Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa
File:                     2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa (raw, json)
Hash identifier:          sk12q19wZWZFLcHOzSiXLyuw14t4edxfB3lGf503j1U=
Subject key identifier:   2D:BB:84:60:4C:AD:18:17:17:0B:D8:0D:1F:B3:2E:8A:DD:A7:41:55
Certificate issuer:       /CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919
Certificate serial:       010D0C9F4328584CBF172BCF087270261A88CE28
Authority key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     203
IP address blocks:        205.233.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:2b:cf:08:72:70:26:1a:88:ce:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=3474773f-3169-4156-aac5-57c6d5bfbed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:f3:af:9a:34:8b:57:cd:cc:69:5f:c0:46:
                    6d:c1:d6:44:d3:c5:98:b9:4e:0f:32:c9:1a:73:d3:
                    42:28:cf:fd:be:82:12:4e:2c:d6:1a:86:2a:c8:1b:
                    cb:65:b8:77:0b:07:78:32:f9:c8:46:09:d9:07:b6:
                    67:91:4d:e2:d7:6f:7d:d0:c7:93:12:63:a9:de:35:
                    ce:83:83:f2:49:6b:ee:17:7e:02:fa:91:ae:b5:33:
                    f3:fd:1b:61:57:3b:98:f8:55:f9:19:21:2c:d2:c2:
                    5f:ac:9f:5b:6b:5a:cc:c5:10:8e:a8:89:37:35:ca:
                    21:9b:7c:0c:dc:3d:fa:89:49:f6:40:54:89:da:00:
                    43:bf:f5:41:7b:e1:75:fb:f1:a0:5f:d4:48:23:dd:
                    38:d1:44:93:b9:08:08:42:3b:7d:3a:dd:0f:b2:14:
                    35:16:07:9d:e7:6e:a9:9e:03:ff:3e:5a:98:15:ab:
                    f2:4e:3d:ee:d7:92:44:63:81:e1:cb:4c:87:3f:7b:
                    a7:c8:9d:2a:e5:74:ea:df:c0:65:15:1c:02:13:30:
                    36:3d:1a:ff:9c:ee:e4:9b:a8:e7:ed:d8:5b:17:55:
                    af:aa:db:55:61:37:72:f1:d4:74:82:af:00:4d:1f:
                    5a:8a:c2:f7:64:b6:0d:ee:e0:62:35:9b:13:1f:97:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BB:84:60:4C:AD:18:17:17:0B:D8:0D:1F:B3:2E:8A:DD:A7:41:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl

            X509v3 Authority Key Identifier:
                keyid:13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d4:09:d6:35:31:ab:4a:82:9d:7b:73:82:4d:26:7e:b0:3f:
         b1:48:31:8e:b0:2e:dc:35:75:eb:85:02:ad:7b:cd:35:8a:39:
         85:e0:0d:3b:d7:ff:b2:31:f6:1c:92:87:be:60:a9:75:06:f9:
         ba:51:30:2b:51:cd:b5:c7:96:83:05:a3:8b:34:7c:da:72:04:
         9d:4d:37:a8:7a:59:7f:3a:1f:ad:52:33:c1:af:ba:32:72:8b:
         66:40:2c:f5:6c:a4:b6:3b:59:37:71:12:5f:2b:6a:a3:da:a5:
         ac:72:47:c7:21:e5:f2:cb:08:9f:a0:40:37:e3:f2:43:48:8c:
         93:6f:ff:26:26:08:87:06:df:16:01:b6:0e:1a:04:01:70:8b:
         80:e7:c4:36:03:93:97:b0:df:7c:bf:ef:97:66:e0:3f:6e:65:
         16:90:85:69:6a:28:3d:36:08:2e:9d:46:6e:8c:fb:05:0d:89:
         a5:5e:da:01:5b:31:f8:27:83:08:28:a8:05:e3:20:e7:79:a5:
         60:94:e8:67:79:c6:4d:cf:95:98:5b:1c:e0:d5:2e:58:ec:c2:
         3d:9a:68:14:20:6a:fc:ac:ce:7e:69:9a:ab:e4:2a:20:fe:8b:
         83:78:b2:b7:bf:e8:a7:d4:a9:ff:42:55:f1:cb:92:47:75:27:
         62:e3:44:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:10 2026 by rpki-client