Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d4080bc2-d599-30ee-b9a5-f74d1114a892.roa
File:                     d4080bc2-d599-30ee-b9a5-f74d1114a892.roa (raw, json)
Hash identifier:          NJ41JQ+lxlxaUmBpR+u/4/wmbXN2nmZI70314m3VYDs=
Subject key identifier:   63:6C:56:F0:CF:D0:74:E8:9C:0E:23:4E:F6:7B:C3:51:3C:BA:C3:26
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584D52433C12F179F662E9E8B1C0
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d4080bc2-d599-30ee-b9a5-f74d1114a892.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     17497
IP address blocks:        173.205.1.0/24 maxlen: 24
                          173.205.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:3c:12:f1:79:f6:62:e9:e8:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=16e79da0-cdc6-4782-b3b9-99c84ec33dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:56:7b:28:fe:57:24:ee:99:12:4b:8f:2d:
                    88:0f:f5:26:e8:a4:aa:27:6c:4f:ea:a6:c8:34:dd:
                    8c:9f:12:ce:0a:ef:00:74:70:b8:d0:31:ba:c7:0e:
                    25:46:6d:c2:bb:5b:cc:47:28:aa:3f:42:bf:bf:3f:
                    7f:8e:7d:df:50:5f:47:9a:70:b2:fa:47:43:7a:25:
                    ab:9e:2c:21:e4:55:04:39:22:d9:0b:21:9a:ff:b4:
                    9b:aa:b1:40:6d:b4:63:0f:f1:2f:47:6b:af:0a:ea:
                    5c:aa:05:6a:f4:b4:9e:d8:61:70:7f:f2:d2:7f:fe:
                    17:73:3c:75:e1:4c:c6:ba:7f:9b:88:23:21:80:06:
                    31:2e:66:5d:0d:de:2a:11:97:49:77:65:f7:1c:f0:
                    69:cb:a4:eb:c7:b7:e3:bf:7b:54:8d:0c:0c:48:d9:
                    a0:2d:d9:36:bf:8c:50:96:de:10:1a:fd:40:29:5a:
                    f0:f7:0c:a9:20:c1:83:c4:2e:3b:6e:93:ef:f2:c9:
                    ba:9e:0a:d0:b0:eb:1d:34:02:49:33:d4:58:47:74:
                    6f:96:4b:b7:64:ee:a5:1c:d0:ee:ac:fe:15:dc:ca:
                    b9:34:79:83:a9:1c:83:aa:04:c7:21:d3:6d:1f:d7:
                    98:3a:21:db:ad:3e:1c:ea:cb:b2:74:a3:74:37:e5:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6C:56:F0:CF:D0:74:E8:9C:0E:23:4E:F6:7B:C3:51:3C:BA:C3:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d4080bc2-d599-30ee-b9a5-f74d1114a892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.205.1.0/24
                  173.205.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a2:1c:6b:6c:dc:bc:a4:34:b7:23:01:ea:21:ce:39:86:3f:
         88:4e:81:c1:a8:65:9f:68:dd:10:50:5d:77:b0:44:17:3e:3d:
         8e:f7:5a:26:b4:d0:f4:ce:09:4f:39:3e:74:c0:80:15:55:6f:
         4b:b9:b1:b4:4b:2d:9d:b8:cc:78:8e:4a:84:d6:43:ce:2a:ff:
         e3:6c:b2:c9:75:69:f2:9c:d6:55:c4:e2:b3:ab:c3:42:78:22:
         33:73:a6:6b:4f:e6:5c:8f:46:cf:8b:a2:aa:c8:f9:f0:5d:60:
         38:a2:2f:08:36:93:19:01:c8:a6:2a:52:ab:b3:16:43:ef:94:
         02:21:14:c3:d0:09:d4:a5:91:a7:16:13:47:ad:1c:bc:64:60:
         01:75:43:42:d9:5e:8b:d8:02:17:02:1b:47:ee:73:a9:f9:73:
         9e:78:1a:f9:c5:65:fc:28:46:4a:35:ac:09:19:a3:aa:a8:7a:
         d0:3e:93:e2:23:ec:ba:52:a3:35:7c:6c:61:f8:a5:ca:20:35:
         84:d4:da:e7:77:2c:d1:e4:7c:65:4e:5f:e4:60:15:34:a8:64:
         91:82:21:e2:3f:cd:99:20:a1:88:7d:05:04:d8:c6:9c:6d:54:
         25:9b:d3:ea:a9:99:6f:f8:f2:6e:c7:dd:3a:f1:3d:49:ab:d6:
         47:83:bf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:22:28 2026 by rpki-client