Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa
File:                     18d57279-9cce-36bc-b8e1-741147e33233.roa (raw, json)
Hash identifier:          wlRKaQ6hN3RfRu2KC0mnYPNB8FWYC0aQyCcSEHcCYr4=
Subject key identifier:   A6:20:EE:1E:94:5C:5E:AE:BA:D6:DB:EF:4A:FB:9E:FF:49:57:46:DC
Certificate issuer:       /CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
Certificate serial:       010D0C9F4328584CBDB1FAB39964C30B416C0E80
Authority key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     393444
IP address blocks:        205.207.186.0/24 maxlen: 24
                          2602:fa4d::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:fa:b3:99:64:c3:0b:41:6c:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=60b64b3a-2c6b-4671-bdce-02524cce6172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:2a:d2:d8:c4:9a:25:21:75:e4:e9:73:8b:
                    df:95:0b:f0:7d:e0:ca:b2:f9:7c:c9:0b:d1:ec:0c:
                    9f:b8:c2:f5:97:e9:0c:10:56:5e:6b:40:7c:f7:27:
                    c0:de:1c:a4:1f:68:9d:97:7b:ab:92:3e:40:ed:61:
                    a0:a6:77:ea:12:7e:a3:46:18:7c:55:59:55:82:60:
                    50:3d:4f:e3:8d:af:03:ed:c5:7b:9c:a9:2f:23:57:
                    d0:41:f8:5f:c3:9d:9b:a9:72:0c:20:49:17:69:a9:
                    71:f7:5a:c7:3c:5b:ac:6b:54:7d:2f:55:fd:95:55:
                    7c:28:c3:2e:1e:bc:b6:32:e0:e3:61:66:49:a2:10:
                    11:dc:ca:09:40:23:40:e4:a8:d1:8e:b5:ab:26:5f:
                    3b:f8:3f:59:24:61:48:36:49:ae:04:d1:e0:99:39:
                    bb:7d:19:6f:38:d4:4b:1e:76:fa:9e:41:4b:e2:62:
                    24:a6:02:1b:5d:32:ce:4e:0f:c1:3c:9a:be:18:ed:
                    f5:f0:56:04:a4:c8:a8:52:6c:5d:b2:90:98:39:f6:
                    44:e1:9f:9a:ab:f3:60:b2:b0:13:3c:0c:1e:84:03:
                    9f:f4:a3:93:79:f4:28:d7:7d:b8:6d:8c:3b:d6:0f:
                    25:6d:38:23:dc:08:77:ce:cd:e7:fd:18:3c:8c:4c:
                    84:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:20:EE:1E:94:5C:5E:AE:BA:D6:DB:EF:4A:FB:9E:FF:49:57:46:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl

            X509v3 Authority Key Identifier:
                keyid:E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.186.0/24
                IPv6:
                  2602:fa4d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:90:a5:4a:89:10:ec:b8:00:79:82:b9:9a:a5:dc:56:f0:
         ab:2d:b3:8e:3a:05:4f:75:5b:62:2a:5d:1a:d7:9c:18:45:fa:
         c0:56:75:40:27:32:fa:90:1b:dd:d8:4a:4e:d5:1c:cb:6d:10:
         f8:e9:c3:a8:11:6a:fe:97:25:cc:54:1c:d5:3b:00:ce:ca:03:
         eb:fc:9f:08:b4:3e:aa:e0:85:c8:71:a6:ca:30:99:26:5e:7b:
         e6:16:3e:2f:4d:9e:cb:87:5f:6b:6d:e7:14:c2:0f:05:1b:da:
         b3:02:17:cd:05:bd:8c:df:a5:9d:3b:f2:a7:90:eb:71:ac:48:
         e8:0e:2b:39:ce:0c:6e:e2:c4:78:d1:2a:ba:19:5b:b0:cd:c3:
         b5:73:57:77:75:19:9b:54:25:e2:cf:60:b8:94:37:ef:aa:e0:
         22:23:78:64:a0:4f:7b:4b:8d:a2:61:70:28:7d:dd:fc:25:31:
         ad:bc:7b:b5:d4:b7:08:44:56:7f:4a:ca:29:ff:e1:d5:f0:b9:
         39:3b:2f:03:e6:b7:bb:89:7c:92:8a:aa:ff:05:c5:07:89:7a:
         29:b2:fc:f6:2d:e7:56:b0:a3:46:b3:e6:cc:2d:eb:8e:ad:20:
         4e:20:a0:fc:63:69:04:e5:21:3e:b6:25:61:8e:f0:ba:43:fc:
         76:72:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:11 2026 by rpki-client