Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d0d7641f-1b45-3648-bbf9-4e02129371b5.roa
File:                     d0d7641f-1b45-3648-bbf9-4e02129371b5.roa (raw, json)
Hash identifier:          XRkzBWONicGil3HSLUDe33poilHWQfYI9WUT6Vq3l1o=
Subject key identifier:   FC:63:7A:49:84:8C:D7:C1:ED:47:B2:2D:05:EB:5A:3F:32:0B:86:69
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584F374D2E2B6660704DBFC8A384
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d0d7641f-1b45-3648-bbf9-4e02129371b5.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     23470
IP address blocks:        206.221.176.0/24 maxlen: 24
                          206.221.177.0/24 maxlen: 24
                          206.221.178.0/24 maxlen: 24
                          206.221.179.0/24 maxlen: 24
                          206.221.180.0/24 maxlen: 24
                          206.221.181.0/24 maxlen: 24
                          206.221.182.0/24 maxlen: 24
                          206.221.183.0/24 maxlen: 24
                          206.221.184.0/24 maxlen: 24
                          206.221.185.0/24 maxlen: 24
                          206.221.186.0/24 maxlen: 24
                          206.221.187.0/24 maxlen: 24
                          206.221.188.0/24 maxlen: 24
                          206.221.189.0/24 maxlen: 24
                          206.221.190.0/24 maxlen: 24
                          206.221.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:2e:2b:66:60:70:4d:bf:c8:a3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=a056473e-d947-4574-8955-da9ab154f26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:67:1f:f7:85:57:90:54:0e:01:f9:76:e5:
                    d8:94:24:95:bf:b4:40:07:e5:4d:07:bd:32:0a:38:
                    3a:ad:6c:33:73:11:a6:57:b9:e3:43:59:93:a5:04:
                    6d:4f:1a:22:dc:5a:7a:e9:c4:a1:a0:70:9f:79:1c:
                    06:db:99:4a:6d:1b:41:26:9e:f2:2f:eb:f7:ee:01:
                    1d:64:f9:84:c6:29:a0:73:3b:9d:91:8c:86:41:ba:
                    53:6f:14:5a:5f:e0:ff:96:8e:5b:65:c5:a5:63:18:
                    6e:09:3d:1a:e7:bc:cd:c8:d0:88:67:af:05:e4:7c:
                    10:f9:f8:40:86:3b:cc:b1:d7:3f:bf:ad:06:ce:04:
                    0a:10:ff:46:2b:58:ec:f7:d3:a5:90:11:4f:97:31:
                    aa:f1:c3:4a:c3:69:22:c5:29:8b:7c:29:49:1f:e7:
                    92:3d:75:60:bf:c5:60:c1:98:0a:c6:63:c3:25:29:
                    68:90:6b:9f:a4:e7:af:d8:f2:f1:f5:c6:05:81:13:
                    d0:53:7b:47:f0:9b:4e:fc:c1:3a:fa:0e:3b:ba:e1:
                    f9:aa:35:20:38:aa:93:f7:4d:52:fa:ba:89:cf:62:
                    ed:bd:1a:d1:f1:88:21:6d:27:b5:ed:76:6a:1d:55:
                    07:ea:bb:d4:85:ff:e5:b1:80:e7:8b:63:15:d6:b7:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:63:7A:49:84:8C:D7:C1:ED:47:B2:2D:05:EB:5A:3F:32:0B:86:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d0d7641f-1b45-3648-bbf9-4e02129371b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.221.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:89:bf:36:ee:09:bf:af:98:7c:f4:0f:ac:5a:17:8a:30:a7:
         b5:6b:3d:bf:fd:ad:39:1c:3d:03:d3:3c:6f:87:23:e6:1f:ce:
         55:c6:28:30:4e:83:f5:93:ff:e4:fa:91:56:a6:98:fa:15:95:
         5c:06:a9:b6:80:60:7d:51:4a:2a:e5:2f:74:2e:3c:33:48:ab:
         55:e3:b7:2b:57:0c:ec:c4:09:47:c6:ac:c8:6a:03:3e:d7:6c:
         a9:25:df:31:a6:4a:af:f7:df:f4:a2:59:ce:25:a4:87:80:d8:
         63:e7:c1:88:46:f4:7e:82:6d:b0:e1:c0:e4:0a:d2:02:2c:d4:
         40:e1:19:c1:ed:a2:99:6a:46:13:6e:63:44:39:70:ab:6f:d2:
         ba:a5:c8:ad:7b:15:4c:63:53:96:14:64:f9:d1:1a:01:36:d9:
         69:90:7f:67:7d:12:29:45:e3:a6:d9:a9:6e:b8:9d:30:e9:6e:
         ff:56:d4:82:65:3f:7e:1c:22:92:3a:98:de:3f:a3:4a:09:3e:
         fc:96:02:66:0e:61:16:a5:a5:f8:c7:0f:f6:ed:a2:a8:05:c5:
         1a:c8:8d:73:b1:a5:af:7a:23:58:2c:74:36:7c:7d:03:f5:e9:
         20:e7:78:37:ad:82:a0:f4:cc:95:b1:c5:7a:36:b2:e1:63:6a:
         1e:e4:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:21:40 2026 by rpki-client