Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/c90e2625-0edf-3ea1-8dd0-bbdcf75e7a3b.roa
File:                     c90e2625-0edf-3ea1-8dd0-bbdcf75e7a3b.roa (raw, json)
Hash identifier:          6zmd0XxsHAkUWjgBOIQ7YIs6eC5vRJU0+fEDjDkGHBY=
Subject key identifier:   AB:56:B7:AB:54:50:9A:BC:C5:6D:63:9D:10:B5:5E:84:F0:47:20:D5
Certificate issuer:       /CN=fc497fdb-8215-4a6e-8eb3-f882f68c64a6
Certificate serial:       010D0C9F4328584F1467ACBC6018CEBB4009F288
Authority key identifier: 39:FA:84:98:BF:A7:E6:20:75:02:EA:56:12:5F:1F:3B:F4:1F:CF:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/c90e2625-0edf-3ea1-8dd0-bbdcf75e7a3b.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     397417
IP address blocks:        204.17.249.0/24 maxlen: 24
                          204.17.250.0/23 maxlen: 23
                          204.17.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:ac:bc:60:18:ce:bb:40:09:f2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc497fdb-8215-4a6e-8eb3-f882f68c64a6
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=da1c4ec6-2554-40da-9373-578e54c8ff00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:db:4a:b8:ff:61:50:89:2c:aa:a1:3a:99:
                    cc:27:98:82:a2:bf:8e:f9:d5:eb:ac:2b:be:62:b9:
                    0e:18:4f:90:5b:f9:f1:2e:ad:0b:40:71:a4:d8:db:
                    ac:45:f6:b4:41:2b:34:99:32:84:02:49:1f:d8:98:
                    ca:b0:43:d8:c9:8f:aa:04:c4:c9:90:ab:03:77:d3:
                    1f:0e:1b:e5:ae:15:b2:c0:a1:7f:b5:b8:1f:d0:25:
                    e3:55:c0:c4:7f:4f:ee:e4:91:29:93:19:67:90:98:
                    2b:be:6e:bc:b0:48:bc:1c:01:d3:d3:0d:65:7b:8d:
                    28:b7:85:5a:73:40:a7:6b:76:52:f1:8f:64:af:ea:
                    c7:9c:85:6f:62:63:76:a3:b5:26:90:2f:4a:c4:0c:
                    2e:e8:f4:cb:74:57:13:eb:ef:9c:26:3a:93:19:94:
                    aa:29:84:0a:d4:5d:b6:4d:a8:d3:67:f7:8f:4c:44:
                    50:f9:2e:ee:e1:9a:ac:67:5d:42:4f:b6:60:bb:ef:
                    a8:81:f3:a8:67:24:bc:12:2f:24:fe:7b:bd:d5:1b:
                    d0:ce:5b:a5:d2:d8:f7:3c:00:8a:52:30:4d:8e:50:
                    2b:88:24:12:d8:75:74:d1:9b:ae:b5:c1:33:93:5e:
                    36:bd:9e:27:9b:32:11:b6:25:b4:49:e2:a7:51:95:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:56:B7:AB:54:50:9A:BC:C5:6D:63:9D:10:B5:5E:84:F0:47:20:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/c90e2625-0edf-3ea1-8dd0-bbdcf75e7a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.crl

            X509v3 Authority Key Identifier:
                keyid:39:FA:84:98:BF:A7:E6:20:75:02:EA:56:12:5F:1F:3B:F4:1F:CF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fc497fdb-8215-4a6e-8eb3-f882f68c64a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.17.249.0-204.17.253.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:74:05:f2:4c:1f:4b:50:22:8e:a2:3c:b2:de:dd:4f:fa:0d:
         d6:43:5c:dd:32:6f:cf:ce:bc:77:84:2e:4d:82:2a:83:b3:a6:
         aa:bf:66:6a:b5:aa:b6:39:30:81:a0:e6:46:46:22:c1:63:ee:
         c2:a4:28:04:19:14:2a:da:3f:a4:3e:d0:37:02:8f:5b:c0:8a:
         df:29:25:de:81:39:ad:83:93:c9:92:d7:fc:1b:2d:54:75:05:
         ff:e3:03:82:24:80:f0:0f:15:a9:07:d5:85:4d:52:62:44:75:
         2f:5b:97:60:ba:46:54:89:ce:71:a9:da:86:76:f7:cf:ab:fa:
         30:be:0d:3a:1d:a5:1f:c5:17:92:9d:50:7b:90:41:d0:01:48:
         37:c6:61:a7:5c:95:19:f6:0f:50:38:b1:d5:d9:02:aa:e5:25:
         ac:a7:e0:d6:e4:d1:2a:dc:1c:4c:19:9f:cf:58:df:98:a7:58:
         c8:46:cf:ff:b8:a1:65:0d:1a:59:13:1d:9e:ea:2e:8c:8c:14:
         2c:4d:53:24:6b:91:96:3f:5d:fb:bd:a4:d9:c3:45:c6:4a:57:
         9a:97:15:d3:11:e0:40:10:9f:2c:39:e1:70:16:95:73:47:6b:
         62:98:0e:89:76:12:5f:8f:55:83:65:30:6f:89:6e:73:fe:c4:
         b8:23:91:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:57:10 2026 by rpki-client