Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fd1560b5-659c-31f0-a13b-f7689ab68aa7.roa
File:                     fd1560b5-659c-31f0-a13b-f7689ab68aa7.roa (raw, json)
Hash identifier:          IWLlON7jJ6CkLkcJ+tWDyNXE9T1JzKsWeqIH0QXws4k=
Subject key identifier:   A8:8D:CD:D9:5E:D2:F1:D8:B9:73:88:E4:9A:DB:2F:4F:75:FE:5B:32
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584D5E1A472FEB7EDC17A98083C0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fd1560b5-659c-31f0-a13b-f7689ab68aa7.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     996
IP address blocks:        144.208.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:47:2f:eb:7e:dc:17:a9:80:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=0a512332-8239-4895-bf68-66feef1e5ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:b6:19:8c:00:dd:ff:32:89:e7:c6:cb:4e:
                    6e:30:28:35:f7:72:a0:85:b6:ca:c3:eb:e7:8f:fb:
                    8d:75:d6:dd:da:0d:1c:9f:6c:c8:4d:f7:7e:f1:90:
                    bf:4d:cd:93:88:a2:6a:25:70:cd:c1:06:8a:35:bc:
                    dc:c7:a9:e9:84:77:b5:dd:9e:d7:8c:fe:5a:49:ad:
                    42:ec:a0:8a:b1:cc:cb:71:be:dc:9c:d0:4e:54:45:
                    72:ce:76:2d:3f:1b:ce:69:08:25:a0:f3:b5:6d:2c:
                    b2:aa:58:3c:4b:b6:d2:a0:c0:38:7c:7b:2a:7b:d9:
                    34:e2:1c:71:ba:83:20:b6:50:fa:25:d5:e4:7a:60:
                    18:4d:f2:fb:2b:7f:dd:40:e1:7b:bb:e1:cc:ae:21:
                    08:1e:70:34:75:52:fa:73:8a:bc:1d:61:91:f8:87:
                    73:6e:05:ac:a3:9a:d3:e2:3f:32:ce:73:79:0d:10:
                    8a:e4:22:ec:44:14:84:9f:f6:5a:18:31:82:46:54:
                    59:0f:ff:85:3f:a8:d1:55:e8:5e:9e:e4:49:7a:20:
                    e4:ee:1e:e8:a7:22:1a:9d:f8:07:96:4f:b0:9f:7c:
                    f2:7d:5d:52:00:27:eb:fa:6f:9f:d7:a8:49:ee:90:
                    e2:69:1e:8b:bb:b5:30:f6:4c:1e:59:5a:45:67:48:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8D:CD:D9:5E:D2:F1:D8:B9:73:88:E4:9A:DB:2F:4F:75:FE:5B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fd1560b5-659c-31f0-a13b-f7689ab68aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.208.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bb:02:68:0e:e5:e2:b8:00:4e:d8:27:e7:43:99:03:2c:98:
         c4:33:9f:fe:6d:f6:51:49:f7:a2:20:ef:34:a9:ad:78:50:4b:
         6c:2c:e1:70:e8:b8:d3:c1:64:35:6d:d6:d1:9b:8b:2c:cb:94:
         18:c4:44:ac:c9:9a:7b:da:3d:40:0d:39:fe:be:3a:94:8b:52:
         22:23:a7:04:99:b3:58:69:40:48:7b:dd:b3:08:a9:66:05:f6:
         db:fd:26:76:2c:70:1e:3f:b2:0b:3a:d9:5e:64:32:ac:56:ff:
         82:67:2a:34:61:0d:50:90:87:60:d3:ee:8b:f5:26:5d:3c:95:
         00:57:2b:a4:0e:84:7a:fb:01:be:e6:84:79:73:97:42:e9:1d:
         05:a2:05:86:26:53:c2:5b:55:2f:b9:1c:f1:6f:46:6c:e5:73:
         21:aa:16:7d:5b:d4:34:66:d1:cb:2f:23:5b:b4:ed:41:58:72:
         4f:ba:40:37:92:25:86:ac:73:eb:19:12:0b:b7:c5:1c:6b:28:
         11:87:b4:f6:26:9e:46:9f:8a:13:a6:44:95:70:4e:f1:64:14:
         5d:f4:22:33:be:5a:cf:21:0e:ad:05:96:fe:fc:ee:01:18:ba:
         78:1b:3e:6b:a8:4a:a6:0f:49:b6:c5:e2:0b:e7:98:fa:55:21:
         f9:e7:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:41 2026 by rpki-client