Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/c1e90196-450e-3b65-aafd-c0cd63ad43e6.roa
File:                     c1e90196-450e-3b65-aafd-c0cd63ad43e6.roa (raw, json)
Hash identifier:          ojZz2ojattgZDCh5nsdHIiLq8igYaYuSTbcnh/sbWog=
Subject key identifier:   DB:9F:99:1A:99:8F:BE:27:B4:FC:7E:29:17:D9:77:27:86:4E:17:97
Certificate issuer:       /CN=6935e5f0-57c3-49af-bbca-0feb72f3c19b
Certificate serial:       010D0C9F4328584CC347420653822A863607FB00
Authority key identifier: 6B:A9:25:AB:2E:3C:50:09:B3:A3:40:A3:2A:47:41:4D:25:59:1C:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/c1e90196-450e-3b65-aafd-c0cd63ad43e6.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        205.235.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/6935e5f0-57c3-49af-bbca-0feb72f3c19b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/6935e5f0-57c3-49af-bbca-0feb72f3c19b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:42:06:53:82:2a:86:36:07:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6935e5f0-57c3-49af-bbca-0feb72f3c19b
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=405d2f3b-c642-47f0-a6a2-356fd0d56062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:62:4a:5d:d4:95:fe:38:ac:dc:e3:c2:66:
                    ec:a3:ed:3d:ac:7d:b9:ee:7c:5c:fc:70:5f:13:c1:
                    15:18:a8:9d:22:5f:ec:e7:9f:a6:a5:95:f2:6a:c3:
                    d9:95:e7:11:99:10:51:f8:ff:97:50:2c:a2:8a:15:
                    c5:f4:ea:25:38:b5:c2:07:9f:d8:5f:89:4b:3c:65:
                    51:27:bc:23:07:f9:b1:22:f0:51:b5:f0:d0:4b:d2:
                    95:bb:94:79:0f:e4:36:e8:db:c2:60:a8:cd:ab:7c:
                    c5:a5:5c:e6:44:67:5b:4d:ec:4b:b6:c6:ec:b8:c2:
                    c6:b3:0e:46:2d:18:72:5b:e8:1c:72:65:ac:98:ee:
                    94:69:4c:56:89:4e:8d:dc:29:49:dc:3c:da:60:de:
                    4a:df:49:05:f0:0f:5b:f4:56:4a:49:44:7b:95:f3:
                    7e:0e:48:f2:b6:63:56:4f:45:87:72:e6:5f:22:4b:
                    41:be:7f:ed:82:66:3f:3d:5a:01:ac:92:11:3c:cb:
                    42:36:12:e6:9b:b7:e3:bb:ae:9b:bb:98:02:95:28:
                    a3:4c:ed:95:3e:8e:53:98:68:2e:90:05:15:c3:c1:
                    0a:ed:f3:a0:63:a8:5b:24:95:db:86:eb:66:38:30:
                    45:b7:d7:9e:9f:0f:1c:03:14:ac:d3:ab:a3:0f:19:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9F:99:1A:99:8F:BE:27:B4:FC:7E:29:17:D9:77:27:86:4E:17:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/c1e90196-450e-3b65-aafd-c0cd63ad43e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/6935e5f0-57c3-49af-bbca-0feb72f3c19b.crl

            X509v3 Authority Key Identifier:
                keyid:6B:A9:25:AB:2E:3C:50:09:B3:A3:40:A3:2A:47:41:4D:25:59:1C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.235.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ee:0a:d2:c9:34:27:4c:ec:9f:9b:de:aa:22:c7:91:e7:4c:
         1d:81:8f:3b:0a:fc:0b:9e:65:b3:16:8f:88:5b:b2:6e:c9:c2:
         01:f4:db:d3:7a:12:c6:44:fb:d6:8f:26:98:a4:78:84:a0:13:
         1d:4f:29:15:c5:8f:09:ea:fa:67:d5:15:71:55:9e:49:d4:16:
         13:dd:d9:6c:6f:f3:91:34:38:f7:a4:10:a1:29:e4:6c:2d:7a:
         29:20:80:e7:df:34:7f:91:d1:31:01:1c:cc:aa:e8:53:1c:af:
         4b:03:30:f1:98:62:08:66:a1:d9:13:49:31:f5:70:5a:24:a2:
         8d:e4:db:ac:1a:01:26:60:e5:50:16:19:a2:e0:36:c0:4e:69:
         8a:75:ac:9d:f0:74:da:dc:31:d7:c7:81:f5:44:2b:7a:81:97:
         3b:0b:78:52:d4:69:a9:18:88:e2:44:43:0a:4f:3b:ae:8e:15:
         1e:3e:15:47:f6:3b:9b:b7:68:2a:96:48:bb:39:58:ae:b5:c1:
         f0:06:79:60:67:a9:54:75:16:1c:8c:c3:23:3c:89:77:d0:e4:
         51:e5:f7:51:d6:40:44:5a:eb:3c:ec:9b:66:44:7d:f5:f6:d8:
         cc:4b:98:0e:00:c5:d2:48:6f:8f:28:34:2c:ed:54:22:33:96:
         50:b3:90:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:07 2026 by rpki-client