Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2cca03e9-39e8-3895-9aa1-920d570a3317.roa
File:                     2cca03e9-39e8-3895-9aa1-920d570a3317.roa (raw, json)
Hash identifier:          9jf4H927PRH2L7ek4jtJi2Aw7IkFhmDGBN4skPj74PU=
Subject key identifier:   94:7C:84:5A:89:38:8D:17:07:51:A3:91:EC:4C:2E:26:24:25:D2:4C
Certificate issuer:       /CN=798d5ad9-145d-4a5d-bd4c-6042dc72b63b
Certificate serial:       010D0C9F4328584D07ACEF94161FAC2834421F80
Authority key identifier: 5E:30:92:20:35:C0:B6:CF:20:D9:0B:98:92:C3:73:9F:1A:DE:2D:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2cca03e9-39e8-3895-9aa1-920d570a3317.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     8075
IP address blocks:        205.135.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ef:94:16:1f:ac:28:34:42:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798d5ad9-145d-4a5d-bd4c-6042dc72b63b
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=9bc82bd4-eaf6-4d78-9290-c286b122b25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:4e:74:bc:4f:8b:72:2a:e0:c4:72:e3:c3:
                    d3:c4:3f:2d:bf:20:a6:6b:80:66:e3:b1:30:d6:06:
                    76:8a:74:b1:2a:52:3a:a7:9a:9e:cf:31:86:6b:1b:
                    49:77:68:f2:8b:65:0e:56:66:33:96:e5:22:dc:c8:
                    a2:d7:83:cd:33:5a:32:ab:48:80:2b:a6:aa:9a:b9:
                    c9:c4:16:40:d5:69:f5:cb:39:2a:17:f6:98:46:87:
                    21:16:b9:61:31:72:e1:e5:ee:4e:6e:3a:51:7b:e1:
                    9b:0a:55:c3:f7:e3:d6:3c:53:13:57:24:a3:6d:ec:
                    94:1f:eb:c2:65:1a:83:27:84:6a:ca:b8:f9:13:e2:
                    09:59:f9:bd:89:b5:d8:16:f4:a4:05:17:db:ef:08:
                    8c:ad:72:d4:ff:77:77:4a:86:b0:4d:c0:24:d1:7f:
                    f6:f5:46:aa:6f:5c:5d:5c:85:a0:57:43:52:ba:43:
                    8d:ac:fd:fa:14:79:a5:b8:9a:b7:19:ed:f0:07:21:
                    8c:62:1b:3c:23:f5:06:ae:01:76:35:63:b1:a2:a0:
                    9c:08:86:7a:62:b4:0a:f0:f2:1d:61:d3:2a:38:3f:
                    10:68:63:82:52:22:f1:7a:8a:4f:79:e8:49:81:45:
                    99:1b:fb:32:de:7c:01:7a:53:9f:9b:85:53:01:ab:
                    28:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7C:84:5A:89:38:8D:17:07:51:A3:91:EC:4C:2E:26:24:25:D2:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2cca03e9-39e8-3895-9aa1-920d570a3317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.crl

            X509v3 Authority Key Identifier:
                keyid:5E:30:92:20:35:C0:B6:CF:20:D9:0B:98:92:C3:73:9F:1A:DE:2D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.135.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ec:c7:96:39:09:2d:6a:9b:cb:ba:75:52:0f:72:8f:81:cb:
         94:dc:07:08:8a:d5:01:89:ad:97:a3:02:a8:a3:47:a4:b6:e3:
         24:cc:99:4f:1a:38:be:d2:d5:fb:2b:92:6b:7e:dd:b0:80:69:
         83:63:06:dc:03:c0:b3:2f:d4:13:a1:e8:c8:46:4f:d5:51:2b:
         9b:cb:4b:ee:ed:a8:29:f3:0f:b1:6c:61:5a:fb:34:2c:22:83:
         20:9d:93:e2:d1:69:d1:22:cb:a7:0c:5e:66:57:dd:01:9b:d9:
         6b:58:0c:68:b9:49:76:d9:2a:f3:e8:19:9d:9c:31:27:77:ad:
         ce:70:e7:6d:26:a3:8e:85:1e:88:e9:6d:84:76:ff:03:7f:72:
         bd:2d:4a:4d:08:7d:19:f4:89:c1:08:60:ad:2f:97:cb:58:e7:
         0f:51:03:87:e2:4e:0a:4a:6f:74:0b:ee:6c:1c:63:13:a5:f4:
         f1:30:3c:cb:f9:67:0d:96:06:32:d4:10:62:a7:dd:f4:7d:09:
         e9:58:28:20:d3:b8:52:53:a9:42:45:28:10:24:f0:3d:50:46:
         84:7e:ff:8f:ed:5d:aa:f7:32:10:e2:d2:26:7e:2c:ae:82:98:
         62:8b:c3:ec:98:b9:44:a4:b2:0c:54:3c:fd:26:56:6c:95:0c:
         56:fe:38:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:23 2026 by rpki-client