Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/fc6ef2da-85be-37e6-9c63-2d35644b9303.roa
File:                     fc6ef2da-85be-37e6-9c63-2d35644b9303.roa (raw, json)
Hash identifier:          7WnUfhUFisB/5f6ULFoAADxiyy2xVn4ams1M17n2Wc8=
Subject key identifier:   1D:9D:CC:57:D0:09:24:BB:B4:70:63:F7:3A:EE:D3:3F:FF:92:F7:84
Certificate issuer:       /CN=4ae94b09-7143-463d-a217-f7e62f4a7dc0
Certificate serial:       010D0C9F4328584D5E1A516222FB3162EBF83F00
Authority key identifier: E6:11:AC:38:33:0A:D5:A7:3B:80:0D:45:0B:75:C4:9A:7D:00:C9:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/fc6ef2da-85be-37e6-9c63-2d35644b9303.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        205.166.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:51:62:22:fb:31:62:eb:f8:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae94b09-7143-463d-a217-f7e62f4a7dc0
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=13a480f3-08ad-4786-bcf0-195ab1bc9516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:c9:01:98:84:e1:84:8e:47:95:e2:53:f0:
                    58:84:c6:bf:ac:38:f8:33:da:e9:3a:e5:5c:99:70:
                    c6:ab:04:f2:46:f1:e4:8e:17:08:bb:21:0e:cd:de:
                    04:2e:b0:bb:2e:dd:9e:f4:32:48:aa:5b:41:85:1b:
                    c0:63:99:61:0c:b4:ed:d3:11:40:01:a1:e4:ef:58:
                    cd:ba:04:c3:4c:fc:b4:d1:08:f8:d6:a0:4b:ab:ba:
                    94:52:24:ce:61:fb:85:53:73:ab:64:a8:79:c1:1c:
                    da:c4:9a:07:11:68:fa:0a:f7:f4:02:51:06:c8:a0:
                    0b:3a:bd:dc:17:96:bd:e8:4a:f8:34:ef:76:20:91:
                    ae:c1:20:b6:41:a5:2c:ac:43:bf:ee:f7:08:52:de:
                    18:f1:21:89:ca:0f:fd:81:21:19:3c:57:d8:2c:db:
                    8a:c8:63:ff:11:d3:cd:4a:1c:31:36:31:6f:1e:42:
                    d8:f2:ba:c8:4b:25:8d:a5:93:b2:ec:ac:e2:1b:f5:
                    19:8b:3e:7b:d3:84:e8:06:67:52:53:20:c5:11:aa:
                    43:a9:fc:91:ca:77:c6:82:d3:1d:80:8a:ba:95:be:
                    87:64:12:31:2d:40:ac:22:62:db:e8:63:c5:5c:dc:
                    0f:5b:5c:e6:c3:ce:e2:d7:58:67:88:08:49:a8:7f:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9D:CC:57:D0:09:24:BB:B4:70:63:F7:3A:EE:D3:3F:FF:92:F7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/fc6ef2da-85be-37e6-9c63-2d35644b9303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.crl

            X509v3 Authority Key Identifier:
                keyid:E6:11:AC:38:33:0A:D5:A7:3B:80:0D:45:0B:75:C4:9A:7D:00:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:76:8e:65:5d:41:07:df:23:2b:e2:90:78:80:9e:f7:fd:a6:
         51:b2:ba:db:01:d5:63:67:67:4d:1d:1f:fd:88:f0:b9:02:60:
         f3:93:63:db:c2:4f:0b:87:ef:f0:e1:dd:62:41:5d:76:4e:75:
         e1:37:d2:d5:73:c4:82:3f:cb:2a:72:2c:7f:77:68:81:85:cd:
         f6:a6:b3:96:98:f4:74:2b:28:26:2e:2c:fa:bb:d8:f1:1c:a8:
         48:af:88:df:32:72:3c:5a:01:64:df:80:20:07:15:65:39:25:
         d8:82:bb:f0:c2:28:29:a0:76:76:a6:e7:8a:88:d2:5b:4e:b3:
         bd:b6:0a:bd:c6:cd:43:c3:27:d0:f6:11:cb:9c:e2:88:0b:9e:
         77:80:81:00:c5:df:e8:9f:a2:3f:ac:5b:28:69:99:b4:5f:b0:
         32:3c:84:68:a4:e4:f1:f8:6a:08:d7:42:28:9d:e8:d6:1c:f6:
         5d:c9:a2:ec:d3:7a:5b:1b:e9:32:a0:11:1e:60:ca:a2:47:29:
         f5:4e:35:e9:98:34:f2:ed:5a:99:b5:7f:51:90:cb:bf:14:75:
         90:26:3c:cc:52:5f:0d:fe:09:2c:e7:de:48:dc:84:ea:48:3b:
         a1:c4:7f:8e:bd:a9:26:1d:47:6b:06:ca:58:cb:a3:d9:da:dd:
         59:f5:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:45 2026 by rpki-client