Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/ec3fed5d-f9e7-3a2c-9f4b-b27b16e6e4af.roa
File:                     ec3fed5d-f9e7-3a2c-9f4b-b27b16e6e4af.roa (raw, json)
Hash identifier:          7Num7o2mFAdEwHAFCrSDR1ncIapZ0u2nGTAcsbegMqc=
Subject key identifier:   A0:12:C3:5E:CF:A7:C3:40:A5:A4:5A:62:0F:37:B2:D7:AC:8D:DC:97
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584D571FAD587ED13566BBA295C0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/ec3fed5d-f9e7-3a2c-9f4b-b27b16e6e4af.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     12129
IP address blocks:        205.251.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:ad:58:7e:d1:35:66:bb:a2:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=9d60cd79-02ec-40c6-9e09-7d865bcd1160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:8d:53:6e:47:1e:30:e3:b3:a7:a7:e9:41:
                    d2:66:da:fc:a5:d9:81:10:d9:5a:cf:65:79:1b:f5:
                    3d:5e:02:f8:d2:b3:7b:f9:e2:39:b9:91:88:a3:a1:
                    2a:04:b5:9a:ab:a2:77:63:1f:cb:57:6f:d3:79:e0:
                    a8:af:77:43:30:84:b1:4c:5a:b6:61:99:e0:80:ed:
                    6a:3e:f4:47:6c:b2:f2:9e:0d:14:79:71:b7:be:c6:
                    94:f4:55:4a:b6:c6:c3:b3:d6:f8:71:0f:cb:f5:9f:
                    fa:61:62:2f:1d:05:06:ea:bf:d2:ce:ff:c0:7e:4f:
                    67:74:85:52:77:89:01:7c:12:2b:97:bd:54:b6:db:
                    a3:ab:54:ff:07:f8:19:d1:d0:96:c9:da:15:b9:d6:
                    f3:c5:ed:0c:be:9d:86:df:c6:81:51:de:a4:95:65:
                    ea:eb:21:b3:3c:b4:74:6b:2e:b6:9b:f4:57:18:6d:
                    dd:d0:18:54:5c:38:96:1e:61:6c:d3:ef:b6:9b:6e:
                    9d:3d:a7:9b:52:a2:8f:68:38:f4:3f:ff:cf:3f:59:
                    9f:e8:58:da:c9:fe:b8:da:38:78:ba:36:d9:51:ca:
                    d8:03:0c:9f:8f:5c:e0:cf:2a:dd:85:c1:5a:df:2e:
                    1e:fe:99:ca:35:a2:d5:20:99:7a:90:af:78:b6:28:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:12:C3:5E:CF:A7:C3:40:A5:A4:5A:62:0F:37:B2:D7:AC:8D:DC:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/ec3fed5d-f9e7-3a2c-9f4b-b27b16e6e4af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:18:cb:ec:37:4f:02:c6:07:0f:ab:ef:4e:96:3b:48:d2:27:
         a8:29:45:d5:1d:43:9a:4c:e7:a6:1d:3b:2d:fe:df:2c:22:11:
         fb:c1:18:a1:2d:69:82:36:36:d5:e4:43:74:6f:07:2a:ff:7f:
         3a:84:58:78:f7:d8:e3:98:99:1e:bd:d9:77:5a:6b:33:dd:7c:
         ed:9e:b0:9b:91:2c:fb:89:b2:36:09:39:17:c1:c3:f3:0f:1b:
         17:32:94:86:63:e2:35:b4:49:05:87:00:75:88:2e:25:bc:dc:
         71:20:b7:c8:ee:16:ad:d9:d2:11:48:a2:e3:38:35:b1:8b:9b:
         88:35:3d:da:fe:75:ce:5a:aa:80:86:87:ec:3b:97:d6:89:de:
         10:05:1a:19:ba:34:3c:24:a6:c3:42:ed:04:6e:f9:85:7e:f6:
         23:8f:43:52:c4:cb:53:cc:05:7f:67:c0:da:d1:10:3b:f8:03:
         41:03:68:19:88:c9:80:75:73:5e:d6:0a:e5:10:89:93:26:b0:
         4d:33:b8:fb:47:d0:66:4f:28:9c:7f:90:3e:fc:44:a0:8d:ac:
         83:49:a9:a2:6b:73:ba:67:6f:da:ad:cb:e6:6c:fa:c8:ba:64:
         b0:b8:b7:d7:45:6f:f6:eb:46:06:12:a8:ed:45:1b:2e:57:b5:
         db:4c:f8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:45:04 2026 by rpki-client