Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4cece0f-9822-47f8-877a-25441688154f/e27c8e9b-1a49-3850-84f3-8e5fa7b6a4cd.roa
File:                     e27c8e9b-1a49-3850-84f3-8e5fa7b6a4cd.roa (raw, json)
Hash identifier:          dRtgKhIpLEAztd42YNi7zoxFbcRjz3Hj+96EjKg2OfI=
Subject key identifier:   45:E4:6C:79:A8:CD:91:73:1F:00:B5:53:5D:5C:54:41:43:BB:42:F4
Certificate issuer:       /CN=f4cece0f-9822-47f8-877a-25441688154f
Certificate serial:       010D0C9F4328584D773A83B74245B0820C3DC680
Authority key identifier: B4:5B:61:5E:4B:4F:3F:FB:95:EE:5A:5B:22:B1:A5:99:13:4F:45:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4cece0f-9822-47f8-877a-25441688154f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4cece0f-9822-47f8-877a-25441688154f/e27c8e9b-1a49-3850-84f3-8e5fa7b6a4cd.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     376
IP address blocks:        204.19.2.0/24 maxlen: 24
                          204.19.3.0/24 maxlen: 24
                          204.19.4.0/24 maxlen: 24
                          204.19.5.0/24 maxlen: 24
                          204.19.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4cece0f-9822-47f8-877a-25441688154f/f4cece0f-9822-47f8-877a-25441688154f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4cece0f-9822-47f8-877a-25441688154f/f4cece0f-9822-47f8-877a-25441688154f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4cece0f-9822-47f8-877a-25441688154f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:83:b7:42:45:b0:82:0c:3d:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cece0f-9822-47f8-877a-25441688154f
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=6baa18e5-cb61-461a-be46-bc386461433a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fa:39:85:b8:3a:b5:b6:0a:cd:70:0a:1b:4f:
                    5f:4b:a6:0a:b7:bd:50:29:94:68:88:70:f7:ad:34:
                    86:f9:0d:af:ae:37:c3:5d:e6:f9:0a:8a:e1:6b:0d:
                    d9:96:83:c4:4f:77:53:5d:89:05:3e:f8:6a:38:12:
                    32:a0:9c:a0:a3:80:9b:80:f5:88:1e:41:0f:5c:d9:
                    79:b7:1b:0f:6c:c9:4f:a7:3e:f9:8f:09:2e:9f:dd:
                    76:3c:8a:00:80:7b:f9:29:f0:2f:14:b5:04:dc:b8:
                    b2:c8:d3:80:ca:c0:c6:f3:27:c3:2a:ac:27:80:dc:
                    39:45:71:69:3d:18:1a:79:37:76:be:17:66:27:4c:
                    0f:14:c6:58:33:0a:7b:d3:28:12:59:f5:d4:b3:43:
                    fb:47:f0:bd:75:aa:51:64:7e:11:ea:84:df:ed:3d:
                    df:94:20:e3:2c:0b:08:e8:ea:e2:c3:31:6c:d2:60:
                    c2:de:d9:3d:d1:d0:51:c8:7b:9f:83:be:78:28:2d:
                    dc:4c:1c:e6:c6:21:22:14:db:ed:c7:61:1d:1f:06:
                    d6:8d:58:23:15:7d:81:21:a2:05:0e:32:ac:c5:44:
                    ce:d3:f1:4b:59:53:08:5e:ac:ce:19:e8:f7:63:6a:
                    6a:8a:6a:39:ff:85:82:ce:ae:b9:9c:26:23:c1:23:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E4:6C:79:A8:CD:91:73:1F:00:B5:53:5D:5C:54:41:43:BB:42:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4cece0f-9822-47f8-877a-25441688154f/e27c8e9b-1a49-3850-84f3-8e5fa7b6a4cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4cece0f-9822-47f8-877a-25441688154f/f4cece0f-9822-47f8-877a-25441688154f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:5B:61:5E:4B:4F:3F:FB:95:EE:5A:5B:22:B1:A5:99:13:4F:45:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4cece0f-9822-47f8-877a-25441688154f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.2.0-204.19.6.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:69:9e:01:b7:ed:15:25:8e:6e:e9:93:dc:c5:0e:54:dc:53:
         d6:65:fb:34:41:5c:bb:ff:e9:45:a2:51:11:74:dc:7f:ff:7a:
         b4:a4:17:51:32:39:33:be:3b:eb:71:92:68:0f:1a:2c:8a:76:
         7f:0b:c2:e3:dd:1a:96:2f:3a:73:8e:0a:32:82:53:00:c9:f7:
         0a:99:54:ee:09:5d:8d:dd:ce:38:76:3a:0e:ae:63:6d:16:8a:
         47:88:6f:a7:dc:d6:54:49:35:f9:bf:42:02:18:50:2c:ad:ee:
         17:61:75:e5:6d:23:94:2f:b2:30:2d:f2:1f:ae:c9:81:ed:87:
         fa:37:1b:c2:20:9c:90:f2:a1:4d:66:19:ed:aa:d4:5b:31:33:
         46:c4:21:72:b3:ff:5a:a9:e0:f0:5c:b0:85:67:53:d7:21:92:
         a9:35:b9:cb:5c:2c:a3:e5:0f:2b:f7:cc:eb:55:31:1f:c2:33:
         af:54:92:12:bb:1a:99:8a:df:83:f2:d5:fd:87:fb:43:72:f6:
         09:02:0a:a6:e7:fe:97:53:f7:71:a8:ed:9b:09:02:b5:37:07:
         5a:1d:b9:24:53:d0:5d:df:97:dc:4f:cf:3f:b7:67:02:ee:46:
         58:1b:9f:84:11:e0:2d:1c:1b:21:8d:72:0c:a3:e6:c4:c8:8e:
         f0:da:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:23:14 2026 by rpki-client