:1e:94:31:64:75:a2:
         51:69:97:89:92:f9:3a:b1:36:e7:97:63:67:75:af:42:a4:76:
         12:75:f4:57:95:3e:18:77:9c:a8:29:0d:df:81:e1:6e:87:d7:
         0d:27:0d:42:cb:b3:b4:77:dc:3f:72:e4:d8:82:2b:46:55:b0:
         0d:b9:11:7a:d8:b2:c3:0a:f0:2a:e3:26:33:e6:22:e9:73:4d:
         bf:2f:48:c6:6b:c0:4a:7a:35:b5:22:be:25:f2:a6:50:ea:85:
         00:5b:09:ce:05:aa:46:e3:cf:e8:fd:6e:4f:31:f6:c9:aa:7d:
         a2:41:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:57:30 2026 by rpki-client