Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/83b8e033-666c-33d3-ba7b-5c8e6a034c3d.roa
File:                     83b8e033-666c-33d3-ba7b-5c8e6a034c3d.roa (raw, json)
Hash identifier:          BnTBRKaqCNchgBiffPHb2J1wN2C1/cswRY8tdTRnPTQ=
Subject key identifier:   B2:6A:9E:8F:7E:2E:A5:C4:CA:13:47:77:9C:F5:27:6E:EB:12:52:4D
Certificate issuer:       /CN=cda047c8-1dc9-4cca-b1de-b651af254414
Certificate serial:       010D0C9F4328584CEE8CE18EEF260AD44B6D6380
Authority key identifier: C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/83b8e033-666c-33d3-ba7b-5c8e6a034c3d.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     51396
IP address blocks:        204.76.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:e1:8e:ef:26:0a:d4:4b:6d:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda047c8-1dc9-4cca-b1de-b651af254414
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=df918687-e407-42a6-87e6-91d530d52efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:19:fa:4a:34:ac:b2:16:c1:48:70:c1:64:
                    61:96:b2:bf:82:b7:24:b2:78:89:e4:07:73:38:0c:
                    2b:76:5f:0d:c8:ff:70:6f:62:91:b5:47:da:80:71:
                    84:54:68:e9:1f:6d:68:b3:0a:44:b1:fd:18:9f:34:
                    f2:c4:0f:46:b0:2b:9a:0e:98:5a:a9:85:39:87:df:
                    63:21:b4:a2:26:61:73:0c:9a:df:69:6f:22:4c:57:
                    cc:2e:e5:cd:cd:19:cc:06:0c:89:f1:ae:47:90:c1:
                    00:1b:48:57:b6:c2:c1:dc:58:a0:fe:6c:bd:46:ef:
                    10:75:6e:43:f1:45:ea:f8:3a:d8:ba:46:c1:09:9e:
                    b4:67:05:3a:71:ba:e3:cc:08:d5:f5:a5:ad:8a:2d:
                    f0:94:6c:86:38:a7:cf:50:98:51:d6:55:26:a6:1d:
                    eb:64:bd:a4:39:d7:08:1c:80:9e:82:8b:52:49:90:
                    0f:48:77:ed:bf:62:ad:e2:09:15:d5:85:b6:1a:cd:
                    4a:c2:53:76:ff:e2:ac:c5:14:d8:d6:e6:d0:17:19:
                    20:ac:8c:74:69:2d:3d:23:cb:21:58:27:06:37:2b:
                    73:52:62:15:68:2b:13:81:2f:33:78:3b:0b:7a:14:
                    59:db:11:46:15:71:8f:51:4f:fe:9e:c1:2b:bf:f5:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6A:9E:8F:7E:2E:A5:C4:CA:13:47:77:9C:F5:27:6E:EB:12:52:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/83b8e033-666c-33d3-ba7b-5c8e6a034c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.76.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ff:31:91:5e:ac:51:68:c1:53:fc:52:46:53:99:e3:14:19:
         6c:4e:1b:ef:23:64:a8:a1:28:86:22:ac:fd:88:71:20:26:1a:
         7c:34:71:ea:d8:ba:b6:4c:1e:3d:69:02:ef:b5:a6:04:5a:f8:
         a0:29:fc:be:0a:a7:c2:01:4a:a4:c1:59:f1:72:2f:cc:29:d4:
         b1:b6:c9:50:bc:a1:ee:c4:d1:89:aa:49:01:69:23:83:ce:66:
         76:f3:90:63:b6:09:d6:61:6b:ec:ff:e9:8e:5d:ae:76:29:4d:
         9b:12:b9:f8:bc:4b:9b:05:1d:51:94:48:32:71:14:69:18:6d:
         21:7e:72:c3:54:a1:90:6b:f1:8f:b7:0d:03:f3:f6:80:e9:74:
         ef:c8:89:9d:33:64:e1:b2:33:ff:1b:fb:70:39:6f:8d:57:b5:
         33:8d:40:f5:4c:f8:72:cd:6f:95:ca:5b:41:b0:2f:64:f5:70:
         0e:45:d3:8c:61:25:62:d9:1b:0d:be:3e:a4:64:83:4f:ed:40:
         80:58:34:40:16:38:f4:26:2f:1c:60:0d:cc:0f:d9:ab:7e:71:
         f1:b5:ae:6f:c5:9c:3a:4d:74:f4:5e:bd:cd:ac:42:1e:d6:5c:
         3b:b9:30:93:f5:b4:85:8d:41:5b:c4:13:f3:f2:74:66:0d:34:
         dc:a0:de:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:33 2026 by rpki-client