Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/acdd845f-300a-3722-83d8-ab6af04d4d14.roa
File:                     acdd845f-300a-3722-83d8-ab6af04d4d14.roa (raw, json)
Hash identifier:          NvZbp3/GRaA9MbpiT0AnGQ4dRCZJileysjJXNd3EO7k=
Subject key identifier:   63:9B:B2:23:EF:02:B4:65:E7:84:CA:B2:D2:A8:23:25:FD:6C:EF:96
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584CFB51948B8A472287A7B8AE40
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/acdd845f-300a-3722-83d8-ab6af04d4d14.roa
Signing time:             Wed 25 Feb 2026 15:46:54 +0000
ROA not before:           Wed 25 Feb 2026 15:46:54 +0000
ROA not after:            Tue 26 May 2026 14:46:54 +0000
asID:                     20001
IP address blocks:        204.237.128.0/23 maxlen: 24
                          204.237.140.0/23 maxlen: 24
                          204.237.172.0/23 maxlen: 24
                          204.237.180.0/23 maxlen: 24
                          204.237.190.0/23 maxlen: 24
                          204.237.192.0/23 maxlen: 24
                          204.237.204.0/23 maxlen: 24
                          204.237.208.0/23 maxlen: 24
                          204.237.246.0/23 maxlen: 24
                          204.237.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:51:94:8b:8a:47:22:87:a7:b8:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Feb 25 15:46:54 2026 GMT
            Not After : May 26 14:46:54 2026 GMT
        Subject: CN=a35e38a6-becb-4035-ab45-4e81b0ee257c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:7f:2a:dd:c6:c3:3d:1b:c3:04:1b:32:27:
                    da:29:58:c8:57:d6:1b:00:3e:95:41:29:56:d1:26:
                    92:c6:ce:7f:05:e8:4b:20:63:81:d2:84:61:1b:e3:
                    cd:e5:c1:01:c6:b6:19:02:cc:00:ef:16:f8:99:d1:
                    15:59:56:b8:59:51:68:37:53:fe:41:b0:23:0d:57:
                    e1:8a:9c:0f:6c:b4:6a:44:be:03:3e:61:86:8f:93:
                    50:86:71:55:22:ec:5b:85:30:d4:35:d0:d4:df:1d:
                    1f:3c:73:46:89:55:39:55:20:a0:52:e4:e5:9b:2a:
                    04:2e:b5:c3:2e:fc:c6:78:d6:f6:6a:69:5b:0b:38:
                    c3:07:68:af:e2:d8:02:0a:8b:a8:39:39:5b:b2:12:
                    a9:9b:f3:07:29:53:d9:3d:7a:88:04:c9:88:47:aa:
                    59:40:14:02:e3:23:16:4a:88:70:41:9f:d8:bd:80:
                    c2:2c:c1:5d:67:45:d8:31:31:e1:42:a8:14:e1:35:
                    fe:e7:23:19:7f:fc:84:dc:17:72:84:7b:66:c0:45:
                    5c:fc:4f:d9:be:f6:a2:ee:fc:bf:d0:cf:d4:46:c9:
                    2b:ef:85:80:d2:e0:c1:de:ed:33:03:e2:e0:31:a7:
                    73:3a:ae:de:84:b1:82:f0:25:2b:10:90:d5:71:62:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9B:B2:23:EF:02:B4:65:E7:84:CA:B2:D2:A8:23:25:FD:6C:EF:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/acdd845f-300a-3722-83d8-ab6af04d4d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.237.128.0/23
                  204.237.140.0/23
                  204.237.172.0/23
                  204.237.180.0/23
                  204.237.190.0-204.237.193.255
                  204.237.204.0/23
                  204.237.208.0/23
                  204.237.246.0/23
                  204.237.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:06:7d:5e:00:5e:64:6a:7e:d6:4d:67:c7:72:c0:92:ba:aa:
         0a:0d:6f:c6:de:e2:f6:38:86:d9:24:1e:b5:05:a2:88:28:47:
         a2:f9:90:15:ef:a2:ff:34:ef:1d:28:94:73:a4:af:70:47:cb:
         b9:e3:de:00:40:2d:71:ac:a3:e2:51:eb:74:1f:34:7c:ec:bd:
         54:91:bc:86:12:7c:97:ff:46:e7:44:7a:71:23:9e:16:93:44:
         87:14:80:e1:ba:32:f5:ca:31:7c:cd:b8:3a:e3:cf:20:cf:41:
         1e:d5:28:a4:a8:d4:e5:9a:0f:e3:52:bd:ba:54:8c:b0:0f:11:
         1a:de:b4:04:66:ec:36:bd:f8:71:89:97:5a:44:c0:1b:22:95:
         27:0c:6e:6f:d7:eb:ff:af:5c:c9:0e:06:c3:66:cb:52:44:8c:
         c5:ad:36:40:37:01:68:60:cb:46:51:6a:4a:f3:92:34:7b:fe:
         5d:90:c9:47:7e:a4:89:62:00:70:1f:d1:5f:a9:47:9f:81:d0:
         7e:96:45:4b:4c:92:37:fb:0f:48:0d:ef:a0:63:d0:8e:8c:81:
         5c:db:e8:5b:3e:30:51:36:a1:1a:75:29:52:02:eb:08:51:75:
         fc:e1:06:c3:ce:d6:47:e3:09:34:29:43:d8:73:52:10:61:f2:
         0b:ab:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:25 2026 by rpki-client