Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/d08320cc-9f99-3af4-a9a4-a33f46770e8a.roa
File:                     d08320cc-9f99-3af4-a9a4-a33f46770e8a.roa (raw, json)
Hash identifier:          TGTtr4CZ+T9ounvPVle13RBG+pEZNVTum5TIC/1lP3E=
Subject key identifier:   BD:1A:C3:E2:38:3F:A8:76:69:4B:21:03:87:AC:6C:99:66:FC:63:87
Certificate issuer:       /CN=1307cbfa-a030-43a2-b7be-5e4c646687de
Certificate serial:       010D0C9F4328584D5E1A4A112B1A1A9B6F3C4370
Authority key identifier: F4:F9:71:54:94:96:C9:86:17:D9:50:0F:50:84:72:94:3B:29:58:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/d08320cc-9f99-3af4-a9a4-a33f46770e8a.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        205.235.120.0/24 maxlen: 24
                          205.235.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/1307cbfa-a030-43a2-b7be-5e4c646687de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/1307cbfa-a030-43a2-b7be-5e4c646687de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:4a:11:2b:1a:1a:9b:6f:3c:43:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1307cbfa-a030-43a2-b7be-5e4c646687de
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=e2b1dd6d-e904-415f-b342-5a16fa0f9a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:b1:7b:6a:63:b2:91:59:76:a9:0a:07:66:
                    bb:5b:15:e2:3c:c6:54:48:bf:32:4d:25:b9:36:85:
                    a3:e4:46:70:05:69:10:90:6a:51:46:27:e1:eb:8d:
                    bd:e6:40:d0:03:23:2f:c2:60:99:aa:81:0a:e0:1e:
                    9a:9c:a5:4a:1a:87:77:e7:0c:b5:01:51:d2:ea:90:
                    91:0f:0b:61:41:df:0b:ca:7e:f2:42:f8:d6:f5:60:
                    f0:03:f4:5d:b8:ee:e5:7f:7f:d5:07:06:e8:b7:49:
                    9c:71:42:bc:6c:80:38:32:aa:ff:9d:48:4a:56:51:
                    4a:c3:ff:25:10:b0:18:ae:05:4b:cf:74:dc:97:f2:
                    74:e7:ce:a6:91:4a:13:7a:1e:e1:f3:5b:21:20:88:
                    5d:f1:48:4d:c8:b8:fc:b3:e3:2e:60:63:a9:8c:aa:
                    5c:3b:aa:15:d6:0b:10:79:c6:f9:cc:6f:81:5e:ef:
                    ad:24:b6:22:83:46:83:07:e4:a1:7a:98:9b:39:b8:
                    a7:2d:3b:b7:0c:ae:57:8a:41:86:ef:d8:37:bc:08:
                    4f:0f:97:14:48:1f:a9:77:5b:d8:1e:68:89:26:5f:
                    f3:e5:ba:73:db:4f:49:82:e9:75:de:b3:50:78:5b:
                    10:91:d9:e3:b2:2b:c0:b9:51:7b:dc:fb:2e:4b:b5:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1A:C3:E2:38:3F:A8:76:69:4B:21:03:87:AC:6C:99:66:FC:63:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/d08320cc-9f99-3af4-a9a4-a33f46770e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/1307cbfa-a030-43a2-b7be-5e4c646687de.crl

            X509v3 Authority Key Identifier:
                keyid:F4:F9:71:54:94:96:C9:86:17:D9:50:0F:50:84:72:94:3B:29:58:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.235.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:08:ee:1b:d7:31:7e:7e:d6:e4:5d:06:49:55:be:6a:8d:58:
         ae:68:a6:90:ad:27:8e:87:ef:e2:72:e9:e7:cd:5f:51:8c:05:
         81:f9:1b:99:7f:7a:26:8f:cb:d2:3b:c0:19:a6:c6:cf:52:61:
         49:a8:0e:9a:66:f7:77:03:05:9f:f6:17:cd:8f:9c:76:18:e5:
         2b:93:e8:7e:3e:5f:45:dd:27:97:c8:c5:6e:8f:0a:7d:a9:4b:
         a1:65:43:f3:1b:ec:84:67:ab:0c:d4:1e:7b:db:f9:af:df:38:
         3c:f5:45:75:2b:b1:d2:c9:5e:e8:55:ae:a9:af:51:f8:03:e4:
         e4:4e:2d:f3:67:41:33:d0:26:f9:2f:a4:39:35:8b:52:41:60:
         68:e8:15:19:14:11:76:ee:54:76:39:18:47:50:ea:5d:46:88:
         4b:f2:83:3c:0b:7d:69:6b:29:d3:18:e1:d9:30:d5:58:fd:1c:
         b9:8e:ce:06:0b:76:75:d7:2e:ce:49:fe:f8:59:c2:de:10:20:
         1a:35:07:1d:e2:99:f5:1c:10:28:ad:4a:5b:82:1c:f6:c7:9f:
         06:0c:4b:a7:79:87:ed:de:ab:e0:e7:0f:b5:ca:f3:84:5c:d4:
         01:a3:76:0d:6b:7d:97:15:1d:eb:dc:f0:f8:3a:4f:cc:d3:dc:
         ee:f2:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:15 2026 by rpki-client