Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/dc14a151-76bb-3e40-b3d6-76f9d7e5316c.roa
File:                     dc14a151-76bb-3e40-b3d6-76f9d7e5316c.roa (raw, json)
Hash identifier:          I81mN/++EtXjOi+B4oG/VBNj2zJRYHb9MKRTxbivUjQ=
Subject key identifier:   2D:57:F0:7B:7D:BB:12:81:5E:F2:07:70:A6:26:35:95:5D:BD:3D:41
Certificate issuer:       /CN=de519df3-4594-450e-ac51-a7e085408381
Certificate serial:       010D0C9F4328584D52EF7EDCC53BDB489C8A7380
Authority key identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/dc14a151-76bb-3e40-b3d6-76f9d7e5316c.roa
Signing time:             Sun 29 Mar 2026 01:00:24 +0000
ROA not before:           Sun 29 Mar 2026 01:00:24 +0000
ROA not after:            Sat 27 Jun 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        209.205.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:ef:7e:dc:c5:3b:db:48:9c:8a:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de519df3-4594-450e-ac51-a7e085408381
        Validity
            Not Before: Mar 29 01:00:24 2026 GMT
            Not After : Jun 27 01:00:24 2026 GMT
        Subject: CN=fdfb4496-32b6-4edc-8d9c-60d7d38a672f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:9d:82:de:33:8d:68:e0:a3:22:52:f2:b8:
                    9f:2a:af:e2:dc:d8:18:98:89:09:5d:27:81:43:07:
                    d0:ad:1b:37:0f:0e:ab:64:7f:e5:4e:ce:db:7a:38:
                    90:5c:ad:f4:81:92:4a:18:60:2a:d9:c0:89:89:20:
                    10:cd:af:a6:b9:e3:18:f3:ae:df:f6:96:90:4b:88:
                    f1:71:0e:f6:0f:5b:05:d1:4a:d7:ed:3d:16:76:8a:
                    8e:90:2a:72:34:74:54:b1:99:db:c4:a9:76:5e:56:
                    25:48:36:2a:32:e4:b4:ce:66:da:6a:4b:d2:82:1c:
                    bf:0f:dd:70:e4:db:b7:cb:b9:7c:93:68:be:97:52:
                    24:6c:c9:8f:e8:1f:99:4f:7a:06:b6:2c:ed:c3:c6:
                    4e:79:87:e4:73:bb:a0:3c:a5:05:d2:6d:96:4d:c6:
                    1f:50:46:31:d8:2f:73:fb:eb:08:39:68:fd:fa:d3:
                    ef:3b:d6:26:14:88:ff:ab:dd:d6:18:7f:54:37:bc:
                    2f:61:a0:d7:96:cf:e0:f6:ac:a4:33:47:be:c5:bf:
                    90:ed:5d:3c:ec:67:45:ec:ea:5f:16:85:3a:7c:6d:
                    94:3f:94:97:1d:98:3f:1d:f9:4e:da:de:40:9e:4a:
                    eb:8a:81:1c:21:a7:d6:cd:39:6d:c4:c4:1f:50:88:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:57:F0:7B:7D:BB:12:81:5E:F2:07:70:A6:26:35:95:5D:BD:3D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/dc14a151-76bb-3e40-b3d6-76f9d7e5316c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl

            X509v3 Authority Key Identifier:
                keyid:59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.205.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4d:93:75:97:40:5d:7f:d8:49:14:df:39:91:66:be:73:49:
         21:0a:15:d7:fa:64:e3:e3:67:a4:0d:47:ba:36:a9:6e:be:d9:
         4c:eb:d4:61:24:4f:71:33:dd:11:49:0b:bf:6a:33:81:8f:f1:
         ad:80:ea:d8:c2:ce:4a:40:f5:f0:5c:04:90:a0:13:28:71:06:
         f3:c4:c4:d0:35:e7:07:33:4e:d5:32:e6:20:55:c6:e4:a1:0f:
         7b:89:5e:6e:3b:6c:56:67:2f:03:f0:1e:8c:60:8e:5c:b7:51:
         68:af:05:0f:d0:6b:14:45:0a:ed:90:05:b4:88:9d:b3:c6:f3:
         58:f4:e2:d5:aa:23:15:ee:03:59:62:a4:67:ce:18:4b:fe:e5:
         68:92:2b:0e:e9:3b:55:77:58:f6:dc:d0:2f:26:ec:84:1b:84:
         45:77:d6:11:e9:8a:44:37:61:db:a7:c4:c5:db:61:6d:8e:ee:
         57:5a:84:09:31:3d:21:4a:c8:53:68:20:b4:49:fd:39:0d:27:
         dc:82:c6:fc:51:4f:4f:18:c3:a7:d7:85:33:b2:8b:b8:9e:55:
         53:b1:20:a9:a2:2f:12:ce:f1:f8:77:42:24:c1:00:ee:8c:fc:
         eb:47:03:22:d3:1f:62:3d:b7:ba:9a:2e:ed:ee:6a:3b:bb:0f:
         a7:89:8c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:10 2026 by rpki-client